4 papers · 1 filter
Data Preparation for Software Vulnerability Prediction: A Systematic Literature Review
Roland Croft, Yongzheng Xie, M. Ali Babar
Software Vulnerability Prediction (SVP) is a data-driven technique for software quality assurance that has recently gained considerable attention in the Software Engineering resear…
DeepCVA: Automated Commit-level Vulnerability Assessment with Deep Multi-task Learning
Triet H. M. Le, David Hin, Roland Croft +1
It is increasingly suggested to identify Software Vulnerabilities (SVs) in code commits to give early warnings about potential security risks. However, there is a lack of effort to…
An Empirical Study of Rule-Based and Learning-Based Approaches for Static Application Security Testing
Roland Croft, Dominic Newlands, Ziyu Chen +1
Background: Static Application Security Testing (SAST) tools purport to assist developers in detecting security issues in source code. These tools typically use rule-based approach…
An Empirical Study of Developers' Discussions about Security Challenges of Different Programming Languages
Roland Croft, Yongzheng Xie, Mansooreh Zahedi +2
Given programming languages can provide different types and levels of security support, it is critically important to consider security aspects while selecting programming language…