6 papers
Towards Better Static Code Analysis Reports: Sentence Transformer-based Filtering of Non-Actionable Alerts
Tamás Aladics, Norbert Vándor, Rudolf Ferenc +1
Static code analysis (SCA) tools are widely used as effective ways to detect bugs and vulnerabilities in software systems. However, the reports generated by these tools often conta…
A Systematic Literature Review on Automated Exploit and Security Test Generation
Quang-Cuong Bui, Emanuele Iannone, Maria Camporese +7
The exploit or the Proof of Concept of the vulnerability plays an important role in developing superior vulnerability repair techniques, as it can be used as an oracle to verify th…
A Data-Mining Based Study of Security Vulnerability Types and Their Mitigation in Different Languages
Gábor Antal, Balázs Mosolygó, Norbert Vándor +1
The number of people accessing online services is increasing day by day, and with new users, comes a greater need for effective and responsive cyber-security. Our goal in this stud…
Enhanced Bug Prediction in JavaScript Programs with Hybrid Call-Graph Based Invocation Metrics
Gábor Antal, Zoltán Tóth, Péter Hegedűs +1
Bug prediction aims at finding source code elements in a software system that are likely to contain defects. Being aware of the most error-prone parts of the program, one can effic…
Challenging Machine Learning Algorithms in Predicting Vulnerable JavaScript Functions
Rudolf Ferenc, Péter Hegedűs, Péter Gyimesi +3
The rapid rise of cyber-crime activities and the growing number of devices threatened by them place software security issues in the spotlight. As around 90% of all attacks exploit…
Static JavaScript Call Graphs: A Comparative Study
Gábor Antal, Péter Hegedűs, Zoltán Tóth +2
The popularity and wide adoption of JavaScript both at the client and server side makes its code analysis more important than ever before. Most of the algorithms for vulnerability…