{"id":"https://openalex.org/W3167569033","doi":"https://doi.org/10.1145/3433210.3453115","title":"Bran: Reduce Vulnerability Search Space in Large Open Source Repositories by Learning Bug Symptoms","display_name":"Bran: Reduce Vulnerability Search Space in Large Open Source Repositories by Learning Bug Symptoms","publication_year":2021,"publication_date":"2021-05-24","ids":{"openalex":"https://openalex.org/W3167569033","doi":"https://doi.org/10.1145/3433210.3453115","mag":"3167569033"},"language":"en","primary_location":{"id":"doi:10.1145/3433210.3453115","is_oa":true,"landing_page_url":"https://doi.org/10.1145/3433210.3453115","pdf_url":"https://dl.acm.org/doi/pdf/10.1145/3433210.3453115","source":null,"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the 2021 ACM Asia Conference on Computer and Communications Security","raw_type":"proceedings-article"},"type":"conference-paper","indexed_in":["crossref"],"open_access":{"is_oa":true,"oa_status":"gold","oa_url":"https://dl.acm.org/doi/pdf/10.1145/3433210.3453115","any_repository_has_fulltext":true},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5072037132","display_name":"Dongyu Meng","orcid":null},"institutions":[{"id":"https://openalex.org/I154570441","display_name":"University of California, Santa Barbara","ror":"https://ror.org/02t274463","country_code":"US","type":"education","lineage":["https://openalex.org/I154570441"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Dongyu Meng","raw_affiliation_strings":["University of California, Santa Barbara, Santa Barbara, CA, USA"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"University of California, Santa Barbara, Santa Barbara, CA, USA","institution_ids":["https://openalex.org/I154570441"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5023836913","display_name":"Michele Guerriero","orcid":"https://orcid.org/0000-0001-8825-4512"},"institutions":[{"id":"https://openalex.org/I93860229","display_name":"Politecnico di Milano","ror":"https://ror.org/01nffqt88","country_code":"IT","type":"education","lineage":["https://openalex.org/I93860229"]}],"countries":["IT"],"is_corresponding":false,"raw_author_name":"Michele Guerriero","raw_affiliation_strings":["Politecnico di Milano, Milan, Italy"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Politecnico di Milano, Milan, Italy","institution_ids":["https://openalex.org/I93860229"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5071486684","display_name":"Aravind Machiry","orcid":"https://orcid.org/0000-0001-5124-6818"},"institutions":[{"id":"https://openalex.org/I219193219","display_name":"Purdue University West Lafayette","ror":"https://ror.org/02dqehb95","country_code":"US","type":"education","lineage":["https://openalex.org/I219193219"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Aravind Machiry","raw_affiliation_strings":["Purdue University, West Lafayette, IN, USA"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Purdue University, West Lafayette, IN, USA","institution_ids":["https://openalex.org/I219193219"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5072290972","display_name":"Hojjat Aghakhani","orcid":null},"institutions":[{"id":"https://openalex.org/I154570441","display_name":"University of California, Santa Barbara","ror":"https://ror.org/02t274463","country_code":"US","type":"education","lineage":["https://openalex.org/I154570441"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Hojjat Aghakhani","raw_affiliation_strings":["University of California, Santa Barbara, Santa Barbara, CA, USA"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"University of California, Santa Barbara, Santa Barbara, CA, USA","institution_ids":["https://openalex.org/I154570441"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5037043867","display_name":"Priyanka Bose","orcid":"https://orcid.org/0000-0002-7780-3720"},"institutions":[{"id":"https://openalex.org/I154570441","display_name":"University of California, Santa Barbara","ror":"https://ror.org/02t274463","country_code":"US","type":"education","lineage":["https://openalex.org/I154570441"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Priyanka Bose","raw_affiliation_strings":["University of California, Santa Barbara, Santa Barbara, CA, USA"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"University of California, Santa Barbara, Santa Barbara, CA, USA","institution_ids":["https://openalex.org/I154570441"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5071672404","display_name":"Andrea Continella","orcid":"https://orcid.org/0000-0002-0329-1830"},"institutions":[{"id":"https://openalex.org/I94624287","display_name":"University of Twente","ror":"https://ror.org/006hf6230","country_code":"NL","type":"education","lineage":["https://openalex.org/I94624287"]}],"countries":["NL"],"is_corresponding":false,"raw_author_name":"Andrea Continella","raw_affiliation_strings":["University of Twente, Twente, Netherlands"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"University of Twente, Twente, Netherlands","institution_ids":["https://openalex.org/I94624287"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5022177364","display_name":"Christopher Kruegel","orcid":"https://orcid.org/0000-0001-5140-3414"},"institutions":[{"id":"https://openalex.org/I154570441","display_name":"University of California, Santa Barbara","ror":"https://ror.org/02t274463","country_code":"US","type":"education","lineage":["https://openalex.org/I154570441"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Christopher Kruegel","raw_affiliation_strings":["University of California, Santa Barbara, Santa Barbara, CA, USA"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"University of California, Santa Barbara, Santa Barbara, CA, USA","institution_ids":["https://openalex.org/I154570441"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5075685499","display_name":"Giovanni Vigna","orcid":"https://orcid.org/0000-0002-3422-5369"},"institutions":[{"id":"https://openalex.org/I154570441","display_name":"University of California, Santa Barbara","ror":"https://ror.org/02t274463","country_code":"US","type":"education","lineage":["https://openalex.org/I154570441"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Giovanni Vigna","raw_affiliation_strings":["University of California, Santa Barbara, Santa Barbara, CA, USA"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"University of California, Santa Barbara, Santa Barbara, CA, USA","institution_ids":["https://openalex.org/I154570441"]}]}],"institutions":[],"countries_distinct_count":3,"institutions_distinct_count":4,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":0.767,"has_fulltext":true,"cited_by_count":5,"citation_normalized_percentile":{"value":0.6902495,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":{"min":89,"max":96},"biblio":{"volume":null,"issue":null,"first_page":"731","last_page":"743"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10260","display_name":"Software Engineering Research","score":0.9998000264167786,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10260","display_name":"Software Engineering Research","score":0.9998000264167786,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T12423","display_name":"Software Reliability and Analysis Research","score":0.9962999820709229,"subfield":{"id":"https://openalex.org/subfields/1712","display_name":"Software"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":0.9948999881744385,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/metadata","display_name":"Metadata","score":0.7634386420249939},{"id":"https://openalex.org/keywords/vulnerability","display_name":"Vulnerability (computing)","score":0.7582509517669678},{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.749734103679657},{"id":"https://openalex.org/keywords/code","display_name":"Code (set theory)","score":0.5862480401992798},{"id":"https://openalex.org/keywords/source-code","display_name":"Source code","score":0.5486014485359192},{"id":"https://openalex.org/keywords/space","display_name":"Space (punctuation)","score":0.4864518344402313},{"id":"https://openalex.org/keywords/software","display_name":"Software","score":0.4785512089729309},{"id":"https://openalex.org/keywords/software-quality","display_name":"Software quality","score":0.442704975605011},{"id":"https://openalex.org/keywords/data-science","display_name":"Data science","score":0.365811288356781},{"id":"https://openalex.org/keywords/world-wide-web","display_name":"World Wide Web","score":0.34147635102272034},{"id":"https://openalex.org/keywords/computer-security","display_name":"Computer security","score":0.2500161826610565},{"id":"https://openalex.org/keywords/software-development","display_name":"Software development","score":0.23882469534873962},{"id":"https://openalex.org/keywords/programming-language","display_name":"Programming language","score":0.14342394471168518},{"id":"https://openalex.org/keywords/operating-system","display_name":"Operating system","score":0.1272008717060089}],"concepts":[{"id":"https://openalex.org/C93518851","wikidata":"https://www.wikidata.org/wiki/Q180160","display_name":"Metadata","level":2,"score":0.7634386420249939},{"id":"https://openalex.org/C95713431","wikidata":"https://www.wikidata.org/wiki/Q631425","display_name":"Vulnerability (computing)","level":2,"score":0.7582509517669678},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.749734103679657},{"id":"https://openalex.org/C2776760102","wikidata":"https://www.wikidata.org/wiki/Q5139990","display_name":"Code (set theory)","level":3,"score":0.5862480401992798},{"id":"https://openalex.org/C43126263","wikidata":"https://www.wikidata.org/wiki/Q128751","display_name":"Source code","level":2,"score":0.5486014485359192},{"id":"https://openalex.org/C2778572836","wikidata":"https://www.wikidata.org/wiki/Q380933","display_name":"Space (punctuation)","level":2,"score":0.4864518344402313},{"id":"https://openalex.org/C2777904410","wikidata":"https://www.wikidata.org/wiki/Q7397","display_name":"Software","level":2,"score":0.4785512089729309},{"id":"https://openalex.org/C117447612","wikidata":"https://www.wikidata.org/wiki/Q1412670","display_name":"Software quality","level":4,"score":0.442704975605011},{"id":"https://openalex.org/C2522767166","wikidata":"https://www.wikidata.org/wiki/Q2374463","display_name":"Data science","level":1,"score":0.365811288356781},{"id":"https://openalex.org/C136764020","wikidata":"https://www.wikidata.org/wiki/Q466","display_name":"World Wide Web","level":1,"score":0.34147635102272034},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.2500161826610565},{"id":"https://openalex.org/C529173508","wikidata":"https://www.wikidata.org/wiki/Q638608","display_name":"Software development","level":3,"score":0.23882469534873962},{"id":"https://openalex.org/C199360897","wikidata":"https://www.wikidata.org/wiki/Q9143","display_name":"Programming language","level":1,"score":0.14342394471168518},{"id":"https://openalex.org/C111919701","wikidata":"https://www.wikidata.org/wiki/Q9135","display_name":"Operating system","level":1,"score":0.1272008717060089},{"id":"https://openalex.org/C177264268","wikidata":"https://www.wikidata.org/wiki/Q1514741","display_name":"Set (abstract data type)","level":2,"score":0.0}],"mesh":[],"locations_count":2,"locations":[{"id":"doi:10.1145/3433210.3453115","is_oa":true,"landing_page_url":"https://doi.org/10.1145/3433210.3453115","pdf_url":"https://dl.acm.org/doi/pdf/10.1145/3433210.3453115","source":null,"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the 2021 ACM Asia Conference on Computer and Communications Security","raw_type":"proceedings-article"},{"id":"pmh:oai:ris.utwente.nl:openaire/39f9ac2a-a958-464a-915f-376ba0b83ef4","is_oa":true,"landing_page_url":"https://research.utwente.nl/en/publications/39f9ac2a-a958-464a-915f-376ba0b83ef4","pdf_url":"https://ris.utwente.nl/ws/files/254926920/bran.pdf","source":{"id":"https://openalex.org/S4406922991","display_name":"University of Twente Research Information","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":null,"host_organization_name":null,"host_organization_lineage":[],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"Meng, D, Guerriero, M, Machiry, A, Aghakhani, H, Bose, P, Continella, A, Kruegel, C & Vigna, G 2021, Bran: Reduce Vulnerability Search Space in Large Open Source Repositories by Learning Bug Symptoms. in ACM ASIA Conference on Computer and Communications Security (ASIACCS). pp. 731-743, 16th ACM ASIA Conference on Computer and Communications Security, ACM ASIACCS 2021, Virtual Event, 7/06/21. https://doi.org/10.1145/3433210.3453115","raw_type":"info:eu-repo/semantics/conferenceObject"}],"best_oa_location":{"id":"doi:10.1145/3433210.3453115","is_oa":true,"landing_page_url":"https://doi.org/10.1145/3433210.3453115","pdf_url":"https://dl.acm.org/doi/pdf/10.1145/3433210.3453115","source":null,"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the 2021 ACM Asia Conference on Computer and Communications Security","raw_type":"proceedings-article"},"sustainable_development_goals":[],"awards":[],"funders":[],"has_content":{"grobid_xml":true,"pdf":true},"content_urls":{"pdf":"https://content.openalex.org/works/W3167569033.pdf","grobid_xml":"https://content.openalex.org/works/W3167569033.grobid-xml"},"referenced_works_count":68,"referenced_works":["https://openalex.org/W133470593","https://openalex.org/W1485912969","https://openalex.org/W1505465226","https://openalex.org/W1563577331","https://openalex.org/W1601356550","https://openalex.org/W1961761736","https://openalex.org/W1964962870","https://openalex.org/W1966682079","https://openalex.org/W1966831167","https://openalex.org/W1992114977","https://openalex.org/W2003315002","https://openalex.org/W2004758929","https://openalex.org/W2017439596","https://openalex.org/W2022695357","https://openalex.org/W2026750231","https://openalex.org/W2028820179","https://openalex.org/W2032698032","https://openalex.org/W2043837581","https://openalex.org/W2049736950","https://openalex.org/W2069268700","https://openalex.org/W2074847015","https://openalex.org/W2079753286","https://openalex.org/W2086042629","https://openalex.org/W2108161968","https://openalex.org/W2128666163","https://openalex.org/W2128782367","https://openalex.org/W2137789775","https://openalex.org/W2137952932","https://openalex.org/W2138110817","https://openalex.org/W2140021378","https://openalex.org/W2144828481","https://openalex.org/W2151666086","https://openalex.org/W2153185479","https://openalex.org/W2160988203","https://openalex.org/W2165004968","https://openalex.org/W2166336492","https://openalex.org/W2286236884","https://openalex.org/W2293797831","https://openalex.org/W2296718798","https://openalex.org/W2385483600","https://openalex.org/W2409383584","https://openalex.org/W2469491375","https://openalex.org/W2548915941","https://openalex.org/W2594132308","https://openalex.org/W2634106992","https://openalex.org/W2753478887","https://openalex.org/W2766898821","https://openalex.org/W2774137886","https://openalex.org/W2792256830","https://openalex.org/W2793157084","https://openalex.org/W2801712578","https://openalex.org/W2802138742","https://openalex.org/W2899407111","https://openalex.org/W2949663529","https://openalex.org/W2950577311","https://openalex.org/W2962960733","https://openalex.org/W2963764936","https://openalex.org/W2965861627","https://openalex.org/W3097625287","https://openalex.org/W3101228802","https://openalex.org/W3105203384","https://openalex.org/W3127736190","https://openalex.org/W3147107715","https://openalex.org/W3148654751","https://openalex.org/W4246166885","https://openalex.org/W4247632680","https://openalex.org/W4285719527","https://openalex.org/W4301168982"],"related_works":["https://openalex.org/W2392768766","https://openalex.org/W2058118494","https://openalex.org/W2382021449","https://openalex.org/W2095118173","https://openalex.org/W2104269053","https://openalex.org/W2106424170","https://openalex.org/W1985426483","https://openalex.org/W3081644756","https://openalex.org/W119580281","https://openalex.org/W4380568682"],"abstract_inverted_index":{"Software":[0],"is":[1,84],"continually":[2],"increasing":[3],"in":[4,49,78],"size":[5],"and":[6,8,46],"complexity,":[7],"therefore,":[9],"vulnerability":[10,30,63],"discovery":[11],"would":[12],"benefit":[13],"from":[14],"techniques":[15],"that":[16,83],"identify":[17],"potentially":[18],"vulnerable":[19],"regions":[20],"within":[21],"large":[22,88],"code":[23,68,89],"bases,":[24],"as":[25],"this":[26],"allows":[27],"for":[28,86],"easing":[29],"detection":[31],"by":[32,66],"reducing":[33],"the":[34,41,62,80],"search":[35,64],"space.":[36],"Previous":[37],"work":[38,75],"has":[39],"explored":[40],"use":[42],"of":[43,53],"conventional":[44],"code-quality":[45],"complexity":[47],"metrics":[48],"highlighting":[50],"suspicious":[51],"sections":[52],"(source)":[54],"code.":[55],"Recently,":[56],"researchers":[57],"also":[58],"proposed":[59],"to":[60],"reduce":[61],"space":[65],"studying":[67],"properties":[69],"with":[70],"neural":[71],"networks.":[72],"However,":[73],"previous":[74],"generally":[76],"failed":[77],"leveraging":[79],"rich":[81],"metadata":[82],"available":[85],"long-running,":[87],"repositories.":[90]},"counts_by_year":[{"year":2025,"cited_by_count":2},{"year":2023,"cited_by_count":2},{"year":2022,"cited_by_count":1}],"updated_date":"2026-08-01T09:00:35.917206","created_date":"2025-10-10T00:00:00"}