Can traditional fault prediction models be used for vulnerability prediction?
暂无分享,去创建一个
[1] Andreas Zeller,et al. Predicting vulnerable software components , 2007, CCS '07.
[2] R. Lyman Ott.,et al. An introduction to statistical methods and data analysis , 1977 .
[3] Tim Menzies,et al. Data Mining Static Code Attributes to Learn Defect Predictors , 2007, IEEE Transactions on Software Engineering.
[4] Andreas Zeller,et al. Mining metrics to predict component failures , 2006, ICSE.
[5] David Rice,et al. Geekonomics - The Real Cost of Insecure Software , 2007 .
[6] Jeffrey C. Carver,et al. Characterizing Software Architecture Changes: An Initial Study , 2007, ESEM 2007.
[7] Akito Monden,et al. The Effects of Over and Under Sampling on Fault-prone Module Detection , 2007, First International Symposium on Empirical Software Engineering and Measurement (ESEM 2007).
[8] Laurie A. Williams,et al. Evaluating Complexity, Code Churn, and Developer Activity Metrics as Indicators of Software Vulnerabilities , 2011, IEEE Transactions on Software Engineering.
[9] Ayse Basar Bener,et al. Defect prediction from static code features: current results, limitations, new approaches , 2010, Automated Software Engineering.
[10] Taghi M. Khoshgoftaar,et al. Early Quality Prediction: A Case Study in Telecommunications , 1996, IEEE Softw..
[11] Sarah Smith Heckman,et al. On establishing a benchmark for evaluating static analysis alert prioritization and classification techniques , 2008, ESEM '08.
[12] Michael D. Ernst,et al. Which warnings should I fix first? , 2007, ESEC-FSE '07.
[13] Jessica Keyes,et al. IEEE Standard Dictionary of Measures to Produce Reliable Software , 2002 .
[14] Andreas Zeller,et al. Predicting faults from cached history , 2008, ISEC '08.
[15] Laurie A. Williams,et al. Is complexity really the enemy of software security? , 2008, QoP '08.
[16] Bojan Cukic,et al. Robust prediction of fault-proneness by random forests , 2004, 15th International Symposium on Software Reliability Engineering.
[17] Eugene H. Spafford,et al. Software vulnerability analysis , 1998 .
[18] Anas N. Al-Rabadi,et al. A comparison of modified reconstructability analysis and Ashenhurst‐Curtis decomposition of Boolean functions , 2004 .
[19] ZhangHongyu,et al. Comments on "Data Mining Static Code Attributes to Learn Defect Predictors" , 2007 .
[20] René R. Colditz,et al. Landscape Complexity and Remote Classification in Eastern Coastal Mexico: Applications of Landsat‐7 ETM+ Data , 2004 .
[21] Laurie A. Williams,et al. Secure open source collaboration: an empirical study of linus' law , 2009, CCS.
[22] M. F. Porter,et al. An algorithm for suffix stripping , 1997 .
[23] Geoff Holmes,et al. Benchmarking Attribute Selection Techniques for Discrete Class Data Mining , 2003, IEEE Trans. Knowl. Data Eng..
[24] Michael Gegick,et al. Prioritizing software security fortification throughcode-level metrics , 2008, QoP '08.
[25] Elaine J. Weyuker,et al. Predicting the location and number of faults in large software systems , 2005, IEEE Transactions on Software Engineering.
[26] Lionel C. Briand,et al. Predicting fault-prone components in a java legacy system , 2006, ISESE '06.
[27] Nachiappan Nagappan,et al. Predicting defects using network analysis on dependency graphs , 2008, 2008 ACM/IEEE 30th International Conference on Software Engineering.
[28] Ahmed E. Hassan,et al. Predicting faults using the complexity of code changes , 2009, 2009 IEEE 31st International Conference on Software Engineering.
[29] Laurie A. Williams,et al. Searching for a Needle in a Haystack: Predicting Security Vulnerabilities for Windows Vista , 2010, 2010 Third International Conference on Software Testing, Verification and Validation.
[30] Lionel C. Briand,et al. Data Mining Techniques for Building Fault-proneness Models in Telecom Java Software , 2007, The 18th IEEE International Symposium on Software Reliability (ISSRE '07).
[31] Rainer Koschke,et al. Revisiting the evaluation of defect prediction models , 2009, PROMISE '09.
[32] Xiuzhen Zhang,et al. Comments on "Data Mining Static Code Attributes to Learn Defect Predictors" , 2007, IEEE Trans. Software Eng..
[33] Harvey P. Siy,et al. Predicting Fault Incidence Using Software Change History , 2000, IEEE Trans. Software Eng..
[34] C. Borror. An Introduction to Statistical Methods and Data Analysis, 5th Ed. , 2002 .
[35] N. Nagappan,et al. Use of relative code churn measures to predict system defect density , 2005, Proceedings. 27th International Conference on Software Engineering, 2005. ICSE 2005..
[36] Yue Jiang,et al. Cost Curve Evaluation of Fault Prediction Models , 2008, 2008 19th International Symposium on Software Reliability Engineering (ISSRE).
[37] Bart Baesens,et al. Benchmarking Classification Models for Software Defect Prediction: A Proposed Framework and Novel Findings , 2008, IEEE Transactions on Software Engineering.
[38] Gregory Tassey,et al. Prepared for what , 2007 .
[39] Yue Jiang,et al. Can data transformation help in the detection of fault-prone modules? , 2008, DEFECTS '08.
[40] Indrajit Ray,et al. Measuring, analyzing and predicting security vulnerabilities in software systems , 2007, Comput. Secur..
[41] Victor R. Basili,et al. A Validation of Object-Oriented Design Metrics as Quality Indicators , 1996, IEEE Trans. Software Eng..
[42] Elaine J. Weyuker,et al. Automating algorithms for the identification of fault-prone files , 2007, ISSTA '07.
[43] Burak Turhan,et al. Implications of ceiling effects in defect predictors , 2008, PROMISE '08.
[44] Foutse Khomh,et al. Is it a bug or an enhancement?: a text-based approach to classify change requests , 2008, CASCON '08.
[45] Michael Gegick,et al. Toward Non-security Failures as a Predictor of Security Faults and Failures , 2009, ESSoS.
[46] Ian H. Witten,et al. Data mining: practical machine learning tools and techniques, 3rd Edition , 1999 .