{"id":"https://openalex.org/W2022071483","doi":"https://doi.org/10.4018/jsse.2013070102","title":"Semi-Automatic Annotation of Natural Language Vulnerability Reports","display_name":"Semi-Automatic Annotation of Natural Language Vulnerability Reports","publication_year":2013,"publication_date":"2013-07-01","ids":{"openalex":"https://openalex.org/W2022071483","doi":"https://doi.org/10.4018/jsse.2013070102","mag":"2022071483"},"language":"en","primary_location":{"id":"doi:10.4018/jsse.2013070102","is_oa":false,"landing_page_url":"https://doi.org/10.4018/jsse.2013070102","pdf_url":null,"source":{"id":"https://openalex.org/S43656255","display_name":"International Journal of Secure Software Engineering","issn_l":"1947-3036","issn":["1947-3036","1947-3044"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310320424","host_organization_name":"IGI Global","host_organization_lineage":["https://openalex.org/P4310320424"],"host_organization_lineage_names":["IGI Global"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"International Journal of Secure Software Engineering","raw_type":"journal-article"},"type":"article","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5070702602","display_name":"Yan Wu","orcid":"https://orcid.org/0000-0002-8874-8886"},"institutions":[{"id":"https://openalex.org/I122266389","display_name":"University of Nebraska at Omaha","ror":"https://ror.org/04yrkc140","country_code":"US","type":"education","lineage":["https://openalex.org/I122266389"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Yan Wu","raw_affiliation_strings":["College of Information Science and Technology, University of Nebraska at Omaha, Omaha, NE, USA"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"College of Information Science and Technology, University of Nebraska at Omaha, Omaha, NE, USA","institution_ids":["https://openalex.org/I122266389"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5051918590","display_name":"Robin Gandhi","orcid":"https://orcid.org/0000-0002-2632-1692"},"institutions":[{"id":"https://openalex.org/I122266389","display_name":"University of Nebraska at Omaha","ror":"https://ror.org/04yrkc140","country_code":"US","type":"education","lineage":["https://openalex.org/I122266389"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Robin Gandhi","raw_affiliation_strings":["College of Information Science and Technology, University of Nebraska at Omaha, Omaha, NE, USA"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"College of Information Science and Technology, University of Nebraska at Omaha, Omaha, NE, USA","institution_ids":["https://openalex.org/I122266389"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5040613020","display_name":"Harvey Siy","orcid":"https://orcid.org/0000-0002-4482-5712"},"institutions":[{"id":"https://openalex.org/I122266389","display_name":"University of Nebraska at Omaha","ror":"https://ror.org/04yrkc140","country_code":"US","type":"education","lineage":["https://openalex.org/I122266389"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Harvey Siy","raw_affiliation_strings":["College of Information Science and Technology, University of Nebraska at Omaha, Omaha, NE, USA"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"College of Information Science and Technology, University of Nebraska at Omaha, Omaha, NE, USA","institution_ids":["https://openalex.org/I122266389"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":1,"corresponding_author_ids":[],"corresponding_institution_ids":["https://openalex.org/I122266389"],"apc_list":null,"apc_paid":null,"fwci":0.829,"has_fulltext":false,"cited_by_count":1,"citation_normalized_percentile":{"value":0.82477176,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":{"min":90,"max":94},"biblio":{"volume":"4","issue":"3","first_page":"18","last_page":"41"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10260","display_name":"Software Engineering Research","score":0.9998999834060669,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10260","display_name":"Software Engineering Research","score":0.9998999834060669,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T12423","display_name":"Software Reliability and Analysis Research","score":0.9987000226974487,"subfield":{"id":"https://openalex.org/subfields/1712","display_name":"Software"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T12479","display_name":"Web Application Security Vulnerabilities","score":0.996399998664856,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.8693197965621948},{"id":"https://openalex.org/keywords/artificial-intelligence","display_name":"Artificial intelligence","score":0.5848506093025208},{"id":"https://openalex.org/keywords/categorization","display_name":"Categorization","score":0.5764988660812378},{"id":"https://openalex.org/keywords/identifier","display_name":"Identifier","score":0.5735349655151367},{"id":"https://openalex.org/keywords/vulnerability","display_name":"Vulnerability (computing)","score":0.5548012256622314},{"id":"https://openalex.org/keywords/natural-language-processing","display_name":"Natural language processing","score":0.5514715909957886},{"id":"https://openalex.org/keywords/annotation","display_name":"Annotation","score":0.5513713359832764},{"id":"https://openalex.org/keywords/natural-language","display_name":"Natural language","score":0.49170976877212524},{"id":"https://openalex.org/keywords/pipeline","display_name":"Pipeline (software)","score":0.48080387711524963},{"id":"https://openalex.org/keywords/process","display_name":"Process (computing)","score":0.4483267366886139},{"id":"https://openalex.org/keywords/software","display_name":"Software","score":0.4449912905693054},{"id":"https://openalex.org/keywords/computer-security","display_name":"Computer security","score":0.1595253050327301},{"id":"https://openalex.org/keywords/programming-language","display_name":"Programming language","score":0.11872699856758118}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.8693197965621948},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.5848506093025208},{"id":"https://openalex.org/C94124525","wikidata":"https://www.wikidata.org/wiki/Q912550","display_name":"Categorization","level":2,"score":0.5764988660812378},{"id":"https://openalex.org/C154504017","wikidata":"https://www.wikidata.org/wiki/Q853614","display_name":"Identifier","level":2,"score":0.5735349655151367},{"id":"https://openalex.org/C95713431","wikidata":"https://www.wikidata.org/wiki/Q631425","display_name":"Vulnerability (computing)","level":2,"score":0.5548012256622314},{"id":"https://openalex.org/C204321447","wikidata":"https://www.wikidata.org/wiki/Q30642","display_name":"Natural language processing","level":1,"score":0.5514715909957886},{"id":"https://openalex.org/C2776321320","wikidata":"https://www.wikidata.org/wiki/Q857525","display_name":"Annotation","level":2,"score":0.5513713359832764},{"id":"https://openalex.org/C195324797","wikidata":"https://www.wikidata.org/wiki/Q33742","display_name":"Natural language","level":2,"score":0.49170976877212524},{"id":"https://openalex.org/C43521106","wikidata":"https://www.wikidata.org/wiki/Q2165493","display_name":"Pipeline (software)","level":2,"score":0.48080387711524963},{"id":"https://openalex.org/C98045186","wikidata":"https://www.wikidata.org/wiki/Q205663","display_name":"Process (computing)","level":2,"score":0.4483267366886139},{"id":"https://openalex.org/C2777904410","wikidata":"https://www.wikidata.org/wiki/Q7397","display_name":"Software","level":2,"score":0.4449912905693054},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.1595253050327301},{"id":"https://openalex.org/C199360897","wikidata":"https://www.wikidata.org/wiki/Q9143","display_name":"Programming language","level":1,"score":0.11872699856758118}],"mesh":[],"locations_count":2,"locations":[{"id":"doi:10.4018/jsse.2013070102","is_oa":false,"landing_page_url":"https://doi.org/10.4018/jsse.2013070102","pdf_url":null,"source":{"id":"https://openalex.org/S43656255","display_name":"International Journal of Secure Software Engineering","issn_l":"1947-3036","issn":["1947-3036","1947-3044"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310320424","host_organization_name":"IGI Global","host_organization_lineage":["https://openalex.org/P4310320424"],"host_organization_lineage_names":["IGI Global"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"International Journal of Secure Software Engineering","raw_type":"journal-article"},{"id":"pmh:oai:RePEc:igg:jsse00:v:4:y:2013:i:3:p:18-41","is_oa":false,"landing_page_url":"http://services.igi-global.com/resolvedoi/resolve.aspx?doi=10.4018/jsse.2013070102","pdf_url":null,"source":{"id":"https://openalex.org/S4306401271","display_name":"RePEc: Research Papers in Economics","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I77793887","host_organization_name":"Federal Reserve Bank of St. Louis","host_organization_lineage":["https://openalex.org/I77793887"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"","raw_type":"article"}],"best_oa_location":null,"sustainable_development_goals":[{"score":0.4300000071525574,"id":"https://metadata.un.org/sdg/4","display_name":"Quality Education"}],"awards":[],"funders":[],"has_content":{"pdf":false,"grobid_xml":false},"content_urls":null,"referenced_works_count":16,"referenced_works":["https://openalex.org/W126572551","https://openalex.org/W1481826112","https://openalex.org/W1512524377","https://openalex.org/W1955533808","https://openalex.org/W1976782117","https://openalex.org/W2004685423","https://openalex.org/W2030794875","https://openalex.org/W2050764671","https://openalex.org/W2096029627","https://openalex.org/W2109540106","https://openalex.org/W2122505621","https://openalex.org/W2127443313","https://openalex.org/W2128581098","https://openalex.org/W2172190661","https://openalex.org/W2537140541","https://openalex.org/W3138771162"],"related_works":["https://openalex.org/W2165912799","https://openalex.org/W2735662278","https://openalex.org/W2361861616","https://openalex.org/W2382615723","https://openalex.org/W4311804456","https://openalex.org/W1987484445","https://openalex.org/W2623658258","https://openalex.org/W2143413548","https://openalex.org/W2148276612","https://openalex.org/W3029691491"],"abstract_inverted_index":{"Those":[0],"who":[1],"do":[2],"not":[3],"learn":[4],"from":[5],"past":[6],"vulnerabilities":[7],"are":[8,88,108,119,134],"bound":[9],"to":[10,20,28,48,62,90,99,141],"repeat":[11],"it.":[12],"Consequently,":[13],"there":[14],"have":[15],"been":[16],"several":[17],"research":[18],"efforts":[19],"enumerate":[21],"and":[22,44,54],"categorize":[23],"software":[24,41],"weaknesses":[25],"that":[26,87,118],"lead":[27],"vulnerabilities.":[29],"The":[30,93,105],"Common":[31],"Weakness":[32],"Enumeration":[33],"(CWE)":[34],"is":[35,65],"a":[36,67,77],"community":[37],"developed":[38],"dictionary":[39],"of":[40,129],"weakness":[42,63,124],"types":[43],"their":[45],"relationships,":[46],"designed":[47],"consolidate":[49],"these":[50,116],"efforts.":[51],"Yet,":[52],"aggregating":[53],"classifying":[55],"natural":[56,101],"language":[57,102],"vulnerability":[58,82,103,145],"reports":[59,117],"with":[60,84],"respect":[61],"standards":[64],"currently":[66],"painstaking":[68],"manual":[69],"effort.":[70],"In":[71],"this":[72],"paper,":[73],"the":[74,112,127],"authors":[75,94],"present":[76,95],"semi-automated":[78],"process":[79],"for":[80,110,121],"annotating":[81],"information":[83],"semantic":[85],"concepts":[86],"traceable":[89],"CWE":[91],"identifiers.":[92],"an":[96],"information-processing":[97],"pipeline":[98],"parse":[100],"reports.":[104,146],"resulting":[106],"terms":[107],"used":[109],"learning":[111,132],"syntactic":[113],"cues":[114],"in":[115],"indicators":[120],"corresponding":[122],"standard":[123],"definitions.":[125],"Finally,":[126],"results":[128],"multiple":[130],"machine":[131],"algorithms":[133],"compared":[135],"individually":[136],"as":[137,139],"well":[138],"collectively":[140],"semi-automatically":[142],"annotate":[143],"new":[144]},"counts_by_year":[{"year":2016,"cited_by_count":1}],"updated_date":"2026-06-11T06:19:23.411458","created_date":"2025-10-10T00:00:00"}