Fine-grained commit-level vulnerability type prediction by CWE tree structure

• Main Authors: PAN, Shengyi, BAO, Lingfeng, XIA, Xin, LO, David, LI, Shanping
• Format: text
• Language: English
• Published: Institutional Knowledge at Singapore Management University 2023
• Subjects: Codes; Data integrity; Computer architecture; Inference algorithms; Classification algorithms; Software security; Task analysis; Common Weakness Enumeration; Artificial Intelligence and Robotics; Information Security
• Online Access: https://ink.library.smu.edu.sg/sis_research/8511; https://ink.library.smu.edu.sg/context/sis_research/article/9514/viewcontent/ICSE2023.pdf
• Institution: Singapore Management University

Identifying security patches via code commits to allow early warnings and timely fixes for Open Source Software (OSS) has received increasing attention. However, the existing detection methods can only identify the presence of a patch (i.e., a binary classification) but fail to pinpoint the vulnerab...