{"id":"https://openalex.org/W4226502706","doi":"https://doi.org/10.1145/3524842.3528433","title":"On the use of fine-grained vulnerable code statements for software vulnerability assessment models","display_name":"On the use of fine-grained vulnerable code statements for software vulnerability assessment models","publication_year":2022,"publication_date":"2022-05-23","ids":{"openalex":"https://openalex.org/W4226502706","doi":"https://doi.org/10.1145/3524842.3528433"},"language":"en","primary_location":{"id":"doi:10.1145/3524842.3528433","is_oa":false,"landing_page_url":"https://doi.org/10.1145/3524842.3528433","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the 19th International Conference on Mining Software Repositories","raw_type":"proceedings-article"},"type":"conference-paper","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5017801401","display_name":"Triet Huynh Minh Le","orcid":"https://orcid.org/0000-0003-1935-037X"},"institutions":[{"id":"https://openalex.org/I5681781","display_name":"The University of Adelaide","ror":"https://ror.org/00892tw58","country_code":"AU","type":"education","lineage":["https://openalex.org/I5681781"]}],"countries":["AU"],"is_corresponding":false,"raw_author_name":"Triet Huynh Minh Le","raw_affiliation_strings":["The University of Adelaide, Adelaide, Australia"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"The University of Adelaide, Adelaide, Australia","institution_ids":["https://openalex.org/I5681781"]}]},{"author_position":"last","author":{"id":null,"display_name":"M. Ali Babar","orcid":null},"institutions":[{"id":"https://openalex.org/I5681781","display_name":"The University of Adelaide","ror":"https://ror.org/00892tw58","country_code":"AU","type":"education","lineage":["https://openalex.org/I5681781"]}],"countries":["AU"],"is_corresponding":false,"raw_author_name":"M. Ali Babar","raw_affiliation_strings":["The University of Adelaide, Adelaide, Australia"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"The University of Adelaide, Adelaide, Australia","institution_ids":["https://openalex.org/I5681781"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":1,"corresponding_author_ids":[],"corresponding_institution_ids":["https://openalex.org/I5681781"],"apc_list":null,"apc_paid":null,"fwci":0.0,"has_fulltext":false,"cited_by_count":0,"citation_normalized_percentile":{"value":0.1513224,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":null,"biblio":{"volume":null,"issue":null,"first_page":"621","last_page":"633"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T13497","display_name":"Hermeneutics and Narrative Identity","score":0.9879000186920166,"subfield":{"id":"https://openalex.org/subfields/1211","display_name":"Philosophy"},"field":{"id":"https://openalex.org/fields/12","display_name":"Arts and Humanities"},"domain":{"id":"https://openalex.org/domains/2","display_name":"Social Sciences"}},"topics":[{"id":"https://openalex.org/T13497","display_name":"Hermeneutics and Narrative Identity","score":0.9879000186920166,"subfield":{"id":"https://openalex.org/subfields/1211","display_name":"Philosophy"},"field":{"id":"https://openalex.org/fields/12","display_name":"Arts and Humanities"},"domain":{"id":"https://openalex.org/domains/2","display_name":"Social Sciences"}},{"id":"https://openalex.org/T13695","display_name":"Aging, Elder Care, and Social Issues","score":0.9749000072479248,"subfield":{"id":"https://openalex.org/subfields/3600","display_name":"General Health Professions"},"field":{"id":"https://openalex.org/fields/36","display_name":"Health Professions"},"domain":{"id":"https://openalex.org/domains/4","display_name":"Health Sciences"}},{"id":"https://openalex.org/T13099","display_name":"Health, Medicine and Society","score":0.95660001039505,"subfield":{"id":"https://openalex.org/subfields/3600","display_name":"General Health Professions"},"field":{"id":"https://openalex.org/fields/36","display_name":"Health Professions"},"domain":{"id":"https://openalex.org/domains/4","display_name":"Health Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.7231550216674805},{"id":"https://openalex.org/keywords/vulnerability","display_name":"Vulnerability (computing)","score":0.7022696733474731},{"id":"https://openalex.org/keywords/context","display_name":"Context (archaeology)","score":0.6328203678131104},{"id":"https://openalex.org/keywords/vulnerability-assessment","display_name":"Vulnerability assessment","score":0.6226531863212585},{"id":"https://openalex.org/keywords/function","display_name":"Function (biology)","score":0.557058572769165},{"id":"https://openalex.org/keywords/code","display_name":"Code (set theory)","score":0.5429231524467468},{"id":"https://openalex.org/keywords/software","display_name":"Software","score":0.4554634988307953},{"id":"https://openalex.org/keywords/source-lines-of-code","display_name":"Source lines of code","score":0.4393608868122101},{"id":"https://openalex.org/keywords/scale","display_name":"Scale (ratio)","score":0.41432875394821167},{"id":"https://openalex.org/keywords/data-mining","display_name":"Data mining","score":0.40204566717147827},{"id":"https://openalex.org/keywords/machine-learning","display_name":"Machine learning","score":0.3953480124473572},{"id":"https://openalex.org/keywords/data-science","display_name":"Data science","score":0.3541688919067383},{"id":"https://openalex.org/keywords/artificial-intelligence","display_name":"Artificial intelligence","score":0.3492838740348816},{"id":"https://openalex.org/keywords/computer-security","display_name":"Computer security","score":0.18490174412727356},{"id":"https://openalex.org/keywords/geography","display_name":"Geography","score":0.12412235140800476},{"id":"https://openalex.org/keywords/cartography","display_name":"Cartography","score":0.11667966842651367},{"id":"https://openalex.org/keywords/medicine","display_name":"Medicine","score":0.10432305932044983},{"id":"https://openalex.org/keywords/programming-language","display_name":"Programming language","score":0.07231763005256653}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.7231550216674805},{"id":"https://openalex.org/C95713431","wikidata":"https://www.wikidata.org/wiki/Q631425","display_name":"Vulnerability (computing)","level":2,"score":0.7022696733474731},{"id":"https://openalex.org/C2779343474","wikidata":"https://www.wikidata.org/wiki/Q3109175","display_name":"Context (archaeology)","level":2,"score":0.6328203678131104},{"id":"https://openalex.org/C167063184","wikidata":"https://www.wikidata.org/wiki/Q1400839","display_name":"Vulnerability assessment","level":3,"score":0.6226531863212585},{"id":"https://openalex.org/C14036430","wikidata":"https://www.wikidata.org/wiki/Q3736076","display_name":"Function (biology)","level":2,"score":0.557058572769165},{"id":"https://openalex.org/C2776760102","wikidata":"https://www.wikidata.org/wiki/Q5139990","display_name":"Code (set theory)","level":3,"score":0.5429231524467468},{"id":"https://openalex.org/C2777904410","wikidata":"https://www.wikidata.org/wiki/Q7397","display_name":"Software","level":2,"score":0.4554634988307953},{"id":"https://openalex.org/C199519371","wikidata":"https://www.wikidata.org/wiki/Q942695","display_name":"Source lines of code","level":3,"score":0.4393608868122101},{"id":"https://openalex.org/C2778755073","wikidata":"https://www.wikidata.org/wiki/Q10858537","display_name":"Scale (ratio)","level":2,"score":0.41432875394821167},{"id":"https://openalex.org/C124101348","wikidata":"https://www.wikidata.org/wiki/Q172491","display_name":"Data mining","level":1,"score":0.40204566717147827},{"id":"https://openalex.org/C119857082","wikidata":"https://www.wikidata.org/wiki/Q2539","display_name":"Machine learning","level":1,"score":0.3953480124473572},{"id":"https://openalex.org/C2522767166","wikidata":"https://www.wikidata.org/wiki/Q2374463","display_name":"Data science","level":1,"score":0.3541688919067383},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.3492838740348816},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.18490174412727356},{"id":"https://openalex.org/C205649164","wikidata":"https://www.wikidata.org/wiki/Q1071","display_name":"Geography","level":0,"score":0.12412235140800476},{"id":"https://openalex.org/C58640448","wikidata":"https://www.wikidata.org/wiki/Q42515","display_name":"Cartography","level":1,"score":0.11667966842651367},{"id":"https://openalex.org/C71924100","wikidata":"https://www.wikidata.org/wiki/Q11190","display_name":"Medicine","level":0,"score":0.10432305932044983},{"id":"https://openalex.org/C199360897","wikidata":"https://www.wikidata.org/wiki/Q9143","display_name":"Programming language","level":1,"score":0.07231763005256653},{"id":"https://openalex.org/C177264268","wikidata":"https://www.wikidata.org/wiki/Q1514741","display_name":"Set (abstract data type)","level":2,"score":0.0},{"id":"https://openalex.org/C86803240","wikidata":"https://www.wikidata.org/wiki/Q420","display_name":"Biology","level":0,"score":0.0},{"id":"https://openalex.org/C166957645","wikidata":"https://www.wikidata.org/wiki/Q23498","display_name":"Archaeology","level":1,"score":0.0},{"id":"https://openalex.org/C118552586","wikidata":"https://www.wikidata.org/wiki/Q7867","display_name":"Psychiatry","level":1,"score":0.0},{"id":"https://openalex.org/C27415008","wikidata":"https://www.wikidata.org/wiki/Q7256382","display_name":"Psychological intervention","level":2,"score":0.0},{"id":"https://openalex.org/C78458016","wikidata":"https://www.wikidata.org/wiki/Q840400","display_name":"Evolutionary biology","level":1,"score":0.0}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1145/3524842.3528433","is_oa":false,"landing_page_url":"https://doi.org/10.1145/3524842.3528433","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the 19th International Conference on Mining Software Repositories","raw_type":"proceedings-article"}],"best_oa_location":null,"sustainable_development_goals":[],"awards":[],"funders":[],"has_content":{"pdf":false,"grobid_xml":false},"content_urls":null,"referenced_works_count":59,"referenced_works":["https://openalex.org/W1566773348","https://openalex.org/W1615337185","https://openalex.org/W1985258161","https://openalex.org/W1997236144","https://openalex.org/W2004758929","https://openalex.org/W2060758175","https://openalex.org/W2063408151","https://openalex.org/W2141861154","https://openalex.org/W2144344516","https://openalex.org/W2166336492","https://openalex.org/W2293624369","https://openalex.org/W2295598076","https://openalex.org/W2403891529","https://openalex.org/W2493916176","https://openalex.org/W2565077509","https://openalex.org/W2570094557","https://openalex.org/W2599482629","https://openalex.org/W2606150376","https://openalex.org/W2748690817","https://openalex.org/W2766411424","https://openalex.org/W2767521898","https://openalex.org/W2768348081","https://openalex.org/W2771090858","https://openalex.org/W2791591648","https://openalex.org/W2796200341","https://openalex.org/W2890264517","https://openalex.org/W2918408501","https://openalex.org/W2951913189","https://openalex.org/W2955991060","https://openalex.org/W2963321189","https://openalex.org/W2963548617","https://openalex.org/W2963926786","https://openalex.org/W2964150020","https://openalex.org/W2964244292","https://openalex.org/W2966451849","https://openalex.org/W2970612059","https://openalex.org/W2976928731","https://openalex.org/W2977587678","https://openalex.org/W2979183801","https://openalex.org/W2980390258","https://openalex.org/W3006127095","https://openalex.org/W3008371681","https://openalex.org/W3011013751","https://openalex.org/W3033393716","https://openalex.org/W3049398420","https://openalex.org/W3080878745","https://openalex.org/W3089621332","https://openalex.org/W3104415792","https://openalex.org/W3111602563","https://openalex.org/W3122473522","https://openalex.org/W3156556445","https://openalex.org/W3195612455","https://openalex.org/W3199263538","https://openalex.org/W3209432242","https://openalex.org/W4210443011","https://openalex.org/W4210493608","https://openalex.org/W4225673889","https://openalex.org/W4226043105","https://openalex.org/W4233410239"],"related_works":["https://openalex.org/W3594889","https://openalex.org/W1082713","https://openalex.org/W482614","https://openalex.org/W6789168","https://openalex.org/W6161656","https://openalex.org/W10528201","https://openalex.org/W5816889","https://openalex.org/W9699302","https://openalex.org/W3140435","https://openalex.org/W3563469"],"abstract_inverted_index":{"Many":[0],"studies":[1],"have":[2],"developed":[3],"Machine":[4],"Learning":[5],"(ML)":[6],"approaches":[7],"to":[8,37,51,151],"detect":[9],"Software":[10],"Vulnerabilities":[11],"(SVs)":[12],"in":[13,67,109,113,125,177],"functions":[14,63,110],"and":[15,43,54,95,155],"fine-grained":[16],"code":[17],"statements":[18,99,120,144],"that":[19,118],"cause":[20],"such":[21,30],"SVs.":[22,46],"However,":[23],"there":[24],"is":[25,49],"little":[26],"work":[27],"on":[28],"leveraging":[29],"detection":[31],"outputs":[32],"for":[33,75,102,167,174],"data-driven":[34],"SV":[35,78,169],"assessment":[36,79,105,131],"give":[38],"information":[39,48],"about":[40],"exploitability,":[41],"impact,":[42],"severity":[44],"of":[45,64,97,142],"The":[47],"important":[50],"understand":[52],"SVs":[53,66,108],"prioritize":[55],"their":[56],"fixing.":[57],"Using":[58],"large-scale":[59],"data":[60],"from":[61],"1,782":[62],"429":[65],"200":[68],"real-world":[69],"projects,":[70],"we":[71,159],"investigate":[72],"ML":[73],"models":[74,106],"automating":[76],"function-level":[77,168],"tasks,":[80],"i.e.,":[81],"predicting":[82],"seven":[83],"Common":[84],"Vulnerability":[85],"Scoring":[86],"System":[87],"(CVSS)":[88],"metrics.":[89],"We":[90,116],"particularly":[91],"study":[92],"the":[93,104,147,161,172],"value":[94],"use":[96],"vulnerable":[98,119,143],"as":[100],"inputs":[101],"developing":[103],"because":[107],"are":[111,121],"originated":[112],"these":[114],"statements.":[115,139],"show":[117],"5.8":[122],"times":[123],"smaller":[124],"size,":[126],"yet":[127,163],"exhibit":[128],"7.5--114.5%":[129],"stronger":[130],"performance":[132,148],"(Matthews":[133],"Correlation":[134],"Coefficient":[135],"(MCC))":[136],"than":[137],"non-vulnerable":[138],"Incorporating":[140],"context":[141],"further":[145,175],"increases":[146],"by":[149],"up":[150],"8.9%":[152],"(0.64":[153],"MCC":[154],"0.75":[156],"F1-Score).":[157],"Overall,":[158],"provide":[160],"initial":[162],"promising":[164],"ML-based":[165],"baselines":[166],"assessment,":[170],"paving":[171],"way":[173],"research":[176],"this":[178],"direction.":[179]},"counts_by_year":[],"updated_date":"2026-07-29T14:22:42.915294","created_date":"2022-05-05T00:00:00"}