{"id":"https://openalex.org/W4400242243","doi":"https://doi.org/10.1145/3643991.3644919","title":"Are Latent Vulnerabilities Hidden Gems for Software Vulnerability Prediction? An Empirical Study","display_name":"Are Latent Vulnerabilities Hidden Gems for Software Vulnerability Prediction? An Empirical Study","publication_year":2024,"publication_date":"2024-04-15","ids":{"openalex":"https://openalex.org/W4400242243","doi":"https://doi.org/10.1145/3643991.3644919"},"language":"en","primary_location":{"id":"doi:10.1145/3643991.3644919","is_oa":false,"landing_page_url":"https://doi.org/10.1145/3643991.3644919","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the 21st International Conference on Mining Software Repositories","raw_type":"proceedings-article"},"type":"conference-paper","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5017801401","display_name":"Triet Huynh Minh Le","orcid":"https://orcid.org/0000-0003-1935-037X"},"institutions":[{"id":"https://openalex.org/I5681781","display_name":"The University of Adelaide","ror":"https://ror.org/00892tw58","country_code":"AU","type":"education","lineage":["https://openalex.org/I5681781"]}],"countries":["AU"],"is_corresponding":false,"raw_author_name":"Triet Huynh Minh Le","raw_affiliation_strings":["School of Computer Science, The University of Adelaide, Adelaide, South Australia, Australia"],"raw_orcid":"https://orcid.org/0000-0003-1935-037X","affiliations":[{"raw_affiliation_string":"School of Computer Science, The University of Adelaide, Adelaide, South Australia, Australia","institution_ids":["https://openalex.org/I5681781"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5102717874","display_name":"Xiaoning Du","orcid":"https://orcid.org/0000-0003-3728-9541"},"institutions":[{"id":"https://openalex.org/I56590836","display_name":"Monash University","ror":"https://ror.org/02bfwt286","country_code":"AU","type":"education","lineage":["https://openalex.org/I56590836"]}],"countries":["AU"],"is_corresponding":false,"raw_author_name":"Xiaoning Du","raw_affiliation_strings":["Monash University, Melbourne, Victoria, Australia"],"raw_orcid":"https://orcid.org/0000-0003-3728-9541","affiliations":[{"raw_affiliation_string":"Monash University, Melbourne, Victoria, Australia","institution_ids":["https://openalex.org/I56590836"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5103075476","display_name":"Muhammad Ali Babar","orcid":"https://orcid.org/0000-0001-9696-3626"},"institutions":[{"id":"https://openalex.org/I5681781","display_name":"The University of Adelaide","ror":"https://ror.org/00892tw58","country_code":"AU","type":"education","lineage":["https://openalex.org/I5681781"]}],"countries":["AU"],"is_corresponding":false,"raw_author_name":"M. Ali Babar","raw_affiliation_strings":["School of Computer Science, The University of Adelaide, Adelaide, South Australia, Australia"],"raw_orcid":"https://orcid.org/0000-0001-9696-3626","affiliations":[{"raw_affiliation_string":"School of Computer Science, The University of Adelaide, Adelaide, South Australia, Australia","institution_ids":["https://openalex.org/I5681781"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":2,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":2.0897,"has_fulltext":false,"cited_by_count":4,"citation_normalized_percentile":{"value":0.88221925,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":{"min":91,"max":97},"biblio":{"volume":null,"issue":null,"first_page":"716","last_page":"727"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10260","display_name":"Software Engineering Research","score":0.9997000098228455,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10260","display_name":"Software Engineering Research","score":0.9997000098228455,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T12423","display_name":"Software Reliability and Analysis Research","score":0.9994999766349792,"subfield":{"id":"https://openalex.org/subfields/1712","display_name":"Software"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T12479","display_name":"Web Application Security Vulnerabilities","score":0.9930999875068665,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.762636125087738},{"id":"https://openalex.org/keywords/vulnerability","display_name":"Vulnerability (computing)","score":0.6128372550010681},{"id":"https://openalex.org/keywords/software-bug","display_name":"Software bug","score":0.5430194735527039},{"id":"https://openalex.org/keywords/software","display_name":"Software","score":0.4545414447784424},{"id":"https://openalex.org/keywords/computer-security","display_name":"Computer security","score":0.3496685028076172},{"id":"https://openalex.org/keywords/programming-language","display_name":"Programming language","score":0.14577049016952515}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.762636125087738},{"id":"https://openalex.org/C95713431","wikidata":"https://www.wikidata.org/wiki/Q631425","display_name":"Vulnerability (computing)","level":2,"score":0.6128372550010681},{"id":"https://openalex.org/C1009929","wikidata":"https://www.wikidata.org/wiki/Q179550","display_name":"Software bug","level":3,"score":0.5430194735527039},{"id":"https://openalex.org/C2777904410","wikidata":"https://www.wikidata.org/wiki/Q7397","display_name":"Software","level":2,"score":0.4545414447784424},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.3496685028076172},{"id":"https://openalex.org/C199360897","wikidata":"https://www.wikidata.org/wiki/Q9143","display_name":"Programming language","level":1,"score":0.14577049016952515}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1145/3643991.3644919","is_oa":false,"landing_page_url":"https://doi.org/10.1145/3643991.3644919","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the 21st International Conference on Mining Software Repositories","raw_type":"proceedings-article"}],"best_oa_location":null,"sustainable_development_goals":[{"display_name":"Reduced inequalities","score":0.4699999988079071,"id":"https://metadata.un.org/sdg/10"}],"awards":[],"funders":[],"has_content":{"pdf":false,"grobid_xml":false},"content_urls":null,"referenced_works_count":57,"referenced_works":["https://openalex.org/W54655540","https://openalex.org/W1979290264","https://openalex.org/W1983320747","https://openalex.org/W1986222079","https://openalex.org/W2003315002","https://openalex.org/W2069268700","https://openalex.org/W2126166995","https://openalex.org/W2141861154","https://openalex.org/W2171383742","https://openalex.org/W2530824252","https://openalex.org/W2748690817","https://openalex.org/W2766411424","https://openalex.org/W2783078595","https://openalex.org/W2796283679","https://openalex.org/W2914747561","https://openalex.org/W2919518469","https://openalex.org/W2955991060","https://openalex.org/W2963501364","https://openalex.org/W2964279097","https://openalex.org/W3006568433","https://openalex.org/W3013745307","https://openalex.org/W3033777149","https://openalex.org/W3091588759","https://openalex.org/W3102659406","https://openalex.org/W3126095862","https://openalex.org/W3127782461","https://openalex.org/W3131641316","https://openalex.org/W3140595400","https://openalex.org/W3142656464","https://openalex.org/W3156556445","https://openalex.org/W3160070616","https://openalex.org/W3163206498","https://openalex.org/W3174750614","https://openalex.org/W3176465319","https://openalex.org/W3177116043","https://openalex.org/W3180181113","https://openalex.org/W3184339106","https://openalex.org/W3194346579","https://openalex.org/W3195612455","https://openalex.org/W3199693282","https://openalex.org/W3213259750","https://openalex.org/W3214263053","https://openalex.org/W4210443011","https://openalex.org/W4214525227","https://openalex.org/W4249033934","https://openalex.org/W4284709537","https://openalex.org/W4286331368","https://openalex.org/W4287673430","https://openalex.org/W4288048266","https://openalex.org/W4289976167","https://openalex.org/W4308641648","https://openalex.org/W4312247631","https://openalex.org/W4312436517","https://openalex.org/W4312439220","https://openalex.org/W4384345694","https://openalex.org/W4384345698","https://openalex.org/W4385249313"],"related_works":["https://openalex.org/W4391375266","https://openalex.org/W2748952813","https://openalex.org/W2390279801","https://openalex.org/W2358668433","https://openalex.org/W4396701345","https://openalex.org/W2376932109","https://openalex.org/W2001405890","https://openalex.org/W4396696052","https://openalex.org/W2382290278","https://openalex.org/W4395014643"],"abstract_inverted_index":{"Collecting":[0],"relevant":[1],"and":[2,31,46,87,92,129,177,209],"high-quality":[3],"data":[4],"is":[5,53],"integral":[6],"to":[7,27,132,167,179,202],"the":[8,19,44,49,58,77,97,110,121,146,151,170,182,192,197,204,211],"development":[9],"of":[10,18,35,48,60,123,142,173,184,199,206,213],"effective":[11],"Software":[12],"Vulnerability":[13],"(SV)":[14],"prediction":[15,154,215],"models.":[16],"Most":[17],"current":[20],"SV":[21,65,85,94,153,175,207,214],"datasets":[22,37,86,208],"rely":[23],"on":[24,76,127],"SV-fixing":[25],"commits":[26],"extract":[28],"vulnerable":[29,79,107,186],"functions":[30,80,108,118],"lines.":[32,187],"However,":[33],"none":[34],"these":[36,61,69,116],"have":[38,138],"considered":[39],"latent":[40,62,78,106,117,161,200],"SVs":[41,63,124,201],"existing":[42],"between":[43],"introduction":[45],"fix":[47],"collected":[50],"SVs.":[51,162],"There":[52],"also":[54],"little":[55],"known":[56],"about":[57],"usefulness":[59],"for":[64,90],"prediction.":[66],"To":[67],"bridge":[68],"gaps,":[70],"we":[71,101,148],"conduct":[72],"a":[73,139],"large-scale":[74],"study":[75,190],"in":[81,109,169,181],"two":[82],"commonly":[83],"used":[84],"their":[88],"utilization":[89],"function-level":[91,174],"line-level":[93],"predictions.":[95],"Leveraging":[96],"state-of-the-art":[98,152],"SZZ":[99],"algorithm,":[100],"identify":[102],"more":[103],"than":[104],"100k":[105],"studied":[111],"datasets.":[112],"We":[113],"find":[114],"that":[115,150],"can":[119,156],"increase":[120],"number":[122],"by":[125],"4\u00d7":[126],"average":[128],"correct":[130],"up":[131,166,178],"5k":[133],"mislabeled":[134],"functions,":[135],"yet":[136],"they":[137],"noise":[140],"level":[141],"around":[143],"6%.":[144],"Despite":[145],"noise,":[147],"show":[149],"model":[155],"significantly":[157],"benefit":[158],"from":[159],"such":[160],"The":[163],"improvements":[164],"are":[165],"24.5%":[168],"performance":[171,212],"(F1-Score)":[172],"predictions":[176],"67%":[180],"effectiveness":[183],"localizing":[185],"Overall,":[188],"our":[189],"presents":[191],"first":[193],"promising":[194],"step":[195],"toward":[196],"use":[198],"improve":[203],"quality":[205],"enhance":[210],"tasks.":[216]},"counts_by_year":[{"year":2026,"cited_by_count":1},{"year":2025,"cited_by_count":1},{"year":2024,"cited_by_count":2}],"updated_date":"2026-07-29T14:22:42.915294","created_date":"2025-10-10T00:00:00"}