Matches in SemOpenAlex for { <https://semopenalex.org/work/W2946283185> ?p ?o ?g. }
- W2946283185 abstract "Context: Software security is an imperative aspect of software quality. Early detection of vulnerable code during development can better ensure the security of the codebase and minimize testing efforts. Although traditional software metrics are used for early detection of vulnerabilities, they do not clearly address the granularity level of the issue to precisely pinpoint vulnerabilities. The goal of this study is to employ method-level traceable patterns (nano-patterns) in vulnerability prediction and empirically compare their performance with traditional software metrics. The concept of nano-patterns is similar to design patterns, but these constructs can be automatically recognized and extracted from source code. If nano-patterns can better predict vulnerable methods compared to software metrics, they can be used in developing vulnerability prediction models with better accuracy. Aims: This study explores the performance of method-level patterns in vulnerability prediction. We also compare them with method-level software metrics. Method: We studied vulnerabilities reported for two major releases of Apache Tomcat (6 and 7), Apache CXF, and two stand-alone Java web applications. We used three machine learning techniques to predict vulnerabilities using nano-patterns as features. We applied the same techniques using method-level software metrics as features and compared their performance with nano-patterns. Results: We found that nano-patterns show lower false negative rates for classifying vulnerable methods (for Tomcat 6, 21% vs 34.7%) and therefore, have higher recall in predicting vulnerable code than the software metrics used. On the other hand, software metrics show higher precision than nano-patterns (79.4% vs 76.6%). Conclusion: In summary, we suggest developers use nano-patterns as features for vulnerability prediction to augment existing approaches as these code constructs outperform standard metrics in terms of prediction recall." @default.
- W2946283185 created "2019-05-29" @default.
- W2946283185 creator A5035247633 @default.
- W2946283185 creator A5054515371 @default.
- W2946283185 creator A5078536980 @default.
- W2946283185 date "2018-12-01" @default.
- W2946283185 modified "2023-10-14" @default.
- W2946283185 title "A Comparison of Nano-Patterns vs. Software Metrics in Vulnerability Prediction" @default.
- W2946283185 cites W1563088657 @default.
- W2946283185 cites W1964962870 @default.
- W2946283185 cites W1979810153 @default.
- W2946283185 cites W1997236144 @default.
- W2946283185 cites W1997646511 @default.
- W2946283185 cites W2004758929 @default.
- W2946283185 cites W2025043404 @default.
- W2946283185 cites W2036901096 @default.
- W2946283185 cites W2038561409 @default.
- W2946283185 cites W2043837581 @default.
- W2946283185 cites W2055765785 @default.
- W2946283185 cites W2056878746 @default.
- W2946283185 cites W2069205948 @default.
- W2946283185 cites W2091073498 @default.
- W2946283185 cites W2100310618 @default.
- W2946283185 cites W2137789775 @default.
- W2946283185 cites W2150866946 @default.
- W2946283185 cites W2154398797 @default.
- W2946283185 cites W2155524176 @default.
- W2946283185 cites W2167352226 @default.
- W2946283185 cites W2172100572 @default.
- W2946283185 cites W2297096600 @default.
- W2946283185 cites W2504360466 @default.
- W2946283185 cites W2508791575 @default.
- W2946283185 cites W2521698904 @default.
- W2946283185 cites W2607665225 @default.
- W2946283185 cites W2748690817 @default.
- W2946283185 doi "https://doi.org/10.1109/apsec.2018.00050" @default.
- W2946283185 hasPublicationYear "2018" @default.
- W2946283185 type Work @default.
- W2946283185 sameAs 2946283185 @default.
- W2946283185 citedByCount "5" @default.
- W2946283185 countsByYear W29462831852020 @default.
- W2946283185 countsByYear W29462831852022 @default.
- W2946283185 countsByYear W29462831852023 @default.
- W2946283185 crossrefType "proceedings-article" @default.
- W2946283185 hasAuthorship W2946283185A5035247633 @default.
- W2946283185 hasAuthorship W2946283185A5054515371 @default.
- W2946283185 hasAuthorship W2946283185A5078536980 @default.
- W2946283185 hasConcept C1009929 @default.
- W2946283185 hasConcept C111919701 @default.
- W2946283185 hasConcept C117447612 @default.
- W2946283185 hasConcept C119857082 @default.
- W2946283185 hasConcept C124101348 @default.
- W2946283185 hasConcept C133237599 @default.
- W2946283185 hasConcept C151730666 @default.
- W2946283185 hasConcept C154945302 @default.
- W2946283185 hasConcept C22680326 @default.
- W2946283185 hasConcept C2777904410 @default.
- W2946283185 hasConcept C2779343474 @default.
- W2946283185 hasConcept C29983905 @default.
- W2946283185 hasConcept C38652104 @default.
- W2946283185 hasConcept C41008148 @default.
- W2946283185 hasConcept C51929080 @default.
- W2946283185 hasConcept C527648132 @default.
- W2946283185 hasConcept C529173508 @default.
- W2946283185 hasConcept C548217200 @default.
- W2946283185 hasConcept C62913178 @default.
- W2946283185 hasConcept C82214349 @default.
- W2946283185 hasConcept C86803240 @default.
- W2946283185 hasConcept C95713431 @default.
- W2946283185 hasConceptScore W2946283185C1009929 @default.
- W2946283185 hasConceptScore W2946283185C111919701 @default.
- W2946283185 hasConceptScore W2946283185C117447612 @default.
- W2946283185 hasConceptScore W2946283185C119857082 @default.
- W2946283185 hasConceptScore W2946283185C124101348 @default.
- W2946283185 hasConceptScore W2946283185C133237599 @default.
- W2946283185 hasConceptScore W2946283185C151730666 @default.
- W2946283185 hasConceptScore W2946283185C154945302 @default.
- W2946283185 hasConceptScore W2946283185C22680326 @default.
- W2946283185 hasConceptScore W2946283185C2777904410 @default.
- W2946283185 hasConceptScore W2946283185C2779343474 @default.
- W2946283185 hasConceptScore W2946283185C29983905 @default.
- W2946283185 hasConceptScore W2946283185C38652104 @default.
- W2946283185 hasConceptScore W2946283185C41008148 @default.
- W2946283185 hasConceptScore W2946283185C51929080 @default.
- W2946283185 hasConceptScore W2946283185C527648132 @default.
- W2946283185 hasConceptScore W2946283185C529173508 @default.
- W2946283185 hasConceptScore W2946283185C548217200 @default.
- W2946283185 hasConceptScore W2946283185C62913178 @default.
- W2946283185 hasConceptScore W2946283185C82214349 @default.
- W2946283185 hasConceptScore W2946283185C86803240 @default.
- W2946283185 hasConceptScore W2946283185C95713431 @default.
- W2946283185 hasLocation W29462831851 @default.
- W2946283185 hasOpenAccess W2946283185 @default.
- W2946283185 hasPrimaryLocation W29462831851 @default.
- W2946283185 hasRelatedWork W172611762 @default.
- W2946283185 hasRelatedWork W1980461916 @default.
- W2946283185 hasRelatedWork W3089348171 @default.
- W2946283185 hasRelatedWork W3136205849 @default.
- W2946283185 hasRelatedWork W3154383848 @default.
- W2946283185 hasRelatedWork W3177447400 @default.