{"id":"https://openalex.org/W4312247631","doi":"https://doi.org/10.1145/3524842.3528482","title":"Vul4J","display_name":"Vul4J","publication_year":2022,"publication_date":"2022-05-23","ids":{"openalex":"https://openalex.org/W4312247631","doi":"https://doi.org/10.1145/3524842.3528482"},"language":"en","primary_location":{"id":"doi:10.1145/3524842.3528482","is_oa":false,"landing_page_url":"https://doi.org/10.1145/3524842.3528482","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the 19th International Conference on Mining Software Repositories","raw_type":"proceedings-article"},"type":"conference-paper","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5026800191","display_name":"Quang-Cuong Bui","orcid":"https://orcid.org/0000-0001-6072-9213"},"institutions":[{"id":"https://openalex.org/I159176309","display_name":"Universit\u00e4t Hamburg","ror":"https://ror.org/00g30e956","country_code":"DE","type":"education","lineage":["https://openalex.org/I159176309"]},{"id":"https://openalex.org/I884043246","display_name":"Hamburg University of Technology","ror":"https://ror.org/04bs1pb34","country_code":"DE","type":"education","lineage":["https://openalex.org/I884043246"]}],"countries":["DE"],"is_corresponding":false,"raw_author_name":"Quang-Cuong Bui","raw_affiliation_strings":["Hamburg University of Technology, Germany"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Hamburg University of Technology, Germany","institution_ids":["https://openalex.org/I159176309","https://openalex.org/I884043246"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5012313708","display_name":"Riccardo Scandariato","orcid":"https://orcid.org/0000-0003-3591-7671"},"institutions":[{"id":"https://openalex.org/I159176309","display_name":"Universit\u00e4t Hamburg","ror":"https://ror.org/00g30e956","country_code":"DE","type":"education","lineage":["https://openalex.org/I159176309"]},{"id":"https://openalex.org/I884043246","display_name":"Hamburg University of Technology","ror":"https://ror.org/04bs1pb34","country_code":"DE","type":"education","lineage":["https://openalex.org/I884043246"]}],"countries":["DE"],"is_corresponding":false,"raw_author_name":"Riccardo Scandariato","raw_affiliation_strings":["Hamburg University of Technology, Germany"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Hamburg University of Technology, Germany","institution_ids":["https://openalex.org/I159176309","https://openalex.org/I884043246"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5020137630","display_name":"Nicol\u00e1s E. D\u00edaz Ferreyra","orcid":"https://orcid.org/0000-0001-6304-771X"},"institutions":[{"id":"https://openalex.org/I159176309","display_name":"Universit\u00e4t Hamburg","ror":"https://ror.org/00g30e956","country_code":"DE","type":"education","lineage":["https://openalex.org/I159176309"]},{"id":"https://openalex.org/I884043246","display_name":"Hamburg University of Technology","ror":"https://ror.org/04bs1pb34","country_code":"DE","type":"education","lineage":["https://openalex.org/I884043246"]}],"countries":["DE"],"is_corresponding":false,"raw_author_name":"Nicol\u00e1s E. D\u00edaz Ferreyra","raw_affiliation_strings":["Hamburg University of Technology, Germany"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Hamburg University of Technology, Germany","institution_ids":["https://openalex.org/I159176309","https://openalex.org/I884043246"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":2,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":null,"has_fulltext":false,"cited_by_count":41,"citation_normalized_percentile":null,"cited_by_percentile_year":null,"biblio":{"volume":null,"issue":null,"first_page":"464","last_page":"468"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10743","display_name":"Software Testing and Debugging Techniques","score":0.9994000196456909,"subfield":{"id":"https://openalex.org/subfields/1712","display_name":"Software"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10743","display_name":"Software Testing and Debugging Techniques","score":0.9994000196456909,"subfield":{"id":"https://openalex.org/subfields/1712","display_name":"Software"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T12423","display_name":"Software Reliability and Analysis Research","score":0.9987999796867371,"subfield":{"id":"https://openalex.org/subfields/1712","display_name":"Software"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10260","display_name":"Software Engineering Research","score":0.998199999332428,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.7716007232666016},{"id":"https://openalex.org/keywords/java","display_name":"Java","score":0.7625114321708679},{"id":"https://openalex.org/keywords/vulnerability","display_name":"Vulnerability (computing)","score":0.7410153150558472},{"id":"https://openalex.org/keywords/test-suite","display_name":"Test suite","score":0.7162581086158752},{"id":"https://openalex.org/keywords/suite","display_name":"Suite","score":0.4866986572742462},{"id":"https://openalex.org/keywords/test","display_name":"Test (biology)","score":0.4847809672355652},{"id":"https://openalex.org/keywords/open-source","display_name":"Open source","score":0.47415703535079956},{"id":"https://openalex.org/keywords/test-case","display_name":"Test case","score":0.46690163016319275},{"id":"https://openalex.org/keywords/computer-security","display_name":"Computer security","score":0.43943771719932556},{"id":"https://openalex.org/keywords/software-engineering","display_name":"Software engineering","score":0.3275882601737976},{"id":"https://openalex.org/keywords/software","display_name":"Software","score":0.3091340959072113},{"id":"https://openalex.org/keywords/programming-language","display_name":"Programming language","score":0.2804211974143982},{"id":"https://openalex.org/keywords/machine-learning","display_name":"Machine learning","score":0.17240425944328308},{"id":"https://openalex.org/keywords/geography","display_name":"Geography","score":0.0887627899646759}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.7716007232666016},{"id":"https://openalex.org/C548217200","wikidata":"https://www.wikidata.org/wiki/Q251","display_name":"Java","level":2,"score":0.7625114321708679},{"id":"https://openalex.org/C95713431","wikidata":"https://www.wikidata.org/wiki/Q631425","display_name":"Vulnerability (computing)","level":2,"score":0.7410153150558472},{"id":"https://openalex.org/C151552104","wikidata":"https://www.wikidata.org/wiki/Q7705809","display_name":"Test suite","level":4,"score":0.7162581086158752},{"id":"https://openalex.org/C79581498","wikidata":"https://www.wikidata.org/wiki/Q1367530","display_name":"Suite","level":2,"score":0.4866986572742462},{"id":"https://openalex.org/C2777267654","wikidata":"https://www.wikidata.org/wiki/Q3519023","display_name":"Test (biology)","level":2,"score":0.4847809672355652},{"id":"https://openalex.org/C3018397939","wikidata":"https://www.wikidata.org/wiki/Q3644502","display_name":"Open source","level":3,"score":0.47415703535079956},{"id":"https://openalex.org/C128942645","wikidata":"https://www.wikidata.org/wiki/Q1568346","display_name":"Test case","level":3,"score":0.46690163016319275},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.43943771719932556},{"id":"https://openalex.org/C115903868","wikidata":"https://www.wikidata.org/wiki/Q80993","display_name":"Software engineering","level":1,"score":0.3275882601737976},{"id":"https://openalex.org/C2777904410","wikidata":"https://www.wikidata.org/wiki/Q7397","display_name":"Software","level":2,"score":0.3091340959072113},{"id":"https://openalex.org/C199360897","wikidata":"https://www.wikidata.org/wiki/Q9143","display_name":"Programming language","level":1,"score":0.2804211974143982},{"id":"https://openalex.org/C119857082","wikidata":"https://www.wikidata.org/wiki/Q2539","display_name":"Machine learning","level":1,"score":0.17240425944328308},{"id":"https://openalex.org/C205649164","wikidata":"https://www.wikidata.org/wiki/Q1071","display_name":"Geography","level":0,"score":0.0887627899646759},{"id":"https://openalex.org/C152877465","wikidata":"https://www.wikidata.org/wiki/Q208042","display_name":"Regression analysis","level":2,"score":0.0},{"id":"https://openalex.org/C86803240","wikidata":"https://www.wikidata.org/wiki/Q420","display_name":"Biology","level":0,"score":0.0},{"id":"https://openalex.org/C151730666","wikidata":"https://www.wikidata.org/wiki/Q7205","display_name":"Paleontology","level":1,"score":0.0},{"id":"https://openalex.org/C166957645","wikidata":"https://www.wikidata.org/wiki/Q23498","display_name":"Archaeology","level":1,"score":0.0}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1145/3524842.3528482","is_oa":false,"landing_page_url":"https://doi.org/10.1145/3524842.3528482","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the 19th International Conference on Mining Software Repositories","raw_type":"proceedings-article"}],"best_oa_location":null,"sustainable_development_goals":[],"awards":[],"funders":[],"has_content":{"grobid_xml":false,"pdf":false},"content_urls":null,"referenced_works_count":11,"referenced_works":["https://openalex.org/W184125818","https://openalex.org/W1971650562","https://openalex.org/W2745087117","https://openalex.org/W2884642766","https://openalex.org/W2963926786","https://openalex.org/W2974889942","https://openalex.org/W3091588759","https://openalex.org/W3183469243","https://openalex.org/W3195703954","https://openalex.org/W4211195953","https://openalex.org/W4287673430"],"related_works":["https://openalex.org/W1485837041","https://openalex.org/W2121696621","https://openalex.org/W2109693630","https://openalex.org/W3204955359","https://openalex.org/W3005935371","https://openalex.org/W1964405022","https://openalex.org/W2071069559","https://openalex.org/W1598160211","https://openalex.org/W2018145554","https://openalex.org/W1524028411"],"abstract_inverted_index":{"In":[0],"this":[1,63,124],"work":[2],"we":[3,65,94],"present":[4],"Vul4J,":[5],"a":[6,16,22,99],"Java":[7],"vulnerability":[8,12],"dataset":[9,128,160],"where":[10,146],"each":[11],"is":[13,125],"associated":[14],"to":[15,21,44,80,153],"patch":[17],"and,":[18],"most":[19],"importantly,":[20],"Proof":[23],"of":[24,70,121,129,140],"Vulnerability":[25],"(PoV)":[26],"test":[27,60,68,89],"case.":[28],"We":[29,157],"analyzed":[30],"1803":[31],"fix":[32],"commits":[33],"from":[34,106],"912":[35],"real-world":[36],"vulnerabilities":[37,50,105],"in":[38,73,151],"the":[39,46,67,71,75,82,119,126,138],"Project":[40],"KB":[41],"knowledge":[42],"base":[43],"extract":[45],"reproducible":[47,104],"vulnerabilities,":[48],"i.e.,":[49],"that":[51],"can":[52],"be":[53],"triggered":[54],"by":[55],"one":[56],"or":[57],"more":[58],"PoV":[59,88],"cases.":[61],"To":[62,118],"aim,":[64],"ran":[66],"suite":[69],"application":[72],"both,":[74],"vulnerable":[76],"and":[77,161],"secure":[78],"versions,":[79],"identify":[81,154],"corresponding":[83],"PoVs.":[84],"Furthermore,":[85],"if":[86],"no":[87],"case":[90],"was":[91],"spotted,":[92],"then":[93],"wrote":[95],"it":[96,136],"ourselves.":[97],"As":[98],"result,":[100],"Vul4J":[101],"includes":[102],"79":[103],"51":[107],"open-source":[108],"projects,":[109],"spanning":[110],"25":[111],"different":[112],"Common":[113],"Weakness":[114],"Enumeration":[115],"(CWE)":[116],"types.":[117],"extent":[120],"our":[122,159],"knowledge,":[123],"first":[127],"its":[130],"kind":[131],"created":[132],"for":[133],"Java.":[134],"Particularly,":[135],"targets":[137],"study":[139],"Automated":[141],"Program":[142],"Repair":[143],"(APR)":[144],"tools,":[145],"PoVs":[147],"are":[148],"often":[149],"necessary":[150],"order":[152],"plausible":[155],"patches.":[156],"made":[158],"related":[162],"tools":[163],"publically":[164],"available":[165],"on":[166],"GitHub.":[167]},"counts_by_year":[{"year":2026,"cited_by_count":5},{"year":2025,"cited_by_count":14},{"year":2024,"cited_by_count":14},{"year":2023,"cited_by_count":7},{"year":2022,"cited_by_count":1}],"updated_date":"2026-07-14T23:27:15.235271","created_date":"2023-01-04T00:00:00"}