CHRONOS: Time-aware zero-shot identification of libraries from vulnerability reports

• Main Authors: LYU, Yunbo, CONG, Thanh Le, KANG, Hong Jin, WIDYASARI, Ratnadira, ZHAO, Zhipeng, LE, Xuan-Bach Dinh, LI, Ming, David LO
• Format: text
• Language: English
• Published: Institutional Knowledge at Singapore Management University 2023
• Subjects: Extreme multi-label classification; Library identification; Unseen labels; Vulnerability reports; Zero-shot learning; Artificial Intelligence and Robotics; Databases and Information Systems; Graphics and Human Computer Interfaces
• Online Access: https://ink.library.smu.edu.sg/sis_research/8512; https://ink.library.smu.edu.sg/context/sis_research/article/9515/viewcontent/2301.03944__1_.pdf
• Institution: Singapore Management University

Tools that alert developers about library vulnerabilities depend on accurate, up-to-date vulnerability databases which are maintained by security researchers. These databases record the libraries related to each vulnerability. However, the vulnerability reports may not explicitly list every library...