Using complexity, coupling, and cohesion metrics as early indicators of vulnerabilities

I Chowdhury, M Zulkernine - Journal of Systems Architecture, 2011 - Elsevier
Software security failures are common and the problem is growing. A vulnerability is a
weakness in the software that, when exploited, causes a security failure. It is difficult to detect …

The importance of accounting for real-world labelling when predicting software vulnerabilities

M Jimenez, R Rwemalika, M Papadakis… - Proceedings of the …, 2019 - dl.acm.org
Previous work on vulnerability prediction assume that predictive models are trained with
respect to perfect labelling information (includes labels from future, as yet undiscovered …

Deep learning for software vulnerabilities detection using code metrics

M Zagane, MK Abdi, M Alenezi - IEEE Access, 2020 - ieeexplore.ieee.org
Software vulnerability can cause disastrous consequences for information security. Earlier
detection of vulnerabilities minimizes these consequences. Manual detection of vulnerable …

Coupling and cohesion metrics for object-oriented software: A systematic map** study

S Tiwari, SS Rathore - Proceedings of the 11th Innovations in Software …, 2018 - dl.acm.org
Coupling and Cohesion are two fundamental concepts that can be applied to design better
modular object-oriented software. This study aims at reviewing existing research on …

Software reuse cuts both ways: An empirical analysis of its relationship with security vulnerabilities

A Gkortzis, D Feitosa, D Spinellis - Journal of Systems and Software, 2021 - Elsevier
Software reuse is a widely adopted practice among both researchers and practitioners. The
relation between security and reuse can go both ways: a system can become more secure …

Technical debt as an indicator of software security risk: a machine learning approach for software development enterprises

M Siavvas, D Tsoukalas, M Jankovic… - Enterprise Information …, 2022 - Taylor & Francis
Vulnerability prediction facilitates the development of secure software, as it enables the
identification and mitigation of security risks early enough in the software development …

Software metrics and security vulnerabilities: dataset and exploratory study

H Alves, B Fonseca, N Antunes - 2016 12th European …, 2016 - ieeexplore.ieee.org
Code with certain characteristics is more prone to have security vulnerabilities. In fact,
studies show that code not following best practices is harder to verify and maintain, and …

Using software metrics for predicting vulnerable classes and methods in Java projects: A machine learning approach

KZ Sultana, V Anu, TY Chong - Journal of Software: Evolution …, 2021 - Wiley Online Library
Abstract [Context] A software vulnerability becomes harmful for software when an attacker
successfully exploits the insecure code and reveals the vulnerability. A single vulnerability in …

Efficient feature selection for static analysis vulnerability prediction

K Filus, P Boryszko, J Domańska, M Siavvas… - Sensors, 2021 - mdpi.com
Common software vulnerabilities can result in severe security breaches, financial losses,
and reputation deterioration and require research effort to improve software security. The …

A hierarchical model for quantifying software security based on static analysis alerts and software metrics

M Siavvas, D Kehagias, D Tzovaras, E Gelenbe - Software Quality Journal, 2021 - Springer
Despite the acknowledged importance of quantitative security assessment in secure
software development, current literature still lacks an efficient model for measuring internal …