arrow
返回

An automatic software vulnerability classification framework using term frequency-inverse gravity moment and feature selection

delete2020-09-01
delete23
PRE
AI
陈
陈锦富 (Jinfu Chen)
P
Patrick Kwaku Kudjo *
S
Solomon Mensah
S
Selasie Aformaley Brown
G
George Akorfu
DOI:10.1016/j.jss.2020.110616delete
delete原文链接
delete原文求助
delete分享
delete收藏
摘要

摘要

En 中文
Vulnerability classification is an important activity in software development and software quality maintenance. A typical vulnerability classification model usually involves a stage of term selection, in which the relevant terms are identified via feature selection. It also involves a stage of term-weighting, in which the document weights for the selected terms are computed, and a stage for classifier learning. Generally, the term frequency-inverse document frequency (TF-IDF) model is the most widely used term-weighting metric for vulnerability classification. However, several issues hinder the effectiveness of the TF-IDF model for document classification. To address this problem, we propose and evaluate a general framework for vulnerability severity classification using the term frequency-inverse gravity moment (TF-IGM). Specifically, we extensively compare the term frequency-inverse gravity moment, term frequency-inverse document frequency, and information gain feature selection using five machine learning algorithms on ten vulnerable software applications containing a total number of 27,248 security vulnerabilities. The experimental result shows that: (i) the TF-IGM model is a promising term weighting metric for vulnerability classification compared to the classical term-weighting metric, (ii) the effectiveness of feature selection on vulnerability classification varies significantly across the studied datasets and (iii) feature selection improves vulnerability classification. (C) 2020 Elsevier Inc. All rights reserved.
Keyword:
Software vulnerability
Classification
Feature selection
Machine learning algorithms
Severity
Term-weighting

期刊

Journal of Systems and Software 封面图
Journal of Systems and Software
IF:
4.1
论文数:
5.5K
被引数:
8.4K

机构

J
Jiangsu University
学者数:
4.0W
论文数: 2.8W
被引数: 5.5W
U
University of Ghana
学者数:
6.6K
论文数: 4.0K
被引数: 3.7K
引用论文

引用论文

Effects of anticholinesterase drugs on biomarkers and behavior of pumpkinseed, Lepomis gibbosus (Linnaeus, 1758)
err2012-01-01
err0
PREAI
errSara Rodrigues; Sara C. Antunes; Fátima P. Brandão; Bruno B. Castro; Fernando Gonçalves; Bruno Nunes
err分享
err收藏
A Part-Of-Speech term weighting scheme for biomedical information retrieval
err2016-10-01
err23
errOAAI
errWang, Yanshan; Wu, Stephen; Li, Dingcheng; Mehrabi, Saeed; Liu, Hongfang
err分享
err收藏
Summarizing vulnerabilities' descriptions to support experts during vulnerability assessment activities
err2019-10-01
err41
PREAI
errRusso, Ernesto Rosario; Di Sorbo, Andrea; Visaggio, Corrado A.; Canfora, Gerardo
err分享
err收藏
Chromis-1, a Ratiometric Fluorescent Probe Optimized for Two-Photon Microscopy Reveals Dynamic Changes in Labile Zn(II) in Differentiating Oligodendrocytes
err2018-02-12
err0
errOAAI
errDaisy Bourassa; Christopher M. Elitt; Adam M. McCallum; S. Sumalekshmy; Reagan L. McRae; M. Thomas Morgan; Nisan Siegel; Joseph W. Perry; Paul A. Rosenberg; Christoph J. Fahrni
err分享
err收藏
Evaluating subset selection methods for use case points estimation
err2018-05-01
err42
errOAAI
errSilhavy, Radek; Silhavy, Petr; Prokopova, Zdenka
err分享
err收藏
Turning from TF-IDF to TF-IGM for term weighting in text classification
err2016-12-01
err177
PREAI
errChen, Kewen; Zhang, Zuping; Long, Jun; Zhang, Hao
err分享
err收藏
学者 查看更多内容