21 citations · 41 across the 11 of their papers we have counts for
10 papers · 1 filter
A Qualitative Study on Using ChatGPT for Software Security: Perception vs. Practicality
M. Mehdi Kholoosi, M. Ali Babar, Roland Croft
Artificial Intelligence (AI) advancements have enabled the development of Large Language Models (LLMs) that can perform a variety of tasks with remarkable semantic understanding an…
Data Quality for Software Vulnerability Datasets
Roland Croft, M. Ali Babar, Mehdi Kholoosi
The use of learning-based techniques to achieve automated software vulnerability detection has been of longstanding interest within the software security domain. These data-driven…
Noisy Label Learning for Security Defects
Roland Croft, M. Ali Babar, Huaming Chen
Data-driven software engineering processes, such as vulnerability prediction heavily rely on the quality of the data used. In this paper, we observe that it is infeasible to obtain…
An Investigation into Inconsistency of Software Vulnerability Severity across Data Sources
Roland Croft, M. Ali Babar, Li Li
Software Vulnerability (SV) severity assessment is a vital task for informing SV remediation and triage. Ranking of SV severity scores is often used to advise prioritization of pat…
Data Preparation for Software Vulnerability Prediction: A Systematic Literature Review
Roland Croft, Yongzheng Xie, M. Ali Babar
Software Vulnerability Prediction (SVP) is a data-driven technique for software quality assurance that has recently gained considerable attention in the Software Engineering resear…
DeepCVA: Automated Commit-level Vulnerability Assessment with Deep Multi-task Learning
Triet H. M. Le, David Hin, Roland Croft +1
It is increasingly suggested to identify Software Vulnerabilities (SVs) in code commits to give early warnings about potential security risks. However, there is a lack of effort to…
An Empirical Study of Rule-Based and Learning-Based Approaches for Static Application Security Testing
Roland Croft, Dominic Newlands, Ziyu Chen +1
Background: Static Application Security Testing (SAST) tools purport to assist developers in detecting security issues in source code. These tools typically use rule-based approach…
An Empirical Study of Developers' Discussions about Security Challenges of Different Programming Languages
Roland Croft, Yongzheng Xie, Mansooreh Zahedi +2
Given programming languages can provide different types and levels of security support, it is critically important to consider security aspects while selecting programming language…
A Large-scale Study of Security Vulnerability Support on Developer Q&A Websites
Triet H. M. Le, Roland Croft, David Hin +1
Context: Security Vulnerabilities (SVs) pose many serious threats to software systems. Developers usually seek solutions to addressing these SVs on developer Question and Answer (Q…
PUMiner: Mining Security Posts from Developer Question and Answer Websites with PU Learning
Triet H. M. Le, David Hin, Roland Croft +1
Security is an increasing concern in software development. Developer Question and Answer (Q&A) websites provide a large amount of security discussion. Existing studies have used hu…