{"id":"https://openalex.org/W4308648311","doi":"https://doi.org/10.1145/3540250.3549156","title":"Automated unearthing of dangerous issue reports","display_name":"Automated unearthing of dangerous issue reports","publication_year":2022,"publication_date":"2022-11-07","ids":{"openalex":"https://openalex.org/W4308648311","doi":"https://doi.org/10.1145/3540250.3549156"},"language":"en","primary_location":{"id":"doi:10.1145/3540250.3549156","is_oa":false,"landing_page_url":"https://doi.org/10.1145/3540250.3549156","pdf_url":null,"source":{"id":"https://openalex.org/S4363608883","display_name":"Proceedings of the 30th ACM Joint European Software Engineering Conference and Symposium on the Foundations of Software Engineering","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":null,"host_organization_name":null,"host_organization_lineage":[],"host_organization_lineage_names":[],"type":"conference"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the 30th ACM Joint European Software Engineering Conference and Symposium on the Foundations of Software Engineering","raw_type":"proceedings-article"},"type":"article","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5005384561","display_name":"Shengyi Pan","orcid":"https://orcid.org/0000-0001-9471-9638"},"institutions":[{"id":"https://openalex.org/I76130692","display_name":"Zhejiang University","ror":"https://ror.org/00a2xv884","country_code":"CN","type":"education","lineage":["https://openalex.org/I76130692"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Shengyi Pan","raw_affiliation_strings":["Zhejiang University, China"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Zhejiang University, China","institution_ids":["https://openalex.org/I76130692"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5012386754","display_name":"Jiayuan Zhou","orcid":"https://orcid.org/0000-0002-5181-3146"},"institutions":[{"id":"https://openalex.org/I4210115038","display_name":"Huawei Technologies (Canada)","ror":"https://ror.org/026venb53","country_code":"CA","type":"company","lineage":["https://openalex.org/I2250955327","https://openalex.org/I4210115038"]}],"countries":["CA"],"is_corresponding":false,"raw_author_name":"Jiayuan Zhou","raw_affiliation_strings":["Huawei, Canada"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Huawei, Canada","institution_ids":["https://openalex.org/I4210115038"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5032675988","display_name":"Filipe R. Cogo","orcid":"https://orcid.org/0000-0002-5494-685X"},"institutions":[{"id":"https://openalex.org/I4210115038","display_name":"Huawei Technologies (Canada)","ror":"https://ror.org/026venb53","country_code":"CA","type":"company","lineage":["https://openalex.org/I2250955327","https://openalex.org/I4210115038"]}],"countries":["CA"],"is_corresponding":false,"raw_author_name":"Filipe Roseiro Cogo","raw_affiliation_strings":["Huawei, Canada"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Huawei, Canada","institution_ids":["https://openalex.org/I4210115038"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5006669765","display_name":"Xin Xia","orcid":"https://orcid.org/0000-0002-6302-3256"},"institutions":[{"id":"https://openalex.org/I2250955327","display_name":"Huawei Technologies (China)","ror":"https://ror.org/00cmhce21","country_code":"CN","type":"company","lineage":["https://openalex.org/I2250955327"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Xin Xia","raw_affiliation_strings":["Huawei, China"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Huawei, China","institution_ids":["https://openalex.org/I2250955327"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5007075465","display_name":"Lingfeng Bao","orcid":"https://orcid.org/0000-0003-1846-0921"},"institutions":[{"id":"https://openalex.org/I76130692","display_name":"Zhejiang University","ror":"https://ror.org/00a2xv884","country_code":"CN","type":"education","lineage":["https://openalex.org/I76130692"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Lingfeng Bao","raw_affiliation_strings":["Zhejiang University, China"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Zhejiang University, China","institution_ids":["https://openalex.org/I76130692"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5101403816","display_name":"Xing Hu","orcid":"https://orcid.org/0000-0001-8910-329X"},"institutions":[{"id":"https://openalex.org/I76130692","display_name":"Zhejiang University","ror":"https://ror.org/00a2xv884","country_code":"CN","type":"education","lineage":["https://openalex.org/I76130692"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Xing Hu","raw_affiliation_strings":["Zhejiang University, China"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Zhejiang University, China","institution_ids":["https://openalex.org/I76130692"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5114429788","display_name":"Shanping Li","orcid":"https://orcid.org/0000-0003-2615-9792"},"institutions":[{"id":"https://openalex.org/I76130692","display_name":"Zhejiang University","ror":"https://ror.org/00a2xv884","country_code":"CN","type":"education","lineage":["https://openalex.org/I76130692"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Shanping Li","raw_affiliation_strings":["Zhejiang University, China"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Zhejiang University, China","institution_ids":["https://openalex.org/I76130692"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5091586373","display_name":"Ahmed E. Hassan","orcid":"https://orcid.org/0000-0001-7749-5513"},"institutions":[{"id":"https://openalex.org/I204722609","display_name":"Queen's University","ror":"https://ror.org/02y72wh86","country_code":"CA","type":"education","lineage":["https://openalex.org/I204722609"]}],"countries":["CA"],"is_corresponding":false,"raw_author_name":"Ahmed E. Hassan","raw_affiliation_strings":["Queen\u2019s University, Canada","Queen's University, Canada"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Queen\u2019s University, Canada","institution_ids":["https://openalex.org/I204722609"]},{"raw_affiliation_string":"Queen's University, Canada","institution_ids":["https://openalex.org/I204722609"]}]}],"institutions":[],"countries_distinct_count":2,"institutions_distinct_count":8,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":2.3288,"has_fulltext":false,"cited_by_count":19,"citation_normalized_percentile":{"value":0.90763512,"is_in_top_1_percent":false,"is_in_top_10_percent":true},"cited_by_percentile_year":{"min":94,"max":99},"biblio":{"volume":null,"issue":null,"first_page":"834","last_page":"846"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10260","display_name":"Software Engineering Research","score":0.9998999834060669,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10260","display_name":"Software Engineering Research","score":0.9998999834060669,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10734","display_name":"Information and Cyber Security","score":0.9962999820709229,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T12423","display_name":"Software Reliability and Analysis Research","score":0.9937000274658203,"subfield":{"id":"https://openalex.org/subfields/1712","display_name":"Software"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/vulnerability","display_name":"Vulnerability (computing)","score":0.7932603359222412},{"id":"https://openalex.org/keywords/operationalization","display_name":"Operationalization","score":0.7897654175758362},{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.6827098727226257},{"id":"https://openalex.org/keywords/computer-security","display_name":"Computer security","score":0.6777269244194031},{"id":"https://openalex.org/keywords/vulnerability-assessment","display_name":"Vulnerability assessment","score":0.48377344012260437},{"id":"https://openalex.org/keywords/process","display_name":"Process (computing)","score":0.47309473156929016},{"id":"https://openalex.org/keywords/best-practice","display_name":"Best practice","score":0.44489237666130066},{"id":"https://openalex.org/keywords/internet-privacy","display_name":"Internet privacy","score":0.3938218355178833},{"id":"https://openalex.org/keywords/political-science","display_name":"Political science","score":0.11069157719612122},{"id":"https://openalex.org/keywords/psychology","display_name":"Psychology","score":0.10363498330116272},{"id":"https://openalex.org/keywords/psychological-resilience","display_name":"Psychological resilience","score":0.08783197402954102}],"concepts":[{"id":"https://openalex.org/C95713431","wikidata":"https://www.wikidata.org/wiki/Q631425","display_name":"Vulnerability (computing)","level":2,"score":0.7932603359222412},{"id":"https://openalex.org/C9354725","wikidata":"https://www.wikidata.org/wiki/Q286017","display_name":"Operationalization","level":2,"score":0.7897654175758362},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.6827098727226257},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.6777269244194031},{"id":"https://openalex.org/C167063184","wikidata":"https://www.wikidata.org/wiki/Q1400839","display_name":"Vulnerability assessment","level":3,"score":0.48377344012260437},{"id":"https://openalex.org/C98045186","wikidata":"https://www.wikidata.org/wiki/Q205663","display_name":"Process (computing)","level":2,"score":0.47309473156929016},{"id":"https://openalex.org/C184356942","wikidata":"https://www.wikidata.org/wiki/Q830382","display_name":"Best practice","level":2,"score":0.44489237666130066},{"id":"https://openalex.org/C108827166","wikidata":"https://www.wikidata.org/wiki/Q175975","display_name":"Internet privacy","level":1,"score":0.3938218355178833},{"id":"https://openalex.org/C17744445","wikidata":"https://www.wikidata.org/wiki/Q36442","display_name":"Political science","level":0,"score":0.11069157719612122},{"id":"https://openalex.org/C15744967","wikidata":"https://www.wikidata.org/wiki/Q9418","display_name":"Psychology","level":0,"score":0.10363498330116272},{"id":"https://openalex.org/C137176749","wikidata":"https://www.wikidata.org/wiki/Q4105337","display_name":"Psychological resilience","level":2,"score":0.08783197402954102},{"id":"https://openalex.org/C138885662","wikidata":"https://www.wikidata.org/wiki/Q5891","display_name":"Philosophy","level":0,"score":0.0},{"id":"https://openalex.org/C111472728","wikidata":"https://www.wikidata.org/wiki/Q9471","display_name":"Epistemology","level":1,"score":0.0},{"id":"https://openalex.org/C111919701","wikidata":"https://www.wikidata.org/wiki/Q9135","display_name":"Operating system","level":1,"score":0.0},{"id":"https://openalex.org/C199539241","wikidata":"https://www.wikidata.org/wiki/Q7748","display_name":"Law","level":1,"score":0.0},{"id":"https://openalex.org/C542102704","wikidata":"https://www.wikidata.org/wiki/Q183257","display_name":"Psychotherapist","level":1,"score":0.0}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1145/3540250.3549156","is_oa":false,"landing_page_url":"https://doi.org/10.1145/3540250.3549156","pdf_url":null,"source":{"id":"https://openalex.org/S4363608883","display_name":"Proceedings of the 30th ACM Joint European Software Engineering Conference and Symposium on the Foundations of Software Engineering","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":null,"host_organization_name":null,"host_organization_lineage":[],"host_organization_lineage_names":[],"type":"conference"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the 30th ACM Joint European Software Engineering Conference and Symposium on the Foundations of Software Engineering","raw_type":"proceedings-article"}],"best_oa_location":null,"sustainable_development_goals":[{"display_name":"Peace, Justice and strong institutions","id":"https://metadata.un.org/sdg/16","score":0.49000000953674316}],"awards":[{"id":"https://openalex.org/G3677363418","display_name":null,"funder_award_id":"No. 226-2022-00064","funder_id":"https://openalex.org/F4320335787","funder_display_name":"Fundamental Research Funds for the Central Universities"}],"funders":[{"id":"https://openalex.org/F4320335787","display_name":"Fundamental Research Funds for the Central Universities","ror":null}],"has_content":{"grobid_xml":false,"pdf":false},"content_urls":null,"referenced_works_count":41,"referenced_works":["https://openalex.org/W1553724776","https://openalex.org/W1832693441","https://openalex.org/W1966716734","https://openalex.org/W1971733255","https://openalex.org/W1976526581","https://openalex.org/W1978301647","https://openalex.org/W2003125472","https://openalex.org/W2010985317","https://openalex.org/W2065890363","https://openalex.org/W2079317829","https://openalex.org/W2101726875","https://openalex.org/W2123493477","https://openalex.org/W2127589108","https://openalex.org/W2148615889","https://openalex.org/W2510940142","https://openalex.org/W2560674852","https://openalex.org/W2618735982","https://openalex.org/W2740329368","https://openalex.org/W2766078311","https://openalex.org/W2766411424","https://openalex.org/W2766521509","https://openalex.org/W2781021471","https://openalex.org/W2809528855","https://openalex.org/W2886714101","https://openalex.org/W2896373185","https://openalex.org/W2977587678","https://openalex.org/W3034708533","https://openalex.org/W3034942609","https://openalex.org/W3046453918","https://openalex.org/W3089437400","https://openalex.org/W3089756992","https://openalex.org/W3089785161","https://openalex.org/W3094525800","https://openalex.org/W3098598077","https://openalex.org/W3125205154","https://openalex.org/W3134770171","https://openalex.org/W3145506869","https://openalex.org/W3162044134","https://openalex.org/W3168865857","https://openalex.org/W4232736849","https://openalex.org/W4234367654"],"related_works":["https://openalex.org/W1883246888","https://openalex.org/W2370114625","https://openalex.org/W1756374135","https://openalex.org/W2062873522","https://openalex.org/W2947584067","https://openalex.org/W3118510577","https://openalex.org/W2280562859","https://openalex.org/W230721595","https://openalex.org/W3157230915","https://openalex.org/W1496728123"],"abstract_inverted_index":{"The":[0],"coordinated":[1],"vulnerability":[2,14,78,103,154],"disclosure":[3],"(CVD)":[4],"process":[5,105],"is":[6,85,276],"commonly":[7],"adopted":[8],"for":[9],"open":[10],"source":[11],"software":[12],"(OSS)":[13],"management,":[15],"which":[16,150],"suggests":[17],"to":[18,37,80,87,130,169,234,241,245,270],"privately":[19],"report":[20],"the":[21,30,46,76,102,113,136,143,152,171,199,211,218],"discovered":[22],"vulnerabilities":[23,52],"and":[24,107,121,204,261],"keep":[25],"relevant":[26],"information":[27,79],"secret":[28],"until":[29],"official":[31,63],"disclosure.":[32,64],"However,":[33],"in":[34],"practice,":[35],"due":[36],"various":[38],"reasons":[39],"(e.g.,":[40],"lacking":[41],"security":[42,49,268],"domain":[43],"expertise":[44],"or":[45],"sense":[47],"of":[48,75,173,193,213,254,256,263,278],"management),":[50],"many":[51],"are":[53,67,139,227,259,265],"first":[54],"reported":[55,233],"via":[56],"public":[57],"issue":[58],"reports":[59],"(IRs)":[60],"before":[61],"its":[62],"Such":[65],"IRs":[66,91,134,167,225,258],"dangerous":[68,90,114,133,174,281],"IRs,":[69],"since":[70],"attackers":[71],"can":[72,100,110],"take":[73],"advantages":[74],"leaked":[77],"launch":[81],"zero-day":[82],"attacks.":[83],"It":[84],"crucial":[86],"identify":[88,132],"such":[89,96],"at":[92,135],"an":[93],"early":[94],"stage,":[95],"that":[97,226,250],"OSS":[98,108,183,246],"users":[99],"start":[101],"remediation":[104],"earlier":[106],"maintainers":[109],"timely":[111],"manage":[112],"IRs.":[115,282],"In":[116,209],"this":[117],"paper,":[118],"we":[119,236],"propose":[120],"evaluate":[122],"a":[123,147,190,238],"deep":[124],"learning":[125],"based":[126],"approach,":[127],"namely":[128],"MemVul,":[129],"automatically":[131],"time":[137],"they":[138],"reported.":[140],"MemVul":[141,197,214,275],"augments":[142],"neural":[144],"networks":[145],"with":[146],"memory":[148],"component,":[149],"stores":[151],"external":[153],"knowledge":[155],"from":[156],"Common":[157],"Weakness":[158],"Enumeration":[159],"(CWE).":[160],"We":[161,176,248],"rely":[162],"on":[163,186],"publicly":[164,272],"accessible":[165],"CVE-referred":[166],"(CIRs)":[168],"operationalize":[170],"concept":[172],"IR.":[175],"mine":[177],"3,937":[178],"CIRs":[179,230],"distributed":[180],"across":[181],"1,390":[182],"projects":[184],"hosted":[185],"GitHub.":[187],"Evaluated":[188],"under":[189],"practical":[191],"scenario":[192],"high":[194],"data":[195],"imbalance,":[196],"achieves":[198],"best":[200,219],"trade-off":[201],"between":[202],"precision":[203],"recall":[205],"among":[206],"all":[207],"baselines.":[208],"particular,":[210],"F1-score":[212],"(i.e.,":[215],"0.49)":[216],"improves":[217],"performing":[220],"baseline":[221],"by":[222,267],"44%.":[223],"For":[224],"predicted":[228],"as":[229],"but":[231],"not":[232],"CVE,":[235],"conduct":[237],"user":[239],"study":[240],"investigate":[242],"their":[243],"usefulness":[244],"stakeholders.":[247],"observe":[249],"82%":[251],"(41":[252],"out":[253],"50)":[255],"these":[257],"security-related":[260],"28":[262],"them":[264],"suggested":[266],"experts":[269],"be":[271],"disclosed,":[273],"indicating":[274],"capable":[277],"identifying":[279],"undisclosed":[280]},"counts_by_year":[{"year":2026,"cited_by_count":3},{"year":2025,"cited_by_count":5},{"year":2024,"cited_by_count":9},{"year":2023,"cited_by_count":2}],"updated_date":"2026-06-13T07:54:00.901334","created_date":"2025-10-10T00:00:00"}