CoLeFunDa: Explainable silent vulnerability fix identification

• Main Authors: ZHOU, Jiayuan, PACHECO, Michael, CHEN, Jinfu, HU, Xing, XIA, Xin, LO, David, HASSAN, Ahmed E.
• Format: text
• Language: English
• Published: Institutional Knowledge at Singapore Management University 2023
• Subjects: Contrastive learning; Data augmentation; Disclosure policies; Down-stream; OSS vulnerability; Potential impacts; Security advisories; User need; Vulnerability disclosure; Vulnerability remediations; Databases and Information Systems; Information Security
• Online Access: https://ink.library.smu.edu.sg/sis_research/8513; https://ink.library.smu.edu.sg/context/sis_research/article/9516/viewcontent/CoLeFunDa_Explainable_Silent_Vulnerability_Fix_Identification.pdf
• Institution: Singapore Management University

It is common practice for OSS users to leverage and monitor security advisories to discover newly disclosed OSS vulnerabilities and their corresponding patches for vulnerability remediation. It is common for vulnerability fixes to be publicly available one week earlier than their disclosure. This ga...