{"id":"https://openalex.org/W3113445786","doi":null,"title":"Learning To Predict Vulnerabilities From Vulnerability-Fixes: A Machine Translation Approach","display_name":"Learning To Predict Vulnerabilities From Vulnerability-Fixes: A Machine Translation Approach","publication_year":2020,"publication_date":"2020-12-21","ids":{"openalex":"https://openalex.org/W3113445786","mag":"3113445786"},"language":"en","primary_location":{"id":"mag:3113445786","doi":null,"is_oa":true,"landing_page_url":"https://arxiv.org/pdf/2012.11701.pdf","pdf_url":null,"source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":"2331-8422","issn":["2331-8422"],"is_oa":true,"is_in_doaj":false,"is_core":false,"listed_in":[],"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"arXiv (Cornell University)","raw_type":null},"volume":null,"type":"preprint","is_traditional":true,"indexed_in":[],"open_access":{"is_oa":true,"oa_status":"green","oa_url":"https://arxiv.org/pdf/2012.11701.pdf","any_repository_has_fulltext":true},"authorships":[{"author_position":"first","author":{"id":null,"display_name":"Aayush Garg","orcid":"https://orcid.org/0000-0002-2507-8846","observed_orcids":["https://orcid.org/0000-0002-2507-8846"]},"institutions":[{"id":"https://openalex.org/I186903577","display_name":"University of Luxembourg","ror":"https://ror.org/036x5ad56","country_code":"LU","type":"education","lineage":["https://openalex.org/I186903577"]}],"countries":["LU"],"is_corresponding":false,"raw_author_name":"Aayush Garg","raw_affiliation_strings":["University of Luxembourg > Faculty of Science, Technology and Medicine (FSTM) > Department of Computer Science (DCS) >"],"raw_orcid":"https://orcid.org/0000-0002-2507-8846","affiliations":[{"raw_affiliation_string":"University of Luxembourg > Faculty of Science, Technology and Medicine (FSTM) > Department of Computer Science (DCS) >","institution_ids":["https://openalex.org/I186903577"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5032855338","display_name":"Renzo Degiovanni","orcid":"https://orcid.org/0000-0003-1611-3969","observed_orcids":["https://orcid.org/0000-0003-1611-3969"]},"institutions":[{"id":"https://openalex.org/I186903577","display_name":"University of Luxembourg","ror":"https://ror.org/036x5ad56","country_code":"LU","type":"education","lineage":["https://openalex.org/I186903577"]},{"id":"https://openalex.org/I4405259781","display_name":"Interdisciplinary Centre for Security, Reliability and Trust","ror":"https://ror.org/02qav7c04","country_code":"LU","type":"education","lineage":["https://openalex.org/I186903577","https://openalex.org/I4405259781"]}],"countries":["LU"],"is_corresponding":false,"raw_author_name":"Renzo Degiovanni","raw_affiliation_strings":["University of Luxembourg > Interdisciplinary Centre for Security, Reliability and Trust (SNT) > SerVal >"],"raw_orcid":"https://orcid.org/0000-0003-1611-3969","affiliations":[{"raw_affiliation_string":"University of Luxembourg > Interdisciplinary Centre for Security, Reliability and Trust (SNT) > SerVal >","institution_ids":["https://openalex.org/I186903577","https://openalex.org/I4405259781"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5101828371","display_name":"Matthieu Jimenez","orcid":"https://orcid.org/0000-0003-4061-1108","observed_orcids":["https://orcid.org/0000-0003-4061-1108"]},"institutions":[{"id":"https://openalex.org/I186903577","display_name":"University of Luxembourg","ror":"https://ror.org/036x5ad56","country_code":"LU","type":"education","lineage":["https://openalex.org/I186903577"]},{"id":"https://openalex.org/I4405259781","display_name":"Interdisciplinary Centre for Security, Reliability and Trust","ror":"https://ror.org/02qav7c04","country_code":"LU","type":"education","lineage":["https://openalex.org/I186903577","https://openalex.org/I4405259781"]}],"countries":["LU"],"is_corresponding":false,"raw_author_name":"Matthieu Jimenez","raw_affiliation_strings":["University of Luxembourg > Interdisciplinary Centre for Security, Reliability and Trust (SNT) > SerVal >"],"raw_orcid":"https://orcid.org/0000-0003-4061-1108","affiliations":[{"raw_affiliation_string":"University of Luxembourg > Interdisciplinary Centre for Security, Reliability and Trust (SNT) > SerVal >","institution_ids":["https://openalex.org/I186903577","https://openalex.org/I4405259781"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5000695937","display_name":"Maxime Cordy","orcid":"https://orcid.org/0000-0001-8312-1358","observed_orcids":["https://orcid.org/0000-0001-8312-1358"]},"institutions":[{"id":"https://openalex.org/I186903577","display_name":"University of Luxembourg","ror":"https://ror.org/036x5ad56","country_code":"LU","type":"education","lineage":["https://openalex.org/I186903577"]},{"id":"https://openalex.org/I4405259781","display_name":"Interdisciplinary Centre for Security, Reliability and Trust","ror":"https://ror.org/02qav7c04","country_code":"LU","type":"education","lineage":["https://openalex.org/I186903577","https://openalex.org/I4405259781"]}],"countries":["LU"],"is_corresponding":false,"raw_author_name":"Maxime Cordy","raw_affiliation_strings":["University of Luxembourg > Interdisciplinary Centre for Security, Reliability and Trust (SNT) > SerVal >"],"raw_orcid":"https://orcid.org/0000-0001-8312-1358","affiliations":[{"raw_affiliation_string":"University of Luxembourg > Interdisciplinary Centre for Security, Reliability and Trust (SNT) > SerVal >","institution_ids":["https://openalex.org/I186903577","https://openalex.org/I4405259781"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5081145634","display_name":"Mike Papadakis","orcid":"https://orcid.org/0000-0003-1852-2547","observed_orcids":["https://orcid.org/0000-0003-1852-2547"]},"institutions":[{"id":"https://openalex.org/I186903577","display_name":"University of Luxembourg","ror":"https://ror.org/036x5ad56","country_code":"LU","type":"education","lineage":["https://openalex.org/I186903577"]}],"countries":["LU"],"is_corresponding":false,"raw_author_name":"Mike Papadakis","raw_affiliation_strings":["University of Luxembourg > Faculty of Science, Technology and Medicine (FSTM) > Department of Computer Science (DCS) >"],"raw_orcid":"https://orcid.org/0000-0003-1852-2547","affiliations":[{"raw_affiliation_string":"University of Luxembourg > Faculty of Science, Technology and Medicine (FSTM) > Department of Computer Science (DCS) >","institution_ids":["https://openalex.org/I186903577"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5040574362","display_name":"Yves Le Traon","orcid":"https://orcid.org/0000-0002-1045-4861","observed_orcids":["https://orcid.org/0000-0002-1045-4861"]},"institutions":[{"id":"https://openalex.org/I186903577","display_name":"University of Luxembourg","ror":"https://ror.org/036x5ad56","country_code":"LU","type":"education","lineage":["https://openalex.org/I186903577"]},{"id":"https://openalex.org/I4405259781","display_name":"Interdisciplinary Centre for Security, Reliability and Trust","ror":"https://ror.org/02qav7c04","country_code":"LU","type":"education","lineage":["https://openalex.org/I186903577","https://openalex.org/I4405259781"]}],"countries":["LU"],"is_corresponding":false,"raw_author_name":"Yves Le Traon","raw_affiliation_strings":["University of Luxembourg > Interdisciplinary Centre for Security, Reliability and Trust (SNT) > SerVal >"],"raw_orcid":"https://orcid.org/0000-0002-1045-4861","affiliations":[{"raw_affiliation_string":"University of Luxembourg > Interdisciplinary Centre for Security, Reliability and Trust (SNT) > SerVal >","institution_ids":["https://openalex.org/I186903577","https://openalex.org/I4405259781"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":2,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":null,"has_fulltext":false,"cited_by_count":5,"citation_normalized_percentile":null,"cited_by_percentile_year":null,"biblio":{"volume":null,"issue":null,"first_page":null,"last_page":null},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10260","display_name":"Software Engineering Research","score":0.8535000085830688,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10260","display_name":"Software Engineering Research","score":0.8535000085830688,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T12479","display_name":"Web Application Security Vulnerabilities","score":0.0778999999165535,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10743","display_name":"Software Testing and Debugging Techniques","score":0.028699999675154686,"subfield":{"id":"https://openalex.org/subfields/1712","display_name":"Software"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/vulnerability-prediction","display_name":"vulnerability prediction","score":0.9850000143051147},{"id":"https://openalex.org/keywords/vulnerability-remediation","display_name":"vulnerability remediation","score":0.656000018119812},{"id":"https://openalex.org/keywords/machine-translation","display_name":"machine translation","score":0.8479999899864197},{"id":"https://openalex.org/keywords/encoder-decoder-architecture","display_name":"encoder-decoder architecture","score":0.746999979019165},{"id":"https://openalex.org/keywords/latent-features","display_name":"latent features","score":0.5989999771118164},{"id":"https://openalex.org/keywords/open-source-software-security","display_name":"open-source software security","score":0.6230000257492065},{"id":"https://openalex.org/keywords/linux-kernel","display_name":"Linux kernel","score":0.753000020980835},{"id":"https://openalex.org/keywords/openssl","display_name":"OpenSSL","score":0.9990000128746033},{"id":"https://openalex.org/keywords/wireshark","display_name":"Wireshark","score":0.9879999756813049},{"id":"https://openalex.org/keywords/national-vulnerability-database","display_name":"National Vulnerability Database","score":0.9829999804496765}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.8374028205871582},{"id":"https://openalex.org/C95713431","wikidata":"https://www.wikidata.org/wiki/Q631425","display_name":"Vulnerability (computing)","level":2,"score":0.7329570651054382},{"id":"https://openalex.org/C2779343474","wikidata":"https://www.wikidata.org/wiki/Q3109175","display_name":"Context (archaeology)","level":2,"score":0.6037402153015137},{"id":"https://openalex.org/C119857082","wikidata":"https://www.wikidata.org/wiki/Q2539","display_name":"Machine learning","level":1,"score":0.5776898860931396},{"id":"https://openalex.org/C43126263","wikidata":"https://www.wikidata.org/wiki/Q128751","display_name":"Source code","level":2,"score":0.5437130331993103},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.525860071182251},{"id":"https://openalex.org/C553261973","wikidata":"https://www.wikidata.org/wiki/Q14579","display_name":"Linux kernel","level":2,"score":0.4971459209918976},{"id":"https://openalex.org/C2777904410","wikidata":"https://www.wikidata.org/wiki/Q7397","display_name":"Software","level":2,"score":0.4709547460079193},{"id":"https://openalex.org/C26517878","wikidata":"https://www.wikidata.org/wiki/Q228039","display_name":"Key (lock)","level":2,"score":0.4647343158721924},{"id":"https://openalex.org/C203005215","wikidata":"https://www.wikidata.org/wiki/Q79798","display_name":"Machine translation","level":2,"score":0.4516129791736603},{"id":"https://openalex.org/C124101348","wikidata":"https://www.wikidata.org/wiki/Q172491","display_name":"Data mining","level":1,"score":0.4450899660587311},{"id":"https://openalex.org/C2776760102","wikidata":"https://www.wikidata.org/wiki/Q5139990","display_name":"Code (set theory)","level":3,"score":0.44448211789131165},{"id":"https://openalex.org/C167063184","wikidata":"https://www.wikidata.org/wiki/Q1400839","display_name":"Vulnerability assessment","level":3,"score":0.423923522233963},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.31437811255455017},{"id":"https://openalex.org/C199360897","wikidata":"https://www.wikidata.org/wiki/Q9143","display_name":"Programming language","level":1,"score":0.08027699589729309},{"id":"https://openalex.org/C137176749","wikidata":"https://www.wikidata.org/wiki/Q4105337","display_name":"Psychological resilience","level":2,"score":0.0},{"id":"https://openalex.org/C542102704","wikidata":"https://www.wikidata.org/wiki/Q183257","display_name":"Psychotherapist","level":1,"score":0.0},{"id":"https://openalex.org/C15744967","wikidata":"https://www.wikidata.org/wiki/Q9418","display_name":"Psychology","level":0,"score":0.0},{"id":"https://openalex.org/C111919701","wikidata":"https://www.wikidata.org/wiki/Q9135","display_name":"Operating system","level":1,"score":0.0},{"id":"https://openalex.org/C86803240","wikidata":"https://www.wikidata.org/wiki/Q420","display_name":"Biology","level":0,"score":0.0},{"id":"https://openalex.org/C177264268","wikidata":"https://www.wikidata.org/wiki/Q1514741","display_name":"Set (abstract data type)","level":2,"score":0.0},{"id":"https://openalex.org/C151730666","wikidata":"https://www.wikidata.org/wiki/Q7205","display_name":"Paleontology","level":1,"score":0.0}],"mesh":[],"locations_count":1,"locations":[{"id":"mag:3113445786","doi":null,"is_oa":true,"landing_page_url":"https://arxiv.org/pdf/2012.11701.pdf","pdf_url":null,"source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":"2331-8422","issn":["2331-8422"],"is_oa":true,"is_in_doaj":false,"is_core":false,"listed_in":[],"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"arXiv (Cornell University)","raw_type":null}],"best_oa_location":{"id":"mag:3113445786","doi":null,"is_oa":true,"landing_page_url":"https://arxiv.org/pdf/2012.11701.pdf","pdf_url":null,"source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":"2331-8422","issn":["2331-8422"],"is_oa":true,"is_in_doaj":false,"is_core":false,"listed_in":[],"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"arXiv (Cornell University)","raw_type":null},"sustainable_development_goals":[],"study_designs":[],"awards":[],"funders":[],"has_content":{"grobid_xml":false,"pdf":false},"content_urls":null,"referenced_works_count":38,"referenced_works":["https://openalex.org/W149472151","https://openalex.org/W1615337185","https://openalex.org/W1857789879","https://openalex.org/W1965335252","https://openalex.org/W1992114977","https://openalex.org/W1997236144","https://openalex.org/W1997646511","https://openalex.org/W2004758929","https://openalex.org/W2043837581","https://openalex.org/W2046830558","https://openalex.org/W2064675550","https://openalex.org/W2079753286","https://openalex.org/W2109553965","https://openalex.org/W2118283821","https://openalex.org/W2126513753","https://openalex.org/W2130942839","https://openalex.org/W2137789775","https://openalex.org/W2146338950","https://openalex.org/W2151666086","https://openalex.org/W2166336492","https://openalex.org/W2360967250","https://openalex.org/W2402619042","https://openalex.org/W2511803001","https://openalex.org/W2564850588","https://openalex.org/W2575109289","https://openalex.org/W2579253943","https://openalex.org/W2594990650","https://openalex.org/W2605202003","https://openalex.org/W2781491433","https://openalex.org/W2900690747","https://openalex.org/W2901941771","https://openalex.org/W2905463374","https://openalex.org/W2964308564","https://openalex.org/W2967556797","https://openalex.org/W2970413753","https://openalex.org/W2970862273","https://openalex.org/W2993007949","https://openalex.org/W3035171481"],"related_works":["https://openalex.org/W4296483261","https://openalex.org/W2743517242","https://openalex.org/W4206076523","https://openalex.org/W4360584581","https://openalex.org/W3210877770","https://openalex.org/W3049398420","https://openalex.org/W2901941771","https://openalex.org/W3023999875","https://openalex.org/W2517094600","https://openalex.org/W2003529494"],"abstract_inverted_index":{"Vulnerability":[0,155],"prediction":[1,28,75,163,173],"refers":[2],"to":[3,15,58,107],"the":[4,8,20,64,78,87,113,134,153,162,170],"problem":[5],"of":[6,81,93,103,133,165],"identifying":[7],"system":[9],"components":[10],"that":[11,35,47,84,95,148,161],"are":[12,36,50,96],"most":[13],"likely":[14],"be":[16],"vulnerable":[17,40],"based":[18],"on":[19,130],"information":[21],"gained":[22],"from":[23,109],"historical":[24,65,146],"data.":[25,66],"Typically,":[26],"vulnerability":[27,115,172],"is":[29,106],"performed":[30],"using":[31,77],"manually":[32],"identified":[33],"features":[34,89],"potentially":[37],"linked":[38,97],"with":[39,69,98,127,145],"code.":[41],"Unfortunately,":[42],"recent":[43],"studies":[44],"have":[45,149],"shown":[46],"existing":[48,128],"approaches":[49],"ineffective":[51],"when":[52],"evaluated":[53],"in":[54,63,152,183],"realistic":[55,196],"settings":[56],"due":[57],"some":[59],"unavoidable":[60],"noise":[61],"included":[62],"To":[67],"deal":[68],"this":[70],"issue,":[71],"we":[72,111],"develop":[73],"a":[74],"method":[76],"encoder-decoder":[79],"framework":[80],"machine":[82],"translation":[83],"automatically":[85],"learns":[86],"latent":[88],"(context,":[90],"patterns,":[91],"etc.)":[92],"code":[94],"vulnerabilities.":[99],"The":[100],"key":[101],"idea":[102],"our":[104,122,166],"approach":[105,123,167],"learn":[108],"things":[110],"know,":[112],"past":[114],"fixes":[116],"and":[117,143,180,186],"their":[118],"context.":[119],"We":[120],"evaluate":[121],"by":[124],"comparing":[125],"it":[126],"techniques":[129,174],"available":[131],"releases":[132],"three":[135],"security-critical":[136],"open":[137],"source":[138],"systems":[139],"(Linux":[140],"Kernel,":[141],"OpenSSL,":[142],"Wireshark)":[144],"vulnerabilities":[147],"been":[150],"reported":[151],"National":[154],"Database":[156],"(NVD).":[157],"Our":[158],"evaluation":[159],"demonstrates":[160],"capability":[164],"significantly":[168],"outperforms":[169],"state-of-the-art":[171],"(Software":[175],"Metrics,":[176],"Imports,":[177],"Function":[178],"Calls,":[179],"Text":[181],"Mining)":[182],"both":[184],"recall":[185],"precision":[187],"values":[188],"(yielding":[189],"4.7":[190],"times":[191],"higher":[192],"MCC":[193],"values)":[194],"under":[195],"training":[197],"setting.":[198]},"counts_by_year":[{"year":2023,"cited_by_count":1},{"year":2022,"cited_by_count":4}],"updated_date":"2026-11-04T10:54:05.112534","created_date":"2021-01-05T00:00:00"}