Forecasting the risk of software choices: A model to foretell security vulnerabilities from library dependencies and source code evolution

Carlos E. Budde, Ranindya Paramitha, Fabio Massacci

Software security mainly studies vulnerability detection: is my code vulnerable today? This hinders risk estimation, so new approaches are emerging to forecast the occurrence of fu…