Enhancing security patch identification by capturing structures in commits

• Main Authors: WU, Bozhi, LIU, Shangqing, FENG, Ruitao, XIE, Xiaofei, SIOW, Jingkai, LIN, Shang-Wei
• Format: text
• Language: English
• Published: Institutional Knowledge at Singapore Management University 2022
• Subjects: Security Patch Identification; Graph Neural Networks; Abstract Syntax Tree; Graphics and Human Computer Interfaces; Information Security; OS and Networks
• Online Access: https://ink.library.smu.edu.sg/sis_research/7500; https://ink.library.smu.edu.sg/context/sis_research/article/8503/viewcontent/2207.09022.pdf
• Institution: Singapore Management University

With the rapid increasing number of open source software (OSS), the majority of the software vulnerabilities in the open source components are fixed silently, which leads to the deployed software that integrated them being unable to get a timely update. Hence, it is critical to design a security pat...