Vulnerability Prediction Based on Weighted Software Network for Secure Software Building
| Title | Vulnerability Prediction Based on Weighted Software Network for Secure Software Building |
| Publication Type | Conference Paper |
| Year of Publication | 2018 |
| Authors | Wei, Shengjun, Zhong, Hao, Shan, Chun, Ye, Lin, Du, Xiaojiang, Guizani, Mohsen |
| Conference Name | 2018 IEEE Global Communications Conference (GLOBECOM) |
| ISBN Number | 978-1-5386-4727-1 |
| Keywords | Complexity theory, Metrics, prediction model, Predictive models, predictive security metrics, program testing, pubcrawl, public security vulnerabilities, secure communications software, secure software building, security, security of data, software metrics, Software Security Metrics, software security testing, software system, Software systems, vulnerability prediction models, vulnerable classes, vulnerable software modules, weighted software network |
| Abstract | To build a secure communications software, Vulnerability Prediction Models (VPMs) are used to predict vulnerable software modules in the software system before software security testing. At present many software security metrics have been proposed to design a VPM. In this paper, we predict vulnerable classes in a software system by establishing the system's weighted software network. The metrics are obtained from the nodes' attributes in the weighted software network. We design and implement a crawler tool to collect all public security vulnerabilities in Mozilla Firefox. Based on these data, the prediction model is trained and tested. The results show that the VPM based on weighted software network has a good performance in accuracy, precision, and recall. Compared to other studies, it shows that the performance of prediction has been improved greatly in Pr and Re. |
| URL | https://ieeexplore.ieee.org/document/8647583 |
| DOI | 10.1109/GLOCOM.2018.8647583 |
| Citation Key | wei_vulnerability_2018 |
- security
- weighted software network
- vulnerable software modules
- vulnerable classes
- vulnerability prediction models
- Software systems
- software system
- software security testing
- Software Security Metrics
- software metrics
- security of data
- Complexity theory
- secure software building
- secure communications software
- public security vulnerabilities
- pubcrawl
- program testing
- predictive security metrics
- Predictive models
- prediction model
- Metrics