Automated identification of security issues from commit messages and bug reports

No abstract is available for this paper.

• Publication year

  2017

• Venue

  ESEC/SIGSOFT FSE

• Publication date

  2017-08-21

• Fields of study

  Computer Science, Engineering

• Identifiers
  DOI 10.1145/3106237.3117771
• External record

  Open on Semantic Scholar

• Source metadata

  Semantic Scholar

• No claims are published for this paper.

• No concepts are published for this paper.

• Malicious URL Detection using Machine Learning: A Survey

  2017cited by this paper
• Learning from imbalanced data: open challenges and future directions

  2016cited by this paper
• VCCFinder: Finding Potential Vulnerabilities in Open-Source Projects to Assist Code Audits

  2015cited by this paper
• Vulnerability Disclosure in the Age of Social Media: Exploiting Twitter for Predicting Real-World Exploits

  2015cited by this paper
• Automatic detection and correction of web application vulnerabilities using data mining to predict false positives

  2014cited by this paper
• Mining SQL injection and cross site scripting vulnerabilities using hybrid program analysis

  2013cited by this paper
• Distributed Representations of Words and Phrases and their Compositionality

  2013cited by this paper
• Mining Bug Databases for Unidentified Software Vulnerabilities

  2012cited by this paper
• A Review on Ensembles for the Class Imbalance Problem: Bagging-, Boosting-, and Hybrid-Based Approaches

  2012cited by this paper
• PHP Aspis: Using Partial Taint Tracking to Protect Against Injection Attacks

  2011cited by this paper
• KLEE: Unassisted and Automatic Generation of High-Coverage Tests for Complex Systems Programs

  2008cited by this paper
• CANDID: preventing sql injection attacks using dynamic candidate evaluations

  2007cited by this paper
• Exploratory Under-Sampling for Class-Imbalance Learning

  2006cited by this paper
• Balancing Training Data for Automated Annotation of Keywords: a Case Study

  2003cited by this paper
• SMOTE: Synthetic Minority Over-sampling Technique

  2002cited by this paper
• ITS4: a static vulnerability scanner for C and C++ code

  2000cited by this paper
• Symbolic execution and program testing

  1976cited by this paper

• Gated transformer network for multivariate security patch identification with mixture-of-experts

  2026cites this paper
• Few-shot learning for security bug report identification

  2026cites this paper
• Static Analysis Techniques for Embedded, Cyber-Physical, and Electronic Software Systems: A Comprehensive Survey

  2026cites this paper
• Favia: Forensic Agent for Vulnerability-fix Identification and Analysis

  2026cites this paper
• PatchDFF: A security patch identification method based on dual feature fusion

  2026cites this paper
• Mapping NVD Records to Their VFCs: How Hard is it?

  2025influential citation
• Not Every Patch is an Island: LLM-Enhanced Identification of Multiple Vulnerability Patches

  2025cites this paper
• Code vulnerability detection based on augmented program dependency graph and optimized CodeBERT

  2025cites this paper
• Towards Multi‐Class Socio‐Technical Congruence: Assessing Coordination in Collaborative Software Development Settings

  2025cites this paper
• One Bug, Hundreds Behind: LLMs for Large-Scale Bug Discovery

  2025cites this paper
• What Do They Fix? LLM-Aided Categorization of Security Patches for Critical Memory Bugs

  2025cites this paper
• Revisiting Vulnerability Patch Localization: An Empirical Study and LLM-Based Solution

  2025cites this paper
• VulGuard: An Unified Tool for Evaluating Just-In-Time Vulnerability Prediction Models

  2025cites this paper
• Exploring the Jupyter Ecosystem: An Empirical Study of Bugs and Vulnerabilities

  2025cites this paper
• Bug Classification in quantum software: a rule-based framework and its evaluation

  2025cites this paper
• Leveraging LLM Enhanced Commit Messages to Improve Machine Learning Based Test Case Prioritization

  2025cites this paper
• GPTs are not the silver bullet: Performance and challenges of using GPTs for security bug report identification

  2025cites this paper
• A Commit Classification Framework Incorporated With Prompt Tuning and External Knowledge

  2025cites this paper
• Evaluating API-Level Deep Learning Fuzzers: A Comprehensive Benchmarking Study

  2025cites this paper
• Fixseeker: An Empirical Driven Graph-based Approach for Detecting Silent Vulnerability Fixes in Open Source Software

  2025cites this paper
• An Empirical Study on Vulnerability Disclosure Management of Open Source Software Systems

  2025cites this paper
• VeriBin: Adaptive Verification of Patches at the Binary Level

  2025cites this paper
• AndroCom: A Real-World Android Applications’ Vulnerability Dataset to Assist with Automatically Detecting Vulnerabilities

  2025cites this paper
• Sóley: Automated detection of logic vulnerabilities in Ethereum smart contracts using large language models

  2025cites this paper
• A Match Made in Heaven? AI-driven Matching of Vulnerabilities and Security Unit Tests

  2025cites this paper
• Generative AI in Cybersecurity: A Comprehensive Review of LLM Applications and Vulnerabilities

  2025cites this paper
• Code Change Intention, Development Artifact, and History Vulnerability: Putting Them Together for Vulnerability Fix Detection by LLM

  2025cites this paper
• Automating the Detection of Code Vulnerabilities by Analyzing GitHub Issues

  2025cites this paper
• Optimising source code vulnerability detection using deep learning and deep graph network

  2025cites this paper
• Understanding Similarities and Differences Between Software Composition Analysis Tools

  2025cites this paper
• Where is it? Tracing the Vulnerability-Relevant Files from Vulnerability Reports

  2024cites this paper
• An Investigation of Patch Porting Practices of the Linux Kernel Ecosystem

  2024cites this paper
• Vulnerably (Mis)Configured? Exploring 10 Years of Developers' Q&As on Stack Overflow

  2024cites this paper
• A Comparative Study of Commit Representations for JIT Vulnerability Prediction

  2024cites this paper
• Improving Data Curation of Software Vulnerability Patches through Uncertainty Quantification

  2024influential citation
• Organizational Influence on Security Development in Open-Source Software Projects

  2024cites this paper
• A Systematic Literature Review on Automated Software Vulnerability Detection Using Machine Learning

  2024cites this paper
• A Comprehensive Review and Assessment of Cybersecurity Vulnerability Detection Methodologies

  2024cites this paper
• Taxonomy of Security-related Issues in Android Apps: An Empirical Study

  2024cites this paper
• VFDelta: A Framework for Detecting Silent Vulnerability Fixes by Enhancing Code Change Learning

  2024cites this paper
• KeyTitle: towards better bug report title generation by keywords planning

  2024cites this paper
• Learning Graph-based Patch Representations for Identifying and Assessing Silent Vulnerability Fixes

  2024cites this paper
• Vulnerabilities and Security Patches Detection in OSS: A Survey

  2024cites this paper
• Generative AI and Large Language Models for Cyber Security: All Insights You Need

  2024cites this paper
• JavaVFC: Java Vulnerability Fixing Commits from Open-source Software

  2024cites this paper
• Enhancing Source Code Security with LLMs: Demystifying The Challenges and Generating Reliable Repairs

  2024cites this paper
• Vulnerability discovery based on source code patch commit mining: a systematic literature review

  2024cites this paper
• History-Driven Fuzzing for Deep Learning Libraries

  2024cites this paper
• Towards a Block-Level Conformer-Based Python Vulnerability Detection

  2024cites this paper
• VF-Detector: Making Multi-Granularity Code Changes on Vulnerability Fix Detector Robust to Mislabeled Changes

  2024cites this paper
• Automatic Data Labeling for Software Vulnerability Prediction Models: How Far Are We?

  2024cites this paper
• PatchFinder: A Two-Phase Approach to Security Patch Tracing for Disclosed Vulnerabilities in Open-Source Software

  2024cites this paper
• Towards a Block-Level ML-Based Python Vulnerability Detection Tool

  2024cites this paper
• VulSim: Leveraging Similarity of Multi-Dimensional Neighbor Embeddings for Vulnerability Detection

  2024cites this paper
• Dual Prompt-Based Few-Shot Learning for Automated Vulnerability Patch Localization

  2024cites this paper
• Assessment of Vulnerability Severity in Power Monitoring System Based on Text Mining

  2024cites this paper
• Taxonomy of Security-related Issues in Android Apps: An Empirical Study

  2024cites this paper
• GitHub marketplace for automation and innovation in software production

  2024cites this paper
• VFCFinder: Pairing Security Advisories and Patches

  2024cites this paper
• Soley: Identification and Automated Detection of Logic Vulnerabilities in Ethereum Smart Contracts Using Large Language Models

  2024cites this paper
• Hash4Patch: A Lightweight Low False Positive Tool for Finding Vulnerability Patch Commits

  2024cites this paper
• AW4C: A Commit-Aware C Dataset for Actionable Warning Identification

  2024cites this paper
• On Security Weaknesses and Vulnerabilities in Deep Learning Systems

  2024influential citation
• Explaining the Contributing Factors for Vulnerability Detection in Machine Learning

  2024cites this paper
• DIP-ECOD: Improving Anomaly Detection in Multimodal Distributions

  2024cites this paper
• A Learning-Based Approach to Static Program Slicing

  2024cites this paper
• Automatic Static Vulnerability Detection for Machine Learning Libraries: Are We There Yet?

  2023cites this paper
• GraphSPD: Graph-Based Security Patch Detection with Enriched Code Semantics

  2023cites this paper
• PI-Link: A Ground-Truth Dataset of Links Between Pull-Requests and Issues in GitHub

  2023cites this paper
• CHRONOS: Time-Aware Zero-Shot Identification of Libraries from Vulnerability Reports

  2023cites this paper
• ML-Augmented Automation for Recovering Links Between Pull-Requests and Issues on GitHub

  2023cites this paper
• Silent Vulnerable Dependency Alert Prediction with Vulnerability Key Aspect Explanation

  2023cites this paper
• An AST-based Code Change Representation and its Performance in Just-in-time Vulnerability Prediction

  2023cites this paper
• An Unbiased Transformer Source Code Learning with Semantic Vulnerability Graph

  2023cites this paper
• A Systematic Mapping Study of the Advancement in Software Vulnerability Forecasting

  2023cites this paper
• Slice-Based Code Change Representation Learning

  2023cites this paper
• Multi-Granularity Detector for Vulnerability Fixes

  2023influential citation
• 18 million links in commit messages: purpose, evolution, and decay

  2023cites this paper
• Security Knowledge-Guided Fuzzing of Deep Learning Libraries

  2023cites this paper
• TS-GGNN: Combining Graph and Sequence Features for Vulnerability Detection in Source Code

  2023cites this paper
• A Survey on Automated Software Vulnerability Detection Using Machine Learning and Deep Learning

  2023influential citation
• It’s like flossing your teeth: On the Importance and Challenges of Reproducible Builds for Software Supply Chain Security

  2023cites this paper
• Automatic Static Bug Detection for Machine Learning Libraries: Are We There Yet?

  2023cites this paper
• Understanding and Tackling Label Errors in Deep Learning-Based Vulnerability Detection (Experience Paper)

  2023cites this paper
• RCGraph - A Tool to Integrate Readme and Commits through Temporal Knowledge Graphs

  2023cites this paper
• Exploring Security Commits in Python

  2023cites this paper
• Delving into Commit-Issue Correlation to Enhance Commit Message Generation Models

  2023cites this paper
• Code Vulnerability Detection via Signal-Aware Learning

  2023cites this paper
• Finding Fixed Vulnerabilities with Off-the-Shelf Static Analysis

  2023cites this paper
• Commit Classification Into Software Maintenance Activities: A Systematic Literature Review

  2023cites this paper
• Commit Message Can Help: Security Patch Detection in Open Source Software via Transformer

  2023cites this paper
• Detecting API Post-Handling Bugs Using Code and Description in Patches

  2023cites this paper
• Boosting Commit Classification with Contrastive Learning

  2023cites this paper
• Incorprating Prompt tuning for Commit classification with prior Knowledge

  2023cites this paper
• User Profiling and Vulnerability Introduction Prediction in Social Coding Repositories: A Dynamic Graph Embedding Approach: Vulnerability Introduction Prediction in Social Coding Repositories

  2023cites this paper
• Using ChatGPT as a Static Application Security Testing Tool

  2023cites this paper
• Which2learn: A Vulnerability Dataset Complexity Measurement Method for Data-Driven Detectors

  2023cites this paper
• Benchmarking Deep Learning Fuzzers

  2023cites this paper
• VFCFinder: Seamlessly Pairing Security Advisories and Patches

  2023cites this paper
• Commit-Level, Neural Vulnerability Detection and Assessment

  2023cites this paper