{"id":"https://openalex.org/W4298145913","doi":"https://doi.org/10.1142/s0218194022500620","title":"Approach to Predict Software Vulnerability Based on Multiple-Level <i>N</i>-gram Feature Extraction and Heterogeneous Ensemble Learning","display_name":"Approach to Predict Software Vulnerability Based on Multiple-Level <i>N</i>-gram Feature Extraction and Heterogeneous Ensemble Learning","publication_year":2022,"publication_date":"2022-09-30","ids":{"openalex":"https://openalex.org/W4298145913","doi":"https://doi.org/10.1142/s0218194022500620"},"language":"en","primary_location":{"id":"doi:10.1142/s0218194022500620","is_oa":false,"landing_page_url":"https://doi.org/10.1142/s0218194022500620","pdf_url":null,"source":{"id":"https://openalex.org/S131442419","display_name":"International Journal of Software Engineering and Knowledge Engineering","issn_l":"0218-1940","issn":["0218-1940","1793-6403"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310319815","host_organization_name":"World Scientific","host_organization_lineage":["https://openalex.org/P4310319815"],"host_organization_lineage_names":["World Scientific"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"International Journal of Software Engineering and Knowledge Engineering","raw_type":"journal-article"},"type":"article","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5100673338","display_name":"Bing Zhang","orcid":"https://orcid.org/0000-0002-9867-8439"},"institutions":[{"id":"https://openalex.org/I39333907","display_name":"Yanshan University","ror":"https://ror.org/02txfnf15","country_code":"CN","type":"education","lineage":["https://openalex.org/I39333907"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Bing Zhang","raw_affiliation_strings":["School of Information Science and Engineering, Yanshan University, Qinhuangdao, P.\u00a0R.\u00a0China","The Key Laboratory of Software Engineering, Yanshan University, Qinhuangdao, P.\u00a0R.\u00a0China"],"raw_orcid":"https://orcid.org/0000-0002-9867-8439","affiliations":[{"raw_affiliation_string":"School of Information Science and Engineering, Yanshan University, Qinhuangdao, P.\u00a0R.\u00a0China","institution_ids":["https://openalex.org/I39333907"]},{"raw_affiliation_string":"The Key Laboratory of Software Engineering, Yanshan University, Qinhuangdao, P.\u00a0R.\u00a0China","institution_ids":["https://openalex.org/I39333907"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5100722724","display_name":"Yuan Gao","orcid":"https://orcid.org/0000-0002-9336-0640"},"institutions":[{"id":"https://openalex.org/I39333907","display_name":"Yanshan University","ror":"https://ror.org/02txfnf15","country_code":"CN","type":"education","lineage":["https://openalex.org/I39333907"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Yuan Gao","raw_affiliation_strings":["School of Information Science and Engineering, Yanshan University, Qinhuangdao, P.\u00a0R.\u00a0China","The Key Laboratory of Software Engineering, Yanshan University, Qinhuangdao, P.\u00a0R.\u00a0China"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"School of Information Science and Engineering, Yanshan University, Qinhuangdao, P.\u00a0R.\u00a0China","institution_ids":["https://openalex.org/I39333907"]},{"raw_affiliation_string":"The Key Laboratory of Software Engineering, Yanshan University, Qinhuangdao, P.\u00a0R.\u00a0China","institution_ids":["https://openalex.org/I39333907"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5060239499","display_name":"Jingyi Wu","orcid":"https://orcid.org/0000-0002-3519-3952"},"institutions":[{"id":"https://openalex.org/I39333907","display_name":"Yanshan University","ror":"https://ror.org/02txfnf15","country_code":"CN","type":"education","lineage":["https://openalex.org/I39333907"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Jingyi Wu","raw_affiliation_strings":["School of Information Science and Engineering, Yanshan University, Qinhuangdao, P.\u00a0R.\u00a0China","The Key Laboratory of Software Engineering, Yanshan University, Qinhuangdao, P.\u00a0R.\u00a0China"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"School of Information Science and Engineering, Yanshan University, Qinhuangdao, P.\u00a0R.\u00a0China","institution_ids":["https://openalex.org/I39333907"]},{"raw_affiliation_string":"The Key Laboratory of Software Engineering, Yanshan University, Qinhuangdao, P.\u00a0R.\u00a0China","institution_ids":["https://openalex.org/I39333907"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5058107332","display_name":"Ning Wang","orcid":"https://orcid.org/0000-0003-1745-1425"},"institutions":[{"id":"https://openalex.org/I39333907","display_name":"Yanshan University","ror":"https://ror.org/02txfnf15","country_code":"CN","type":"education","lineage":["https://openalex.org/I39333907"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Ning Wang","raw_affiliation_strings":["School of Information Science and Engineering, Yanshan University, Qinhuangdao, P.\u00a0R.\u00a0China","The Key Laboratory of Software Engineering, Yanshan University, Qinhuangdao, P.\u00a0R.\u00a0China"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"School of Information Science and Engineering, Yanshan University, Qinhuangdao, P.\u00a0R.\u00a0China","institution_ids":["https://openalex.org/I39333907"]},{"raw_affiliation_string":"The Key Laboratory of Software Engineering, Yanshan University, Qinhuangdao, P.\u00a0R.\u00a0China","institution_ids":["https://openalex.org/I39333907"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5100391116","display_name":"Qian Wang","orcid":"https://orcid.org/0000-0002-8967-8525"},"institutions":[{"id":"https://openalex.org/I39333907","display_name":"Yanshan University","ror":"https://ror.org/02txfnf15","country_code":"CN","type":"education","lineage":["https://openalex.org/I39333907"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Qian Wang","raw_affiliation_strings":["School of Information Science and Engineering, Yanshan University, Qinhuangdao, P.\u00a0R.\u00a0China","The Key Laboratory of Software Engineering, Yanshan University, Qinhuangdao, P.\u00a0R.\u00a0China"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"School of Information Science and Engineering, Yanshan University, Qinhuangdao, P.\u00a0R.\u00a0China","institution_ids":["https://openalex.org/I39333907"]},{"raw_affiliation_string":"The Key Laboratory of Software Engineering, Yanshan University, Qinhuangdao, P.\u00a0R.\u00a0China","institution_ids":["https://openalex.org/I39333907"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5102869188","display_name":"Jiadong Ren","orcid":"https://orcid.org/0000-0002-2245-9133"},"institutions":[{"id":"https://openalex.org/I39333907","display_name":"Yanshan University","ror":"https://ror.org/02txfnf15","country_code":"CN","type":"education","lineage":["https://openalex.org/I39333907"]}],"countries":["CN"],"is_corresponding":true,"raw_author_name":"Jiadong Ren","raw_affiliation_strings":["School of Information Science and Engineering, Yanshan University, Qinhuangdao, P.\u00a0R.\u00a0China","The Key Laboratory of Software Engineering, Yanshan University, Qinhuangdao, P.\u00a0R.\u00a0China"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"School of Information Science and Engineering, Yanshan University, Qinhuangdao, P.\u00a0R.\u00a0China","institution_ids":["https://openalex.org/I39333907"]},{"raw_affiliation_string":"The Key Laboratory of Software Engineering, Yanshan University, Qinhuangdao, P.\u00a0R.\u00a0China","institution_ids":["https://openalex.org/I39333907"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":1,"corresponding_author_ids":["https://openalex.org/A5102869188"],"corresponding_institution_ids":["https://openalex.org/I39333907"],"apc_list":null,"apc_paid":null,"fwci":1.5487,"has_fulltext":false,"cited_by_count":5,"citation_normalized_percentile":{"value":0.86844817,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":{"min":94,"max":97},"biblio":{"volume":"32","issue":"10","first_page":"1559","last_page":"1582"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10260","display_name":"Software Engineering Research","score":0.9998999834060669,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10260","display_name":"Software Engineering Research","score":0.9998999834060669,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T12423","display_name":"Software Reliability and Analysis Research","score":0.9995999932289124,"subfield":{"id":"https://openalex.org/subfields/1712","display_name":"Software"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":0.9973999857902527,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.7905468940734863},{"id":"https://openalex.org/keywords/overfitting","display_name":"Overfitting","score":0.6481356024742126},{"id":"https://openalex.org/keywords/artificial-intelligence","display_name":"Artificial intelligence","score":0.608799159526825},{"id":"https://openalex.org/keywords/machine-learning","display_name":"Machine learning","score":0.6020899415016174},{"id":"https://openalex.org/keywords/support-vector-machine","display_name":"Support vector machine","score":0.48466116189956665},{"id":"https://openalex.org/keywords/data-mining","display_name":"Data mining","score":0.45569437742233276},{"id":"https://openalex.org/keywords/ensemble-learning","display_name":"Ensemble learning","score":0.4377446472644806},{"id":"https://openalex.org/keywords/software","display_name":"Software","score":0.4338676333427429},{"id":"https://openalex.org/keywords/feature-extraction","display_name":"Feature extraction","score":0.421800434589386},{"id":"https://openalex.org/keywords/false-positive-rate","display_name":"False positive rate","score":0.41272154450416565},{"id":"https://openalex.org/keywords/pattern-recognition","display_name":"Pattern recognition (psychology)","score":0.3484530746936798},{"id":"https://openalex.org/keywords/artificial-neural-network","display_name":"Artificial neural network","score":0.19738781452178955}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.7905468940734863},{"id":"https://openalex.org/C22019652","wikidata":"https://www.wikidata.org/wiki/Q331309","display_name":"Overfitting","level":3,"score":0.6481356024742126},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.608799159526825},{"id":"https://openalex.org/C119857082","wikidata":"https://www.wikidata.org/wiki/Q2539","display_name":"Machine learning","level":1,"score":0.6020899415016174},{"id":"https://openalex.org/C12267149","wikidata":"https://www.wikidata.org/wiki/Q282453","display_name":"Support vector machine","level":2,"score":0.48466116189956665},{"id":"https://openalex.org/C124101348","wikidata":"https://www.wikidata.org/wiki/Q172491","display_name":"Data mining","level":1,"score":0.45569437742233276},{"id":"https://openalex.org/C45942800","wikidata":"https://www.wikidata.org/wiki/Q245652","display_name":"Ensemble learning","level":2,"score":0.4377446472644806},{"id":"https://openalex.org/C2777904410","wikidata":"https://www.wikidata.org/wiki/Q7397","display_name":"Software","level":2,"score":0.4338676333427429},{"id":"https://openalex.org/C52622490","wikidata":"https://www.wikidata.org/wiki/Q1026626","display_name":"Feature extraction","level":2,"score":0.421800434589386},{"id":"https://openalex.org/C95922358","wikidata":"https://www.wikidata.org/wiki/Q5432725","display_name":"False positive rate","level":2,"score":0.41272154450416565},{"id":"https://openalex.org/C153180895","wikidata":"https://www.wikidata.org/wiki/Q7148389","display_name":"Pattern recognition (psychology)","level":2,"score":0.3484530746936798},{"id":"https://openalex.org/C50644808","wikidata":"https://www.wikidata.org/wiki/Q192776","display_name":"Artificial neural network","level":2,"score":0.19738781452178955},{"id":"https://openalex.org/C199360897","wikidata":"https://www.wikidata.org/wiki/Q9143","display_name":"Programming language","level":1,"score":0.0}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1142/s0218194022500620","is_oa":false,"landing_page_url":"https://doi.org/10.1142/s0218194022500620","pdf_url":null,"source":{"id":"https://openalex.org/S131442419","display_name":"International Journal of Software Engineering and Knowledge Engineering","issn_l":"0218-1940","issn":["0218-1940","1793-6403"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310319815","host_organization_name":"World Scientific","host_organization_lineage":["https://openalex.org/P4310319815"],"host_organization_lineage_names":["World Scientific"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"International Journal of Software Engineering and Knowledge Engineering","raw_type":"journal-article"}],"best_oa_location":null,"sustainable_development_goals":[],"awards":[{"id":"https://openalex.org/G4822674993","display_name":null,"funder_award_id":"F2022203089","funder_id":"https://openalex.org/F4320322163","funder_display_name":"Natural Science Foundation of Hebei Province"},{"id":"https://openalex.org/G7719504569","display_name":null,"funder_award_id":"F2022203026","funder_id":"https://openalex.org/F4320322163","funder_display_name":"Natural Science Foundation of Hebei Province"}],"funders":[{"id":"https://openalex.org/F4320322163","display_name":"Natural Science Foundation of Hebei Province","ror":"https://ror.org/01h0zpd94"}],"has_content":{"pdf":false,"grobid_xml":false},"content_urls":null,"referenced_works_count":17,"referenced_works":["https://openalex.org/W28412257","https://openalex.org/W76990466","https://openalex.org/W1553894716","https://openalex.org/W1554055400","https://openalex.org/W1577404745","https://openalex.org/W1964062576","https://openalex.org/W1964962870","https://openalex.org/W1976878954","https://openalex.org/W1992114977","https://openalex.org/W2043837581","https://openalex.org/W2078396547","https://openalex.org/W2079753286","https://openalex.org/W2112316706","https://openalex.org/W2121866145","https://openalex.org/W2770225980","https://openalex.org/W3141989311","https://openalex.org/W4235271607"],"related_works":["https://openalex.org/W1996541855","https://openalex.org/W4225691219","https://openalex.org/W2126100045","https://openalex.org/W2336974148","https://openalex.org/W2384093694","https://openalex.org/W2345184372","https://openalex.org/W2187500075","https://openalex.org/W2381773606","https://openalex.org/W4366374059","https://openalex.org/W4323021538"],"abstract_inverted_index":{"Software":[0],"vulnerabilities":[1],"are":[2],"one":[3],"of":[4,7,46,96,121,136],"the":[5,44,116,129,134,181,186,193,198],"roots":[6],"computer":[8],"security":[9],"problems.":[10],"The":[11],"traditional":[12],"static":[13],"analysis":[14,17],"and":[15,38,52,77,86,104,109,118,147,166,207,218,226],"dynamic":[16],"methods":[18],"based":[19,71],"on":[20,72,155,203],"software":[21,56],"source":[22],"code":[23,83],"mainly":[24],"have":[25],"some":[26],"deficiencies,":[27],"such":[28,62],"as":[29,133,180],"high":[30,34],"false":[31,35,215,219],"positive":[32,216],"rate,":[33],"negative":[36,220],"rate":[37,217,221],"insufficient":[39],"semantic":[40,98,117],"information":[41,120],"captured.":[42],"Nevertheless,":[43],"application":[45],"machine":[47,158],"learning,":[48],"Natural":[49],"Language":[50],"Processing":[51],"other":[53],"technologies":[54],"in":[55],"vulnerability":[57,68,194,206,210],"prediction":[58,69,137,195],"can":[59,223],"effectively":[60],"mitigate":[61],"issues.":[63],"This":[64],"paper":[65,151],"proposed":[66,199],"a":[67,88,140,213],"method":[70,190,200],"multiple-level":[73,89],"N-gram":[74,90,97],"feature":[75,91],"extraction":[76],"heterogeneous":[78,188],"ensemble":[79,189],"learning.":[80],"First,":[81],"by":[82],"intermediate":[84],"representation":[85],"constructing":[87],"generation":[92],"model,":[93],"two":[94],"kinds":[95],"features":[99],"with":[100,212],"different":[101,105],"window":[102],"size":[103],"granularity":[106],"at":[107],"word":[108],"char":[110],"level":[111],"were":[112],"extracted":[113],"to":[114,127,145,184,191],"retain":[115],"structural":[119],"code.":[122],"Second,":[123],"TF\u2013IDF":[124],"was":[125,143,201],"used":[126],"construct":[128],"vector":[130],"space":[131],"model":[132],"input":[135],"model.":[138,196],"As":[139],"single":[141],"classifier":[142],"prone":[144],"overfitting":[146],"poor":[148],"generalization,":[149],"this":[150],"conducted":[152],"benchmark":[153],"testing":[154],"five":[156],"classical":[157],"learning":[159],"algorithms":[160],"(NB,":[161],"SVM,":[162],"DT,":[163,171],"LR,":[164,172],"RF),":[165],"then":[167],"combined":[168],"four":[169],"(SVM,":[170],"RF)":[173],"among":[174],"them,":[175],"which":[176,222],"had":[177],"better":[178],"performance":[179],"base":[182],"classifiers":[183],"form":[185],"stacking":[187],"build":[192],"Finally,":[197],"verified":[202],"buffer":[204],"overflow":[205],"resource":[208],"management":[209],"datasets,":[211],"lowest":[214],"reach":[224],"1.58%":[225],"4.06%,":[227],"respectively.":[228]},"counts_by_year":[{"year":2025,"cited_by_count":3},{"year":2024,"cited_by_count":2}],"updated_date":"2026-05-21T06:26:12.895304","created_date":"2025-10-10T00:00:00"}