6 papers · ranked by Valyu relevance
Chen Tsfaty, Michael Fire
Title: Summary Modern software development often relies on open-source code sharing. Open-source code reuse, however, allows hackers to access wide developer communities, thereby potentially affecting many products. An increasing number of such “supply chain attacks” have occurred in recent years, taking advantage of…
Melih Peker, Ozcan Ozturk
Selecting a good set of optimization flags requires extensive effort and expert input. While most of the prior research considers using static, spatial, or dynamic features, some of the latest research directly applied deep neural networks to source code. We combined the static features, spatial features, and deep…
Xin He, Asiya, Daoqi Han, Shuncheng Zhou + 3 more
'Nikolaos Pitropakis'] Vulnerability detection in software source code is crucial in ensuring software security. Existing models face challenges with dataset class imbalance and long training times. To address these issues, this paper introduces a multi-feature screening and integrated sampling model (MFISM) to enhance…
Kajetan Kuszczyński, Michał Walkowski, Alessandra Rizzardi
The increasing complexity of web applications and systems, driven by ongoing digitalization, has made software security testing a necessary and critical activity in the software development lifecycle. This article compares the performance of open-source tools for conducting static code analysis for security purposes.…
Fahmi H. Quradaa, Sara Shahzad, Rashad Saeed, Mubarak M. Sufyan + 1 more
In software development, it’s common to reuse existing source code by copying and pasting, resulting in the proliferation of numerous code clones-similar or identical code fragments-that detrimentally affect software quality and maintainability. Although several techniques for code clone detection exist, many encounter…
Fabiano Pecorelli, Savanna Lujan, Valentina Lenarduzzi, Fabio Palomba + 1 more
Code smells are poor implementation choices that developers apply while evolving source code and that affect program maintainability. Multiple automated code smell detectors have been proposed: while most of them relied on heuristics applied over software metrics, a recent trend concerns the definition of machine…