How vulnerability explanations help software practitioners confirm and fix code vulnerabilities

doi:10.1016/j.infsof.2026.108086

2026-03-03

PRE

DOI：10.1016/j.infsof.2026.108086

原文链接

原文求助

摘要

En 中文

当前大多数代码漏洞检测工具仅提供二元分类（存在漏洞/不存在漏洞），且几乎没有额外上下文信息。本文探讨了在标记为存在漏洞的代码旁边提供漏洞解释的影响。

Keyword:

vulnerability detection

code explanations

software practitioners

binary classification

vulnerability confirmation

期刊

Information and Software Technology

IF:

4.3

论文数:

3.8K

被引数:

7.7K

机构

wroclaw university of science and technology

学者数:

285

论文数: 138

被引数: 0

lancaster university

学者数:

1.5K

论文数: 957

被引数: 0

king saud university

学者数:

6.0K

论文数: 3.1K

被引数: 1

查看更多机构

引用论文

Are Explanations Helpful? A Comparative Study of the Effects of Explanations in AI-Assisted Decision-Making

26th International Conference on Intelligent User Interfaces

IF0

2021-04-14

OAAI

Xinru Wang; Ming Yin

Better together: Comparing vulnerability prediction models

INFORMATION AND SOFTWARE TECHNOLOGY

IF4.3

2020-03-01

PREAI

Theisen, Christopher; Williams, Laurie

AIBugHunter: A Practical tool for predicting, classifying and repairing software vulnerabilities

Empirical Software Engineering

IF0

2023-11-20

OAAI

Michael Fu; Chakkrit Tantithamthavorn; Trung Le; Yuki Kume; Van Nguyen; Dinh Phung; John Grundy

VulDeeLocator: A Deep Learning-Based Fine-Grained Vulnerability Detector VulDeeLocator: 一种基于深度学习的细粒度漏洞检测器

IEEE TRANSACTIONS ON DEPENDABLE AND SECURE COMPUTING

IF7.5

2022-07-01

OAAI

Li, Zhen; Zou, Deqing; Xu, Shouhuai; Chen, Zhaoxuan; Zhu, Yawei; Jin, Hai

SySeVR: A Framework for Using Deep Learning to Detect Software Vulnerabilities SySeVR: 使用深度学习检测软件漏洞的框架

IEEE TRANSACTIONS ON DEPENDABLE AND SECURE COMPUTING

IF7.5

2022-07-01

261

OAAI

Li, Zhen; Zou, Deqing; Xu, Shouhuai; Jin, Hai; Zhu, Yawei; Chen, Zhaoxuan

A transformer-based IDE plugin for vulnerability detection

Proceedings of the 37th IEEE/ACM International Conference on Automated Software Engineering

IF0

2023-01-05

OAAI

Cláudia Mamede; Eduard Pinconschi; Rui Abreu

Learning a classifier for false positive error reports emitted by static code analysis tools

Proceedings of the 1st ACM SIGPLAN International Workshop on Machine Learning and Programming Languages

IF0

2017-06-18

PREAI

Ugur Koc; Parsa Saadatpanah; Jeffrey S. Foster; Adam A. Porter

An Empirical Analysis of Practitioners' Perspectives on Security Tool Integration into DevOps 从业人员对安全工具集成到DevOps中的观点的实证分析

Proceedings of the 15th ACM / IEEE International Symposium on Empirical Software Engineering and Measurement (ESEM)

IF0

2021-10-11

OAAI

Roshan Namal Rajapakse; Mansooreh Zahedi; Muhammad Ali Babar

Explainable AI in Fintech Risk Management Fintech风险管理中的可解释AI

FRONTIERS IN ARTIFICIAL INTELLIGENCE

IF4.7

2020-04-24

OAAI

Bussmann, Niklas; Giudici, Paolo; Marinelli, Dimitri; Papenbrock, Jochen

Worse Than Spam

Proceedings of the 10th ACM/IEEE International Symposium on Empirical Software Engineering and Measurement

IF0

2016-09-08

OAAI

Sebastian Baltes; Stephan Diehl

查看更多内容