{"id":"https://openalex.org/W4400907626","doi":"https://doi.org/10.1007/s10207-024-00888-y","title":"A comprehensive analysis on software vulnerability detection datasets: trends, challenges, and road ahead","display_name":"A comprehensive analysis on software vulnerability detection datasets: trends, challenges, and road ahead","publication_year":2024,"publication_date":"2024-07-23","ids":{"openalex":"https://openalex.org/W4400907626","doi":"https://doi.org/10.1007/s10207-024-00888-y"},"language":"en","primary_location":{"id":"doi:10.1007/s10207-024-00888-y","is_oa":true,"landing_page_url":"https://doi.org/10.1007/s10207-024-00888-y","pdf_url":"https://link.springer.com/content/pdf/10.1007/s10207-024-00888-y.pdf","source":{"id":"https://openalex.org/S164062316","display_name":"International Journal of Information Security","issn_l":"1615-5262","issn":["1615-5262","1615-5270"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310319900","host_organization_name":"Springer Science+Business Media","host_organization_lineage":["https://openalex.org/P4310319900","https://openalex.org/P4310319965"],"host_organization_lineage_names":["Springer Science+Business Media","Springer Nature"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"International Journal of Information Security","raw_type":"journal-article"},"type":"article","indexed_in":["crossref","datacite"],"open_access":{"is_oa":true,"oa_status":"hybrid","oa_url":"https://link.springer.com/content/pdf/10.1007/s10207-024-00888-y.pdf","any_repository_has_fulltext":true},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5023978917","display_name":"Yuejun Guo","orcid":"https://orcid.org/0000-0002-5535-2420"},"institutions":[{"id":"https://openalex.org/I4210112527","display_name":"Luxembourg Institute of Science and Technology","ror":"https://ror.org/01t178j62","country_code":"LU","type":"nonprofit","lineage":["https://openalex.org/I4210112527"]}],"countries":["LU"],"is_corresponding":false,"raw_author_name":"Yuejun Guo","raw_affiliation_strings":["Luxembourg Institute of Science and Technology (LIST), 5 Av. des Hauts-Fourneaux, Esch-Belval, Luxembourg"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Luxembourg Institute of Science and Technology (LIST), 5 Av. des Hauts-Fourneaux, Esch-Belval, Luxembourg","institution_ids":["https://openalex.org/I4210112527"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5065132258","display_name":"Seifeddine Bettaieb","orcid":null},"institutions":[{"id":"https://openalex.org/I4210112527","display_name":"Luxembourg Institute of Science and Technology","ror":"https://ror.org/01t178j62","country_code":"LU","type":"nonprofit","lineage":["https://openalex.org/I4210112527"]}],"countries":["LU"],"is_corresponding":false,"raw_author_name":"Seifeddine Bettaieb","raw_affiliation_strings":["Luxembourg Institute of Science and Technology (LIST), 5 Av. des Hauts-Fourneaux, Esch-Belval, Luxembourg"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Luxembourg Institute of Science and Technology (LIST), 5 Av. des Hauts-Fourneaux, Esch-Belval, Luxembourg","institution_ids":["https://openalex.org/I4210112527"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5013675709","display_name":"Fran Casino","orcid":"https://orcid.org/0000-0003-4296-2876"},"institutions":[{"id":"https://openalex.org/I4210156054","display_name":"Athena Research and Innovation Center In Information Communication & Knowledge Technologies","ror":"https://ror.org/0576by029","country_code":"GR","type":"facility","lineage":["https://openalex.org/I4210156054"]},{"id":"https://openalex.org/I55952717","display_name":"Universitat Rovira i Virgili","ror":"https://ror.org/00g5sqv46","country_code":"ES","type":"education","lineage":["https://openalex.org/I55952717"]}],"countries":["ES","GR"],"is_corresponding":true,"raw_author_name":"Fran Casino","raw_affiliation_strings":["Department of Computer Engineering and Mathematics, Universitat Rovira i Virgili, Tarragona, Spain","Information Management Systems Institute, Athena Research Centre (ARC), Artemidos 6, Marousi, Greece"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Department of Computer Engineering and Mathematics, Universitat Rovira i Virgili, Tarragona, Spain","institution_ids":["https://openalex.org/I55952717"]},{"raw_affiliation_string":"Information Management Systems Institute, Athena Research Centre (ARC), Artemidos 6, Marousi, Greece","institution_ids":["https://openalex.org/I4210156054"]}]}],"institutions":[],"countries_distinct_count":3,"institutions_distinct_count":3,"corresponding_author_ids":["https://openalex.org/A5013675709"],"corresponding_institution_ids":["https://openalex.org/I4210156054","https://openalex.org/I55952717"],"apc_list":{"value":2590,"currency":"EUR","value_usd":3190},"apc_paid":{"value":2590,"currency":"EUR","value_usd":3190},"fwci":11.5124,"has_fulltext":false,"cited_by_count":18,"citation_normalized_percentile":{"value":0.98411087,"is_in_top_1_percent":false,"is_in_top_10_percent":true},"cited_by_percentile_year":{"min":99,"max":100},"biblio":{"volume":"23","issue":"5","first_page":"3311","last_page":"3327"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10260","display_name":"Software Engineering Research","score":0.9994999766349792,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10260","display_name":"Software Engineering Research","score":0.9994999766349792,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T12423","display_name":"Software Reliability and Analysis Research","score":0.9973000288009644,"subfield":{"id":"https://openalex.org/subfields/1712","display_name":"Software"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":0.9962999820709229,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.8380050659179688},{"id":"https://openalex.org/keywords/robustness","display_name":"Robustness (evolution)","score":0.5945630073547363},{"id":"https://openalex.org/keywords/data-science","display_name":"Data science","score":0.5532969236373901},{"id":"https://openalex.org/keywords/vulnerability","display_name":"Vulnerability (computing)","score":0.5523675680160522},{"id":"https://openalex.org/keywords/software","display_name":"Software","score":0.5303103923797607},{"id":"https://openalex.org/keywords/data-mining","display_name":"Data mining","score":0.5091180205345154},{"id":"https://openalex.org/keywords/vulnerability-assessment","display_name":"Vulnerability assessment","score":0.4925130307674408},{"id":"https://openalex.org/keywords/domain","display_name":"Domain (mathematical analysis)","score":0.4720500409603119},{"id":"https://openalex.org/keywords/context","display_name":"Context (archaeology)","score":0.469475120306015},{"id":"https://openalex.org/keywords/automation","display_name":"Automation","score":0.44810596108436584},{"id":"https://openalex.org/keywords/pipeline","display_name":"Pipeline (software)","score":0.4146469831466675},{"id":"https://openalex.org/keywords/quality","display_name":"Quality (philosophy)","score":0.4123300313949585},{"id":"https://openalex.org/keywords/risk-analysis","display_name":"Risk analysis (engineering)","score":0.37326255440711975},{"id":"https://openalex.org/keywords/computer-security","display_name":"Computer security","score":0.3685421943664551}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.8380050659179688},{"id":"https://openalex.org/C63479239","wikidata":"https://www.wikidata.org/wiki/Q7353546","display_name":"Robustness (evolution)","level":3,"score":0.5945630073547363},{"id":"https://openalex.org/C2522767166","wikidata":"https://www.wikidata.org/wiki/Q2374463","display_name":"Data science","level":1,"score":0.5532969236373901},{"id":"https://openalex.org/C95713431","wikidata":"https://www.wikidata.org/wiki/Q631425","display_name":"Vulnerability (computing)","level":2,"score":0.5523675680160522},{"id":"https://openalex.org/C2777904410","wikidata":"https://www.wikidata.org/wiki/Q7397","display_name":"Software","level":2,"score":0.5303103923797607},{"id":"https://openalex.org/C124101348","wikidata":"https://www.wikidata.org/wiki/Q172491","display_name":"Data mining","level":1,"score":0.5091180205345154},{"id":"https://openalex.org/C167063184","wikidata":"https://www.wikidata.org/wiki/Q1400839","display_name":"Vulnerability assessment","level":3,"score":0.4925130307674408},{"id":"https://openalex.org/C36503486","wikidata":"https://www.wikidata.org/wiki/Q11235244","display_name":"Domain (mathematical analysis)","level":2,"score":0.4720500409603119},{"id":"https://openalex.org/C2779343474","wikidata":"https://www.wikidata.org/wiki/Q3109175","display_name":"Context (archaeology)","level":2,"score":0.469475120306015},{"id":"https://openalex.org/C115901376","wikidata":"https://www.wikidata.org/wiki/Q184199","display_name":"Automation","level":2,"score":0.44810596108436584},{"id":"https://openalex.org/C43521106","wikidata":"https://www.wikidata.org/wiki/Q2165493","display_name":"Pipeline (software)","level":2,"score":0.4146469831466675},{"id":"https://openalex.org/C2779530757","wikidata":"https://www.wikidata.org/wiki/Q1207505","display_name":"Quality (philosophy)","level":2,"score":0.4123300313949585},{"id":"https://openalex.org/C112930515","wikidata":"https://www.wikidata.org/wiki/Q4389547","display_name":"Risk analysis (engineering)","level":1,"score":0.37326255440711975},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.3685421943664551},{"id":"https://openalex.org/C71924100","wikidata":"https://www.wikidata.org/wiki/Q11190","display_name":"Medicine","level":0,"score":0.0},{"id":"https://openalex.org/C55493867","wikidata":"https://www.wikidata.org/wiki/Q7094","display_name":"Biochemistry","level":1,"score":0.0},{"id":"https://openalex.org/C127413603","wikidata":"https://www.wikidata.org/wiki/Q11023","display_name":"Engineering","level":0,"score":0.0},{"id":"https://openalex.org/C33923547","wikidata":"https://www.wikidata.org/wiki/Q395","display_name":"Mathematics","level":0,"score":0.0},{"id":"https://openalex.org/C185592680","wikidata":"https://www.wikidata.org/wiki/Q2329","display_name":"Chemistry","level":0,"score":0.0},{"id":"https://openalex.org/C78519656","wikidata":"https://www.wikidata.org/wiki/Q101333","display_name":"Mechanical engineering","level":1,"score":0.0},{"id":"https://openalex.org/C151730666","wikidata":"https://www.wikidata.org/wiki/Q7205","display_name":"Paleontology","level":1,"score":0.0},{"id":"https://openalex.org/C134306372","wikidata":"https://www.wikidata.org/wiki/Q7754","display_name":"Mathematical analysis","level":1,"score":0.0},{"id":"https://openalex.org/C542102704","wikidata":"https://www.wikidata.org/wiki/Q183257","display_name":"Psychotherapist","level":1,"score":0.0},{"id":"https://openalex.org/C104317684","wikidata":"https://www.wikidata.org/wiki/Q7187","display_name":"Gene","level":2,"score":0.0},{"id":"https://openalex.org/C199360897","wikidata":"https://www.wikidata.org/wiki/Q9143","display_name":"Programming language","level":1,"score":0.0},{"id":"https://openalex.org/C138885662","wikidata":"https://www.wikidata.org/wiki/Q5891","display_name":"Philosophy","level":0,"score":0.0},{"id":"https://openalex.org/C15744967","wikidata":"https://www.wikidata.org/wiki/Q9418","display_name":"Psychology","level":0,"score":0.0},{"id":"https://openalex.org/C137176749","wikidata":"https://www.wikidata.org/wiki/Q4105337","display_name":"Psychological resilience","level":2,"score":0.0},{"id":"https://openalex.org/C111472728","wikidata":"https://www.wikidata.org/wiki/Q9471","display_name":"Epistemology","level":1,"score":0.0},{"id":"https://openalex.org/C86803240","wikidata":"https://www.wikidata.org/wiki/Q420","display_name":"Biology","level":0,"score":0.0}],"mesh":[],"locations_count":3,"locations":[{"id":"doi:10.1007/s10207-024-00888-y","is_oa":true,"landing_page_url":"https://doi.org/10.1007/s10207-024-00888-y","pdf_url":"https://link.springer.com/content/pdf/10.1007/s10207-024-00888-y.pdf","source":{"id":"https://openalex.org/S164062316","display_name":"International Journal of Information Security","issn_l":"1615-5262","issn":["1615-5262","1615-5270"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310319900","host_organization_name":"Springer Science+Business Media","host_organization_lineage":["https://openalex.org/P4310319900","https://openalex.org/P4310319965"],"host_organization_lineage_names":["Springer Science+Business Media","Springer Nature"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"International Journal of Information Security","raw_type":"journal-article"},{"id":"doi:10.5281/zenodo.19887611","is_oa":true,"landing_page_url":"https://doi.org/10.5281/zenodo.19887611","pdf_url":null,"source":{"id":"https://openalex.org/S4306400562","display_name":"Zenodo (CERN European Organization for Nuclear Research)","issn_l":null,"issn":null,"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I67311998","host_organization_name":"European Organization for Nuclear Research","host_organization_lineage":["https://openalex.org/I67311998"],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":null,"is_accepted":false,"is_published":null,"raw_source_name":null,"raw_type":"JournalArticle"},{"id":"doi:10.5281/zenodo.19887612","is_oa":true,"landing_page_url":"https://doi.org/10.5281/zenodo.19887612","pdf_url":null,"source":{"id":"https://openalex.org/S4306400562","display_name":"Zenodo (CERN European Organization for Nuclear Research)","issn_l":null,"issn":null,"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I67311998","host_organization_name":"European Organization for Nuclear Research","host_organization_lineage":["https://openalex.org/I67311998"],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":null,"is_accepted":false,"is_published":null,"raw_source_name":null,"raw_type":"JournalArticle"}],"best_oa_location":{"id":"doi:10.1007/s10207-024-00888-y","is_oa":true,"landing_page_url":"https://doi.org/10.1007/s10207-024-00888-y","pdf_url":"https://link.springer.com/content/pdf/10.1007/s10207-024-00888-y.pdf","source":{"id":"https://openalex.org/S164062316","display_name":"International Journal of Information Security","issn_l":"1615-5262","issn":["1615-5262","1615-5270"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310319900","host_organization_name":"Springer Science+Business Media","host_organization_lineage":["https://openalex.org/P4310319900","https://openalex.org/P4310319965"],"host_organization_lineage_names":["Springer Science+Business Media","Springer Nature"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"International Journal of Information Security","raw_type":"journal-article"},"sustainable_development_goals":[],"awards":[],"funders":[{"id":"https://openalex.org/F4320324497","display_name":"Universitat Rovira i Virgili","ror":"https://ror.org/00g5sqv46"}],"has_content":{"grobid_xml":false,"pdf":true},"content_urls":{"pdf":"https://content.openalex.org/works/W4400907626.pdf"},"referenced_works_count":53,"referenced_works":["https://openalex.org/W1993220166","https://openalex.org/W2025411198","https://openalex.org/W2079753286","https://openalex.org/W2592125937","https://openalex.org/W2765858138","https://openalex.org/W2781491433","https://openalex.org/W2796200341","https://openalex.org/W2884561390","https://openalex.org/W2885030880","https://openalex.org/W2954272346","https://openalex.org/W2963447020","https://openalex.org/W2963691377","https://openalex.org/W2967556797","https://openalex.org/W2976184969","https://openalex.org/W2990323480","https://openalex.org/W3006165800","https://openalex.org/W3008371681","https://openalex.org/W3009129408","https://openalex.org/W3089659633","https://openalex.org/W3091588759","https://openalex.org/W3101228802","https://openalex.org/W3104849875","https://openalex.org/W3127782461","https://openalex.org/W3163206498","https://openalex.org/W3166095789","https://openalex.org/W3187025053","https://openalex.org/W3202871865","https://openalex.org/W4213423307","https://openalex.org/W4220722393","https://openalex.org/W4221033043","https://openalex.org/W4244026005","https://openalex.org/W4281386687","https://openalex.org/W4292258179","https://openalex.org/W4292491372","https://openalex.org/W4296483261","https://openalex.org/W4312248293","https://openalex.org/W4312438588","https://openalex.org/W4324093415","https://openalex.org/W4376606665","https://openalex.org/W4380763529","https://openalex.org/W4384155620","https://openalex.org/W4384345694","https://openalex.org/W4385412165","https://openalex.org/W4387298393","https://openalex.org/W4388212383","https://openalex.org/W4389544221","https://openalex.org/W4389980560","https://openalex.org/W4392301058","https://openalex.org/W4393406994","https://openalex.org/W6600109629","https://openalex.org/W6602680078","https://openalex.org/W6605426225","https://openalex.org/W6902141710"],"related_works":["https://openalex.org/W1883246888","https://openalex.org/W2370114625","https://openalex.org/W1756374135","https://openalex.org/W2947584067","https://openalex.org/W3118510577","https://openalex.org/W2280562859","https://openalex.org/W230721595","https://openalex.org/W3157230915","https://openalex.org/W1496728123","https://openalex.org/W2062873522"],"abstract_inverted_index":{"Abstract":[0],"As":[1],"society\u2019s":[2],"dependence":[3],"on":[4,65,166],"information":[5],"and":[6,20,35,55,97,112,120,132,174,182],"communication":[7],"systems":[8],"(ICTs)":[9],"grows,":[10],"so":[11],"does":[12],"the":[13,17,33,38,58,66,70,103,117,158,161,177],"necessity":[14],"of":[15,22,37,60,78,106,108,116,130,160],"guaranteeing":[16],"proper":[18],"functioning":[19],"use":[21],"such":[23,51,61,84,94],"systems.":[24],"In":[25],"this":[26,186],"context,":[27],"it":[28,126],"is":[29,141],"critical":[30,187],"to":[31,81,87,143,168],"enhance":[32],"security":[34],"robustness":[36],"DevSecOps":[39],"pipeline":[40],"through":[41],"timely":[42],"vulnerability":[43,110],"detection.":[44],"Usually,":[45],"AI-based":[46],"models":[47,62],"enable":[48],"desirable":[49,133],"features":[50,134],"as":[52,85,95],"automation,":[53],"performance,":[54],"efficacy.":[56],"However,":[57],"quality":[59],"highly":[63],"depends":[64],"datasets":[67,90,111,136],"used":[68],"during":[69],"training":[71],"stage.":[72],"The":[73,139],"latter":[74,140],"encompasses":[75],"a":[76,114,128,145,154,164],"series":[77],"challenges":[79,119],"yet":[80],"be":[82],"solved,":[83],"access":[86],"extensive":[88,124],"labelled":[89],"with":[91,153,157],"specific":[92],"properties,":[93,151],"well-represented":[96],"balanced":[98],"samples.":[99],"This":[100],"article":[101],"explores":[102],"current":[104],"state":[105,159],"practice":[107],"software":[109],"provides":[113],"classification":[115],"main":[118],"issues.":[121],"After":[122],"an":[123],"analysis,":[125],"describes":[127],"set":[129],"guidelines":[131],"that":[135],"should":[137],"guarantee.":[138],"applied":[142],"create":[144],"new":[146],"dataset,":[147],"which":[148],"fulfils":[149],"these":[150],"along":[152],"descriptive":[155],"comparison":[156],"art.":[162],"Finally,":[163],"discussion":[165],"how":[167],"foster":[169],"good":[170],"practices":[171],"among":[172],"researchers":[173],"practitioners":[175],"sets":[176],"ground":[178],"for":[179],"further":[180],"research":[181],"continued":[183],"improvement":[184],"within":[185],"domain.":[188]},"counts_by_year":[{"year":2026,"cited_by_count":9},{"year":2025,"cited_by_count":9}],"updated_date":"2026-06-13T06:13:01.061226","created_date":"2025-10-10T00:00:00"}