5 papers · 1 filter
Towards Better Static Code Analysis Reports: Sentence Transformer-based Filtering of Non-Actionable Alerts
Tamás Aladics, Norbert Vándor, Rudolf Ferenc +1
Static code analysis (SCA) tools are widely used as effective ways to detect bugs and vulnerabilities in software systems. However, the reports generated by these tools often conta…
Enhanced Bug Prediction in JavaScript Programs with Hybrid Call-Graph Based Invocation Metrics
Gábor Antal, Zoltán Tóth, Péter Hegedűs +1
Bug prediction aims at finding source code elements in a software system that are likely to contain defects. Being aware of the most error-prone parts of the program, one can effic…
An AST-based Code Change Representation and its Performance in Just-in-time Vulnerability Prediction
Tamás Aladics, Péter Hegedűs, Rudolf Ferenc
The presence of software vulnerabilities is an ever-growing issue in software development. In most cases, it is desirable to detect vulnerabilities as early as possible, preferably…
A Comparison of Different Source Code Representation Methods for Vulnerability Prediction in Python
Amirreza Bagheri, Péter Hegedűs
In the age of big data and machine learning, at a time when the techniques and methods of software development are evolving rapidly, a problem has arisen: programmers can no longer…
Exploring the Security Awareness of the Python and JavaScript Open Source Communities
Gábor Antal, Márton Keleti, Péter Hegedűs
Software security is undoubtedly a major concern in today's software engineering. Although the level of awareness of security issues is often high, practical experiences show that…