{"id":"https://openalex.org/W3168865857","doi":"https://doi.org/10.1007/s11219-020-09546-7","title":"An improved text classification modelling approach to identify security messages in heterogeneous projects","display_name":"An improved text classification modelling approach to identify security messages in heterogeneous projects","publication_year":2021,"publication_date":"2021-05-27","ids":{"openalex":"https://openalex.org/W3168865857","doi":"https://doi.org/10.1007/s11219-020-09546-7","mag":"3168865857"},"language":"en","primary_location":{"id":"doi:10.1007/s11219-020-09546-7","is_oa":true,"landing_page_url":"https://doi.org/10.1007/s11219-020-09546-7","pdf_url":"https://link.springer.com/content/pdf/10.1007/s11219-020-09546-7.pdf","source":{"id":"https://openalex.org/S7504070","display_name":"Software Quality Journal","issn_l":"0963-9314","issn":["0963-9314","1573-1367"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310319900","host_organization_name":"Springer Science+Business Media","host_organization_lineage":["https://openalex.org/P4310319900","https://openalex.org/P4310319965"],"host_organization_lineage_names":["Springer Science+Business Media","Springer Nature"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Software Quality Journal","raw_type":"journal-article"},"type":"book-chapter","indexed_in":["crossref"],"open_access":{"is_oa":true,"oa_status":"hybrid","oa_url":"https://link.springer.com/content/pdf/10.1007/s11219-020-09546-7.pdf","any_repository_has_fulltext":true},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5035551939","display_name":"Tosin Daniel Oyetoyan","orcid":"https://orcid.org/0000-0003-0027-4522"},"institutions":[{"id":"https://openalex.org/I173888879","display_name":"SINTEF","ror":"https://ror.org/01f677e56","country_code":"NO","type":"facility","lineage":["https://openalex.org/I173888879"]},{"id":"https://openalex.org/I179863766","display_name":"Western Norway University of Applied Sciences","ror":"https://ror.org/05phns765","country_code":"NO","type":"education","lineage":["https://openalex.org/I179863766"]},{"id":"https://openalex.org/I4387930215","display_name":"SINTEF Digital","ror":"https://ror.org/028m52w57","country_code":null,"type":"facility","lineage":["https://openalex.org/I173888879","https://openalex.org/I4387930215"]}],"countries":["NO"],"is_corresponding":true,"raw_author_name":"Tosin Daniel Oyetoyan","raw_affiliation_strings":["Department of Computing, Mathematics and Physics, Western Norway University of Applied Sciences, Bergen, Norway","Department of Software Engineering, Safety and Security, SINTEF Digital, Trondheim, Norway"],"raw_orcid":"https://orcid.org/0000-0003-0027-4522","affiliations":[{"raw_affiliation_string":"Department of Computing, Mathematics and Physics, Western Norway University of Applied Sciences, Bergen, Norway","institution_ids":["https://openalex.org/I179863766"]},{"raw_affiliation_string":"Department of Software Engineering, Safety and Security, SINTEF Digital, Trondheim, Norway","institution_ids":["https://openalex.org/I173888879","https://openalex.org/I4387930215"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5101506825","display_name":"Patrick Morrison","orcid":"https://orcid.org/0000-0003-0773-7817"},"institutions":[{"id":"https://openalex.org/I137902535","display_name":"North Carolina State University","ror":"https://ror.org/04tj63d06","country_code":"US","type":"education","lineage":["https://openalex.org/I137902535"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Patrick Morrison","raw_affiliation_strings":["Department of Computer Science, North Carolina State University, Raleigh, NC, USA"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Department of Computer Science, North Carolina State University, Raleigh, NC, USA","institution_ids":["https://openalex.org/I137902535"]}]}],"institutions":[],"countries_distinct_count":2,"institutions_distinct_count":4,"corresponding_author_ids":["https://openalex.org/A5035551939"],"corresponding_institution_ids":["https://openalex.org/I173888879","https://openalex.org/I179863766","https://openalex.org/I4387930215"],"apc_list":{"value":2990,"currency":"USD","value_usd":2990},"apc_paid":{"value":2990,"currency":"USD","value_usd":2990},"fwci":4.4449,"has_fulltext":true,"cited_by_count":10,"citation_normalized_percentile":{"value":0.94639538,"is_in_top_1_percent":false,"is_in_top_10_percent":true},"cited_by_percentile_year":{"min":95,"max":98},"biblio":{"volume":"29","issue":"2","first_page":"509","last_page":"553"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10260","display_name":"Software Engineering Research","score":0.9998999834060669,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10260","display_name":"Software Engineering Research","score":0.9998999834060669,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10734","display_name":"Information and Cyber Security","score":0.9945999979972839,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T12423","display_name":"Software Reliability and Analysis Research","score":0.9828000068664551,"subfield":{"id":"https://openalex.org/subfields/1712","display_name":"Software"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.6737021207809448},{"id":"https://openalex.org/keywords/software-security-assurance","display_name":"Software security assurance","score":0.670864999294281},{"id":"https://openalex.org/keywords/asset","display_name":"Asset (computer security)","score":0.6056628227233887},{"id":"https://openalex.org/keywords/set","display_name":"Set (abstract data type)","score":0.5714275240898132},{"id":"https://openalex.org/keywords/software","display_name":"Software","score":0.5071065425872803},{"id":"https://openalex.org/keywords/scale","display_name":"Scale (ratio)","score":0.4661463797092438},{"id":"https://openalex.org/keywords/feature","display_name":"Feature (linguistics)","score":0.45845216512680054},{"id":"https://openalex.org/keywords/data-mining","display_name":"Data mining","score":0.37399908900260925},{"id":"https://openalex.org/keywords/computer-security","display_name":"Computer security","score":0.35569775104522705},{"id":"https://openalex.org/keywords/information-security","display_name":"Information security","score":0.25750696659088135},{"id":"https://openalex.org/keywords/security-service","display_name":"Security service","score":0.2144797146320343}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.6737021207809448},{"id":"https://openalex.org/C62913178","wikidata":"https://www.wikidata.org/wiki/Q7554361","display_name":"Software security assurance","level":4,"score":0.670864999294281},{"id":"https://openalex.org/C76178495","wikidata":"https://www.wikidata.org/wiki/Q4808784","display_name":"Asset (computer security)","level":2,"score":0.6056628227233887},{"id":"https://openalex.org/C177264268","wikidata":"https://www.wikidata.org/wiki/Q1514741","display_name":"Set (abstract data type)","level":2,"score":0.5714275240898132},{"id":"https://openalex.org/C2777904410","wikidata":"https://www.wikidata.org/wiki/Q7397","display_name":"Software","level":2,"score":0.5071065425872803},{"id":"https://openalex.org/C2778755073","wikidata":"https://www.wikidata.org/wiki/Q10858537","display_name":"Scale (ratio)","level":2,"score":0.4661463797092438},{"id":"https://openalex.org/C2776401178","wikidata":"https://www.wikidata.org/wiki/Q12050496","display_name":"Feature (linguistics)","level":2,"score":0.45845216512680054},{"id":"https://openalex.org/C124101348","wikidata":"https://www.wikidata.org/wiki/Q172491","display_name":"Data mining","level":1,"score":0.37399908900260925},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.35569775104522705},{"id":"https://openalex.org/C527648132","wikidata":"https://www.wikidata.org/wiki/Q189900","display_name":"Information security","level":2,"score":0.25750696659088135},{"id":"https://openalex.org/C29983905","wikidata":"https://www.wikidata.org/wiki/Q7445066","display_name":"Security service","level":3,"score":0.2144797146320343},{"id":"https://openalex.org/C199360897","wikidata":"https://www.wikidata.org/wiki/Q9143","display_name":"Programming language","level":1,"score":0.0},{"id":"https://openalex.org/C138885662","wikidata":"https://www.wikidata.org/wiki/Q5891","display_name":"Philosophy","level":0,"score":0.0},{"id":"https://openalex.org/C41895202","wikidata":"https://www.wikidata.org/wiki/Q8162","display_name":"Linguistics","level":1,"score":0.0},{"id":"https://openalex.org/C62520636","wikidata":"https://www.wikidata.org/wiki/Q944","display_name":"Quantum mechanics","level":1,"score":0.0},{"id":"https://openalex.org/C121332964","wikidata":"https://www.wikidata.org/wiki/Q413","display_name":"Physics","level":0,"score":0.0}],"mesh":[],"locations_count":3,"locations":[{"id":"doi:10.1007/s11219-020-09546-7","is_oa":true,"landing_page_url":"https://doi.org/10.1007/s11219-020-09546-7","pdf_url":"https://link.springer.com/content/pdf/10.1007/s11219-020-09546-7.pdf","source":{"id":"https://openalex.org/S7504070","display_name":"Software Quality Journal","issn_l":"0963-9314","issn":["0963-9314","1573-1367"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310319900","host_organization_name":"Springer Science+Business Media","host_organization_lineage":["https://openalex.org/P4310319900","https://openalex.org/P4310319965"],"host_organization_lineage_names":["Springer Science+Business Media","Springer Nature"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Software Quality Journal","raw_type":"journal-article"},{"id":"pmh:oai:hvlopen.brage.unit.no:11250/2824205","is_oa":true,"landing_page_url":"https://hdl.handle.net/11250/2824205","pdf_url":null,"source":{"id":"https://openalex.org/S4306401716","display_name":"Duo Research Archive (University of Oslo)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I184942183","host_organization_name":"University of Oslo","host_organization_lineage":["https://openalex.org/I184942183"],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"509\u2013553","raw_type":"info:eu-repo/semantics/article"},{"id":"pmh:oai:sintef.brage.unit.no:11250/3051216","is_oa":true,"landing_page_url":"https://hdl.handle.net/11250/3051216","pdf_url":null,"source":{"id":"https://openalex.org/S4306401716","display_name":"Duo Research Archive (University of Oslo)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I184942183","host_organization_name":"University of Oslo","host_organization_lineage":["https://openalex.org/I184942183"],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"509-553","raw_type":"info:eu-repo/semantics/article"}],"best_oa_location":{"id":"doi:10.1007/s11219-020-09546-7","is_oa":true,"landing_page_url":"https://doi.org/10.1007/s11219-020-09546-7","pdf_url":"https://link.springer.com/content/pdf/10.1007/s11219-020-09546-7.pdf","source":{"id":"https://openalex.org/S7504070","display_name":"Software Quality Journal","issn_l":"0963-9314","issn":["0963-9314","1573-1367"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310319900","host_organization_name":"Springer Science+Business Media","host_organization_lineage":["https://openalex.org/P4310319900","https://openalex.org/P4310319965"],"host_organization_lineage_names":["Springer Science+Business Media","Springer Nature"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Software Quality Journal","raw_type":"journal-article"},"sustainable_development_goals":[],"awards":[{"id":"https://openalex.org/G5504235594","display_name":null,"funder_award_id":"247678","funder_id":"https://openalex.org/F4320323299","funder_display_name":"Norges Forskningsr\u00e5d"}],"funders":[{"id":"https://openalex.org/F4320317045","display_name":"H\u00f8gskulen p\u00e5 Vestlandet","ror":"https://ror.org/05phns765"},{"id":"https://openalex.org/F4320323299","display_name":"Norges Forskningsr\u00e5d","ror":"https://ror.org/00epmv149"}],"has_content":{"grobid_xml":true,"pdf":true},"content_urls":{"pdf":"https://content.openalex.org/works/W3168865857.pdf","grobid_xml":"https://content.openalex.org/works/W3168865857.grobid-xml"},"referenced_works_count":42,"referenced_works":["https://openalex.org/W46659105","https://openalex.org/W1553724776","https://openalex.org/W1565746575","https://openalex.org/W1570448133","https://openalex.org/W1581639473","https://openalex.org/W1597406287","https://openalex.org/W1771830246","https://openalex.org/W1956559956","https://openalex.org/W1965667542","https://openalex.org/W1971733255","https://openalex.org/W1978394996","https://openalex.org/W1981028474","https://openalex.org/W2068632118","https://openalex.org/W2075817024","https://openalex.org/W2078283664","https://openalex.org/W2079317829","https://openalex.org/W2079753286","https://openalex.org/W2097089247","https://openalex.org/W2101726875","https://openalex.org/W2107249747","https://openalex.org/W2118020653","https://openalex.org/W2118978333","https://openalex.org/W2122399740","https://openalex.org/W2131744502","https://openalex.org/W2140984588","https://openalex.org/W2142958724","https://openalex.org/W2144211451","https://openalex.org/W2146649871","https://openalex.org/W2149684865","https://openalex.org/W2154183829","https://openalex.org/W2157657084","https://openalex.org/W2400375922","https://openalex.org/W2574811269","https://openalex.org/W2612560394","https://openalex.org/W2731862956","https://openalex.org/W2754913139","https://openalex.org/W2781021471","https://openalex.org/W2809528855","https://openalex.org/W2949547296","https://openalex.org/W4234367654","https://openalex.org/W4235486249","https://openalex.org/W4285719527"],"related_works":["https://openalex.org/W3147584709","https://openalex.org/W2562550268","https://openalex.org/W2977677679","https://openalex.org/W1992327129","https://openalex.org/W2381986121","https://openalex.org/W2370918718","https://openalex.org/W1589188624","https://openalex.org/W2256933480","https://openalex.org/W2370081953","https://openalex.org/W2027854990"],"abstract_inverted_index":{"Abstract":[0],"Security":[1],"remains":[2],"under-addressed":[3],"in":[4,144,247,250,253,257,273,311],"many":[5],"organisations,":[6],"illustrated":[7],"by":[8,91,118,242],"the":[9,30,54,58,145,214,312],"number":[10],"of":[11,52,57,115,138,208,220,245,259],"large-scale":[12],"software":[13,21,41],"security":[14,28,38,55,75,116,123,172,270,289,324],"breaches.":[15],"Preventing":[16],"breaches":[17],"can":[18,100,107,342],"begin":[19],"during":[20,29,40],"development":[22,42],"if":[23],"attention":[24],"is":[25,43,82],"paid":[26],"to":[27,37,44,183,189,196,224,293,304,338],"software\u2019s":[31],"design":[32],"and":[33,133,141,153,159,191,203,216,255,281,302,335],"implementation.":[34],"One":[35],"approach":[36],"assurance":[39],"examine":[45],"communications":[46],"between":[47,201],"developers":[48],"as":[49,74,174,291],"a":[50,102,113,150,175,243,265,295],"means":[51],"studying":[53],"concerns":[56],"project.":[59],"Prior":[60],"research":[61],"has":[62],"investigated":[63],"models":[64,85,228,235,301,320,340],"for":[65,269,328],"classifying":[66],"project":[67],"communication":[68],"messages":[69],"(e.g.,":[70],"issues":[71],"or":[72,77,94],"commits)":[73],"related":[76],"not.":[78],"A":[79],"known":[80],"problem":[81],"that":[83,106,229,236,285,341],"these":[84,139],"are":[86],"project-specific,":[87],"limiting":[88],"their":[89],"use":[90,230,237],"other":[92,305],"projects":[93,306],"organisations.":[95],"We":[96,111,276],"investigate":[97],"whether":[98],"we":[99,148,332],"build":[101],"generic":[103],"classification":[104,151,297,300,319],"model":[105,152,168,268,298,316],"generalise":[108,303,343],"across":[109,212,344],"projects.":[110,330,347],"define":[112],"set":[114,177],"keywords":[117,173,290],"extracting":[119],"them":[120,126,143],"from":[121,181,187,194,222],"relevant":[122],"sources,":[124],"dividing":[125],"into":[127],"four":[128],"categories:":[129],"asset,":[130],"attack/threat,":[131],"control/mitigation,":[132],"implicit.":[134],"Using":[135],"different":[136,165,329,345],"combinations":[137],"categories":[140,325],"including":[142],"training":[146,313],"dataset,":[147,215],"built":[149],"evaluated":[154],"it":[155],"on":[156,170,240],"industrial,":[157],"open-source,":[158],"research-based":[160],"datasets":[161],"containing":[162],"over":[163],"45":[164],"products.":[166],"Our":[167],"based":[169],"harvested":[171,288],"feature":[176],"shows":[178],"average":[179,199,206,218,241],"recall":[180,186,193],"55":[182],"86%,":[184],"minimum":[185],"43":[188],"71%":[190],"maximum":[192],"60":[195],"100%.":[197],"An":[198],"f-score":[200],"3.4":[202],"88%,":[204],"an":[205,217],"g-measure":[207],"at":[209],"least":[210],"66%":[211],"all":[213,274],"AUC":[219,258],"ROC":[221],"69":[223],"89%.":[225],"In":[226],"addition,":[227],"externally":[231],"sourced":[232],"features":[233,239,292,310],"outperformed":[234],"project-specific":[238],"margin":[244],"26\u201344%":[246],"recall,":[248],"22\u201350%":[249],"g-measure,":[251],"0.4\u201328%":[252],"f-score,":[254],"15\u201319%":[256],"ROC.":[260],"Further,":[261],"our":[262],"results":[263],"outperform":[264],"state-of-the-art":[266],"prediction":[267],"bug":[271],"reports":[272],"cases.":[275],"find":[277],"using":[278,287],"sound":[279],"statistical":[280],"effect":[282],"size":[283],"tests":[284],"(1)":[286],"train":[294],"text":[296],"improve":[299,318],"significantly.":[307,321],"(2)":[308],"Including":[309],"dataset":[314],"before":[315],"construction":[317],"(3)":[322],"Different":[323],"represent":[326],"predictors":[327],"Finally,":[331],"introduce":[333],"new":[334],"promising":[336],"approaches":[337],"construct":[339],"independent":[346]},"counts_by_year":[{"year":2026,"cited_by_count":2},{"year":2025,"cited_by_count":2},{"year":2024,"cited_by_count":3},{"year":2022,"cited_by_count":3}],"updated_date":"2026-08-05T07:39:15.569665","created_date":"2025-10-10T00:00:00"}