Using complexity, coupling, and cohesion metrics as early indicators of vulnerabilities
I Chowdhury, M Zulkernine - Journal of Systems Architecture, 2011 - Elsevier
Software security failures are common and the problem is growing. A vulnerability is a
weakness in the software that, when exploited, causes a security failure. It is difficult to detect …
weakness in the software that, when exploited, causes a security failure. It is difficult to detect …
The importance of accounting for real-world labelling when predicting software vulnerabilities
Previous work on vulnerability prediction assume that predictive models are trained with
respect to perfect labelling information (includes labels from future, as yet undiscovered …
respect to perfect labelling information (includes labels from future, as yet undiscovered …
Deep learning for software vulnerabilities detection using code metrics
Software vulnerability can cause disastrous consequences for information security. Earlier
detection of vulnerabilities minimizes these consequences. Manual detection of vulnerable …
detection of vulnerabilities minimizes these consequences. Manual detection of vulnerable …
Coupling and cohesion metrics for object-oriented software: A systematic map** study
Coupling and Cohesion are two fundamental concepts that can be applied to design better
modular object-oriented software. This study aims at reviewing existing research on …
modular object-oriented software. This study aims at reviewing existing research on …
Software reuse cuts both ways: An empirical analysis of its relationship with security vulnerabilities
Software reuse is a widely adopted practice among both researchers and practitioners. The
relation between security and reuse can go both ways: a system can become more secure …
relation between security and reuse can go both ways: a system can become more secure …
Technical debt as an indicator of software security risk: a machine learning approach for software development enterprises
Vulnerability prediction facilitates the development of secure software, as it enables the
identification and mitigation of security risks early enough in the software development …
identification and mitigation of security risks early enough in the software development …
Software metrics and security vulnerabilities: dataset and exploratory study
Code with certain characteristics is more prone to have security vulnerabilities. In fact,
studies show that code not following best practices is harder to verify and maintain, and …
studies show that code not following best practices is harder to verify and maintain, and …
Using software metrics for predicting vulnerable classes and methods in Java projects: A machine learning approach
Abstract [Context] A software vulnerability becomes harmful for software when an attacker
successfully exploits the insecure code and reveals the vulnerability. A single vulnerability in …
successfully exploits the insecure code and reveals the vulnerability. A single vulnerability in …
Efficient feature selection for static analysis vulnerability prediction
Common software vulnerabilities can result in severe security breaches, financial losses,
and reputation deterioration and require research effort to improve software security. The …
and reputation deterioration and require research effort to improve software security. The …
A hierarchical model for quantifying software security based on static analysis alerts and software metrics
Despite the acknowledged importance of quantitative security assessment in secure
software development, current literature still lacks an efficient model for measuring internal …
software development, current literature still lacks an efficient model for measuring internal …