{"id":"https://openalex.org/W2783078595","doi":"https://doi.org/10.1109/glocom.2017.8254428","title":"VulDigger: A Just-in-Time and Cost-Aware Tool for Digging Vulnerability-Contributing Changes","display_name":"VulDigger: A Just-in-Time and Cost-Aware Tool for Digging Vulnerability-Contributing Changes","publication_year":2017,"publication_date":"2017-12-01","ids":{"openalex":"https://openalex.org/W2783078595","doi":"https://doi.org/10.1109/glocom.2017.8254428","mag":"2783078595"},"language":"en","primary_location":{"id":"doi:10.1109/glocom.2017.8254428","is_oa":false,"landing_page_url":"https://doi.org/10.1109/glocom.2017.8254428","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"GLOBECOM 2017 - 2017 IEEE Global Communications Conference","raw_type":"proceedings-article"},"type":"conference-paper","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5101908948","display_name":"Limin Yang","orcid":"https://orcid.org/0000-0001-9302-7656"},"institutions":[{"id":"https://openalex.org/I66867065","display_name":"East China Normal University","ror":"https://ror.org/02n96ep67","country_code":"CN","type":"education","lineage":["https://openalex.org/I66867065"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Limin Yang","raw_affiliation_strings":["Department of Computer Science and Technology, East China Normal University, Shanghai, China"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Department of Computer Science and Technology, East China Normal University, Shanghai, China","institution_ids":["https://openalex.org/I66867065"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5015211192","display_name":"Xiangxue Li","orcid":"https://orcid.org/0000-0002-1779-6178"},"institutions":[{"id":"https://openalex.org/I66867065","display_name":"East China Normal University","ror":"https://ror.org/02n96ep67","country_code":"CN","type":"education","lineage":["https://openalex.org/I66867065"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Xiangxue Li","raw_affiliation_strings":["Department of Computer Science and Technology, East China Normal University, Shanghai, China","National Engineering Laboratory for Wireless Security, XUPT"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Department of Computer Science and Technology, East China Normal University, Shanghai, China","institution_ids":["https://openalex.org/I66867065"]},{"raw_affiliation_string":"National Engineering Laboratory for Wireless Security, XUPT","institution_ids":[]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5100417226","display_name":"Yu Yu","orcid":"https://orcid.org/0000-0002-9278-4521"},"institutions":[{"id":"https://openalex.org/I183067930","display_name":"Shanghai Jiao Tong University","ror":"https://ror.org/0220qvk04","country_code":"CN","type":"education","lineage":["https://openalex.org/I183067930"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Yu Yu","raw_affiliation_strings":["Department of Computer Science and Engineering, Shanghai Jiao Tong University, Shanghai, China"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Department of Computer Science and Engineering, Shanghai Jiao Tong University, Shanghai, China","institution_ids":["https://openalex.org/I183067930"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":2,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":null,"has_fulltext":false,"cited_by_count":17,"citation_normalized_percentile":null,"cited_by_percentile_year":null,"biblio":{"volume":null,"issue":null,"first_page":"1","last_page":"7"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10260","display_name":"Software Engineering Research","score":0.9998000264167786,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10260","display_name":"Software Engineering Research","score":0.9998000264167786,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":0.9983999729156494,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T12423","display_name":"Software Reliability and Analysis Research","score":0.9965999722480774,"subfield":{"id":"https://openalex.org/subfields/1712","display_name":"Software"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.7126192450523376},{"id":"https://openalex.org/keywords/vulnerability","display_name":"Vulnerability (computing)","score":0.6672677397727966},{"id":"https://openalex.org/keywords/audit","display_name":"Audit","score":0.5663890838623047},{"id":"https://openalex.org/keywords/software","display_name":"Software","score":0.4867384433746338},{"id":"https://openalex.org/keywords/code-review","display_name":"Code review","score":0.4734216332435608},{"id":"https://openalex.org/keywords/code","display_name":"Code (set theory)","score":0.4329746663570404},{"id":"https://openalex.org/keywords/source-lines-of-code","display_name":"Source lines of code","score":0.4247454106807709},{"id":"https://openalex.org/keywords/computer-security","display_name":"Computer security","score":0.3928983509540558},{"id":"https://openalex.org/keywords/software-engineering","display_name":"Software engineering","score":0.3522055149078369},{"id":"https://openalex.org/keywords/machine-learning","display_name":"Machine learning","score":0.328673779964447},{"id":"https://openalex.org/keywords/data-mining","display_name":"Data mining","score":0.32398074865341187},{"id":"https://openalex.org/keywords/software-development","display_name":"Software development","score":0.303452730178833},{"id":"https://openalex.org/keywords/software-quality","display_name":"Software quality","score":0.2529805302619934}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.7126192450523376},{"id":"https://openalex.org/C95713431","wikidata":"https://www.wikidata.org/wiki/Q631425","display_name":"Vulnerability (computing)","level":2,"score":0.6672677397727966},{"id":"https://openalex.org/C199521495","wikidata":"https://www.wikidata.org/wiki/Q181487","display_name":"Audit","level":2,"score":0.5663890838623047},{"id":"https://openalex.org/C2777904410","wikidata":"https://www.wikidata.org/wiki/Q7397","display_name":"Software","level":2,"score":0.4867384433746338},{"id":"https://openalex.org/C150292731","wikidata":"https://www.wikidata.org/wiki/Q1342704","display_name":"Code review","level":5,"score":0.4734216332435608},{"id":"https://openalex.org/C2776760102","wikidata":"https://www.wikidata.org/wiki/Q5139990","display_name":"Code (set theory)","level":3,"score":0.4329746663570404},{"id":"https://openalex.org/C199519371","wikidata":"https://www.wikidata.org/wiki/Q942695","display_name":"Source lines of code","level":3,"score":0.4247454106807709},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.3928983509540558},{"id":"https://openalex.org/C115903868","wikidata":"https://www.wikidata.org/wiki/Q80993","display_name":"Software engineering","level":1,"score":0.3522055149078369},{"id":"https://openalex.org/C119857082","wikidata":"https://www.wikidata.org/wiki/Q2539","display_name":"Machine learning","level":1,"score":0.328673779964447},{"id":"https://openalex.org/C124101348","wikidata":"https://www.wikidata.org/wiki/Q172491","display_name":"Data mining","level":1,"score":0.32398074865341187},{"id":"https://openalex.org/C529173508","wikidata":"https://www.wikidata.org/wiki/Q638608","display_name":"Software development","level":3,"score":0.303452730178833},{"id":"https://openalex.org/C117447612","wikidata":"https://www.wikidata.org/wiki/Q1412670","display_name":"Software quality","level":4,"score":0.2529805302619934},{"id":"https://openalex.org/C162324750","wikidata":"https://www.wikidata.org/wiki/Q8134","display_name":"Economics","level":0,"score":0.0},{"id":"https://openalex.org/C177264268","wikidata":"https://www.wikidata.org/wiki/Q1514741","display_name":"Set (abstract data type)","level":2,"score":0.0},{"id":"https://openalex.org/C187736073","wikidata":"https://www.wikidata.org/wiki/Q2920921","display_name":"Management","level":1,"score":0.0},{"id":"https://openalex.org/C199360897","wikidata":"https://www.wikidata.org/wiki/Q9143","display_name":"Programming language","level":1,"score":0.0}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1109/glocom.2017.8254428","is_oa":false,"landing_page_url":"https://doi.org/10.1109/glocom.2017.8254428","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"GLOBECOM 2017 - 2017 IEEE Global Communications Conference","raw_type":"proceedings-article"}],"best_oa_location":null,"sustainable_development_goals":[{"id":"https://metadata.un.org/sdg/14","display_name":"Life below water","score":0.49000000953674316}],"awards":[],"funders":[],"has_content":{"grobid_xml":false,"pdf":false},"content_urls":null,"referenced_works_count":22,"referenced_works":["https://openalex.org/W1491317234","https://openalex.org/W1564172793","https://openalex.org/W1974828111","https://openalex.org/W1986222079","https://openalex.org/W1997236144","https://openalex.org/W2003315002","https://openalex.org/W2007705030","https://openalex.org/W2027806980","https://openalex.org/W2043837581","https://openalex.org/W2067148378","https://openalex.org/W2069268700","https://openalex.org/W2079753286","https://openalex.org/W2082645103","https://openalex.org/W2101234009","https://openalex.org/W2104329051","https://openalex.org/W2137789775","https://openalex.org/W2147386665","https://openalex.org/W2149014999","https://openalex.org/W2157353183","https://openalex.org/W2166336492","https://openalex.org/W2529844546","https://openalex.org/W4243862372"],"related_works":["https://openalex.org/W2986478207","https://openalex.org/W4312706861","https://openalex.org/W1986222079","https://openalex.org/W4384159044","https://openalex.org/W4388706046","https://openalex.org/W4324299228","https://openalex.org/W2924713288","https://openalex.org/W3014398013","https://openalex.org/W167779242","https://openalex.org/W2080267848"],"abstract_inverted_index":{"It":[0],"has":[1],"been":[2],"widely":[3],"adopted":[4],"to":[5,25,66,150,158,183,214],"minimize":[6],"the":[7,80,123,141,178],"maintenance":[8],"cost":[9],"by":[10,86,145],"predicting":[11],"potential":[12],"vulnerabilities":[13],"before":[14],"code":[15,61,74,216],"audits":[16],"in":[17,94],"academia":[18],"and":[19,34,39,56,110,119],"industry.":[20],"Most":[21],"previous":[22],"research":[23],"dedicated":[24],"file/component":[26],"level":[27],"vulnerability":[28,53,120],"prediction":[29,54,118],"models":[30],"is":[31,128,166],"coarse-":[32],"grained":[33],"may":[35],"suffer":[36],"from":[37,70,79,114],"cost-prohibitive":[38],"impractical":[40],"security":[41,203],"testing":[42],"activities.":[43],"In":[44],"this":[45],"paper,":[46],"we":[47],"focus":[48],"on":[49,143],"a":[50,58,71,88,95,102,106,147],"cost-":[51],"aware":[52],"model":[55,149,165],"present":[57],"just-in-time":[59],"change-level":[60],"review":[62],"tool":[63,104,127],"called":[64],"VulDigger":[65],"dig":[67],"suspicious":[68],"ones":[69],"sea":[72],"of":[73,83,108,125,168,171,177,201],"changes.":[75],"Our":[76,160,193],"contributions":[77],"benefit":[78],"case":[81],"study":[82],"Mozilla":[84],"Firefox":[85],"constructing":[87],"large-scale":[89],"vulnerability-contributing":[90],"changes":[91,154,186,213],"(VCCs)":[92],"dataset":[93],"semi-automatic":[96],"fashion.":[97],"We":[98,138],"then":[99],"further":[100],"manifest":[101],"classification":[103],"with":[105,155,174],"mixture":[107],"established":[109],"new":[111],"metrics":[112],"derived":[113],"both":[115],"software":[116,136],"defect":[117],"prediction.":[121],"Consequently,":[122],"precision":[124],"such":[126,164],"extremely":[129],"promising":[130],"(i.e.,":[131,187],"92%)":[132],"for":[133],"an":[134,198],"effort-aware":[135],"team.":[137],"also":[139],"examine":[140],"return":[142],"investment":[144],"training":[146],"regression":[148],"locate":[151],"most":[152],"skeptical":[153],"fewer":[156],"lines":[157],"inspect.":[159],"findings":[161],"suggest":[162],"that":[163],"capable":[167],"pinpointing":[169],"31%":[170],"all":[172,185],"VCCs":[173],"only":[175],"20%":[176],"effort":[179],"it":[180,206],"would":[181],"take":[182],"audit":[184],"55%":[188],"better":[189],"than":[190],"random":[191],"predictor).":[192],"outputs":[194],"can":[195],"assist":[196],"as":[197,205],"early":[199],"step":[200],"continuous":[202],"inspections":[204],"provides":[207],"immediate":[208],"feedback":[209],"once":[210],"developers":[211],"submit":[212],"their":[215],"base.":[217]},"counts_by_year":[{"year":2025,"cited_by_count":5},{"year":2024,"cited_by_count":2},{"year":2023,"cited_by_count":2},{"year":2022,"cited_by_count":2},{"year":2021,"cited_by_count":5},{"year":2019,"cited_by_count":1}],"updated_date":"2026-07-18T05:51:51.687321","created_date":"2025-10-10T00:00:00"}