arrow
Return

Machine learning techniques for software vulnerability prediction: a comparative study

delete2022-04-04
delete11
PRE
AI
G
Gul Jabeen
S
Sabit Rahim
W
Wasif Afzal
D
Dawar Khan *
A
Aftab Ahmed Khan
Z
Zahid Hussain
T
Tehmina Bibi
DOI:10.1007/s10489-022-03350-5delete
deleteOriginal
deleteOriginal request for help
deleteShare
deleteSave
Abstract

Abstract

En 中文
Software vulnerabilities represent a major cause of security problems. Various vulnerability discovery models (VDMs) attempt to model the rate at which the vulnerabilities are discovered in a software. Although several VDMs have been proposed, not all of them are universally applicable. Also most of them seldom give accurate predictive results for every type of vulnerability dataset. The use of machine learning (ML) techniques has generally found success in a wide range of predictive tasks. Thus, in this paper, we conducted an empirical study on applying some well-known machine learning (ML) techniques as well as statistical techniques to predict the software vulnerabilities on a variety of datasets. The following ML techniques have been evaluated: cascade-forward back propagation neural network, feed-forward back propagation neural network, adaptive-neuro fuzzy inference system, multi-layer perceptron, support vector machine, bagging, M5Rrule, M5P and reduced error pruning tree. The following statistical techniques have been evaluated: Alhazmi-Malaiya model, linear regression and logistic regression model. The applicability of the techniques is examined using two separate approaches: goodness-of-fit to see how well the model tracks the data, and prediction capability using different criteria. It is observed that ML techniques show remarkable improvement in predicting the software vulnerabilities than the statistical vulnerability prediction models.
Keywords:
Software vulnerability
Machine learning
Prediction models

Journal

Applied Intelligence cover
Applied Intelligence
IF:
3.5
Papers:
7.6K
Citations:
1.7W

Organization

T
tsinghua university
Scholars:
11.9W
Papers: 10.0W
Citations: 137
M
Malardalen University
Scholars:
1.2K
Papers: 1.5K
Citations: 3
Karakoram International University cover
Karakoram International University
Scholars:
287
Papers: 273
Citations: 516
C
chinese academy of sciences
Scholars:
56.7W
Papers: 45.0W
Citations: 704
researcher View more organizations
Cited Papers

Cited Papers

errShare
errSave
err
IF0
err
err0
PREAI
err
errShare
errSave
The impact factors on the performance of machine learning-based vulnerability detection: A comparative study
err2020-10-01
err32
PREAI
errZheng, Wei; Gao, Jialiang; Wu, Xiaoxue; Liu, Fengyu; Xun, Yuxing; Liu, Guoliang; Chen, Xiang
errShare
errSave
Cluster-based vulnerability assessment of operating systems and web browsers
err2018-09-25
err15
errOAAI
errMovahedi, Yazdan; Cukier, Michel; Andongabo, Ambrose; Gashi, Ilir
errShare
errSave
The clinical efficacy of extracorporeal shock wave lithotripsy in pediatric urolithiasis: a systematic review and meta-analysis
err2015-02-27
err0
PREAI
errPei Lu; Zijie Wang; Rijin Song; Xiaolan Wang; Kai Qi; Qiying Dai; Wei Zhang; Min Gu
errShare
errSave
SySeVR: A Framework for Using Deep Learning to Detect Software Vulnerabilities
err2022-07-01
err261
errOAAI
errLi, Zhen; Zou, Deqing; Xu, Shouhuai; Jin, Hai; Zhu, Yawei; Chen, Zhaoxuan
errShare
errSave
errShare
errSave
errShare
errSave
Software Vulnerability Discovery via Learning Multi-Domain Knowledge Bases
err2021-09-01
err80
PREAI
errLin, Guanjun; Zhang, Jun; Luo, Wei; Pan, Lei; De Vel, Olivier; Montague, Paul; Xiang, Yang
errShare
errSave
researcher View more