Multi-Granularity Detector for Vulnerability Fixes

• Main Authors: NGUYEN, Truong Giang, CONG, Thanh Le, KANG, Hong Jin, WIDYASARI, Ratnadira, YANG, Chengran, ZHAO, Zhipeng, XU, Bowen, ZHOU, Jiayuan, XIA, Xin, HASSAN, Ahmed E., David LO, LO, David
• Format: text
• Language: English
• Published: Institutional Knowledge at Singapore Management University 2023
• Subjects: Vulnerability-fixing commit classification; Machine learning; Deep learning; Software security; Artificial Intelligence and Robotics; Information Security
• Online Access: https://ink.library.smu.edu.sg/sis_research/8508; https://ink.library.smu.edu.sg/context/sis_research/article/9511/viewcontent/2305.13884.pdf
• Institution: Singapore Management University

With the increasing reliance on Open Source Software, users are exposed to third-party library vulnerabilities. Software Composition Analysis (SCA) tools have been created to alert users of such vulnerabilities. SCA requires the identification of vulnerability-fixing commits. Prior works have propos...