中文
相关论文

相关论文: Automated Software Vulnerability Assessment with C…

200 篇论文

In applying deep learning for malware classification, it is crucial to account for the prevalence of malware evolution, which can cause trained classifiers to fail on drifted malware. Existing solutions to address concept drift use active…

密码学与安全 · 计算机科学 2024-12-23 Adrian Shuai Li , Arun Iyengar , Ashish Kundu , Elisa Bertino

Malware classification in dynamic environments presents a significant challenge due to concept drift, where the statistical properties of malware data evolve over time, complicating detection efforts. To address this issue, we propose a…

机器学习 · 计算机科学 2025-03-11 Bishwajit Prasad Gond , Durga Prasad Mohapatra

A key aspect of automating predictive machine learning entails the capability of properly triggering the update of the trained model. To this aim, suitable automatic solutions to self-assess the prediction quality and the data distribution…

机器学习 · 计算机科学 2019-07-19 Tania Cerquitelli , Stefano Proto , Francesco Ventura , Daniele Apiletti , Elena Baralis

In machine learning, concept drift is an evolution of information that invalidates the current data model. It happens when the statistical properties of the input data change over time in unforeseen ways. Concept drift detection is crucial…

机器学习 · 计算机科学 2024-06-21 Honorius Galmeanu , Razvan Andonie

There is an increasing trend to mine vulnerabilities from software repositories and use machine learning techniques to automatically detect software vulnerabilities. A fundamental but unresolved research question is: how do different…

软件工程 · 计算机科学 2024-06-07 Esma Mouine , Yan Liu , Lu Xiao , Rick Kazman , Xiao Wang

This paper explores the use of clustering methods and machine learning algorithms, including Natural Language Processing (NLP), to identify and classify problems identified in credit risk models through textual information contained in…

机器学习 · 计算机科学 2023-06-05 Szymon Lis , Mariusz Kubkowski , Olimpia Borkowska , Dobromił Serwa , Jarosław Kurpanik

Web applications continue to be a favorite target for hackers due to a combination of wide adoption and rapid deployment cycles, which often lead to the introduction of high impact vulnerabilities. Static analysis tools are important to…

密码学与安全 · 计算机科学 2022-01-19 Ibéria Medeiros , Nuno Neves , Miguel Correia

Software vulnerabilities can result in catastrophic cyberattacks that increasingly threaten business operations. Consequently, ensuring the safety of software systems has become a paramount concern for both private and public sectors.…

软件工程 · 计算机科学 2024-12-10 Boyu Zhang , Triet H. M. Le , M. Ali Babar

The presence and persistence of Android malware is an on-going threat that plagues this information era, and machine learning technologies are now extensively used to deploy more effective detectors that can block the majority of these…

密码学与安全 · 计算机科学 2022-08-10 Daniele Angioni , Luca Demetrio , Maura Pintor , Battista Biggio

Software vulnerabilities are usually caused by design flaws or implementation errors, which could be exploited to cause damage to the security of the system. At present, the most commonly used method for detecting software vulnerabilities…

软件工程 · 计算机科学 2021-05-03 Gaigai Tang , Lianxiao Meng , Shuangyin Ren , Weipeng Cao , Qiang Wang , Lin Yang

Current machine-learning based software vulnerability detection methods are primarily conducted at the function-level. However, a key limitation of these methods is that they do not indicate the specific lines of code contributing to…

密码学与安全 · 计算机科学 2022-03-28 David Hin , Andrey Kan , Huaming Chen , M. Ali Babar

The proliferation of software vulnerabilities poses a significant challenge for security databases and analysts tasked with their timely identification, classification, and remediation. With the National Vulnerability Database (NVD)…

密码学与安全 · 计算机科学 2024-03-05 Daniel Alfasi , Tal Shapira , Anat Bremler Barr

Being able to identify software discussions that are primarily about design, which we call design mining, can improve documentation and maintenance of software systems. Existing design mining approaches have good classification performance…

软件工程 · 计算机科学 2020-05-27 Alvi Mahadi , Karan Tongay , Neil A. Ernst

The number of newly published vulnerabilities is constantly increasing. Until now, the information available when a new vulnerability is published is manually assessed by experts using a Common Vulnerability Scoring System (CVSS) vector and…

密码学与安全 · 计算机科学 2022-10-06 Philipp Kuehn , David N. Relke , Christian Reuter

Software vulnerability detection is critical in software security because it identifies potential bugs in software systems, enabling immediate remediation and mitigation measures to be implemented before they may be exploited. Automatic…

软件工程 · 计算机科学 2023-06-21 Nima Shiri Harzevili , Alvine Boaye Belle , Junjie Wang , Song Wang , Zhen Ming , Jiang , Nachiappan Nagappan

In recent years, there has been an increasing interest in the application of Artificial Intelligence - and especially Machine Learning - to the field of Sustainable Development (SD). However, until now, NLP has not been applied in this…

计算与语言 · 计算机科学 2020-11-18 Costanza Conforti , Stephanie Hirmer , David Morgan , Marco Basaldella , Yau Ben Or

Open-source software vulnerability patch detection is a critical component for maintaining software security and ensuring software supply chain integrity. Traditional manual detection methods face significant scalability challenges when…

软件工程 · 计算机科学 2025-09-30 Haoran Xu , Chen Zhi , Junxiao Han , Xinkui Zhao , Jianwei Yin , Shuiguang Deng

The increasing frequency and sophistication of cybersecurity vulnerabilities in software systems underscores the need for more robust and effective vulnerability assessment methods. However, existing approaches often rely on highly…

密码学与安全 · 计算机科学 2025-05-21 Shivansh Chopra , Hussain Ahmad , Diksha Goel , Claudia Szabo

Concept drift is a significant challenge for malware detection, as the performance of trained machine learning models degrades over time, rendering them impractical. While prior research in malware concept drift adaptation has primarily…

机器学习 · 计算机科学 2024-01-24 Md Tanvirul Alam , Romy Fieblinger , Ashim Mahara , Nidhi Rastogi

The analysis of software requirement specifications (SRS) using Natural Language Processing (NLP) methods has been an important study area in the software engineering field in recent years. Especially thanks to the advances brought by deep…

软件工程 · 计算机科学 2023-01-03 Savas Yildirim , Mucahit Cevik , Devang Parikh , Ayse Basar