A Survey on Data-driven Software Vulnerability Assessment and Prioritization
Software Vulnerabilities (SVs) are increasing in complexity and scale, posing great security risks to many software systems. Given the limited resources in practice, SV assessment and prioritization help practitioners devise optimal SV mitigation plans based on various SV characteristics. The surges in SV data sources and data-driven techniques such as Machine Learning and Deep Learning have taken SV assessment and prioritization to the next level. Our survey provides a taxonomy of the past research efforts and highlights the best practices for data-driven SV assessment and prioritization. We also discuss the current limitations and propose potential solutions to address such issues.
Code (1)
Similar Papers 제목 키워드 기반
Towards an Improved Understanding of Software Vulnerability Assessment Using Data-Driven Approaches
The thesis advances the field of software security by providing knowledge and automation support for software vulnerability assessment using data-driven approaches. Software vulnerability assessment provides important an…
Mitigating Data Imbalance for Software Vulnerability Assessment: Does Data Augmentation Help?
Background: Software Vulnerability (SV) assessment is increasingly adopted to address the ever-increasing volume and complexity of SVs. Data-driven approaches have been widely used to automate SV assessment tasks, partic…
Data AugmentationText AugmentationOn the Use of Fine-grained Vulnerable Code Statements for Software Vulnerability Assessment Models
Many studies have developed Machine Learning (ML) approaches to detect Software Vulnerabilities (SVs) in functions and fine-grained code statements that cause such SVs. However, there is little work on leveraging such de…
EvalSVA: Multi-Agent Evaluators for Next-Gen Software Vulnerability Assessment
Software Vulnerability (SV) assessment is a crucial process of determining different aspects of SVs (e.g., attack vectors and scope) for developers to effectively prioritize efforts in vulnerability mitigation. It presen…
ChatNVD: Advancing Cybersecurity Vulnerability Assessment with Large Language Models
The increasing frequency and sophistication of cybersecurity vulnerabilities in software systems underscores the need for more robust and effective vulnerability assessment methods. However, existing approaches often rel…