ISSTA 2019
Mon 15 - Fri 19 July 2019 Beijing, China
Tue 16 Jul 2019 14:00 - 14:20 at Meeting Room 2 - Session 3

Vulnerability Prediction Models (VPMs) aims to identify vulnerable and non-vulnerable components in large software systems, and can be used to estimate the resources needed for managing the critical software systems. Consequently, VPMs presents three major drawbacks (i) finding an effective method to identify a representative set of features from which to construct an effective model. (ii) the way the features are utilized in the machine learning setup (iii) making an implicit assumption that parameter optimization would not change the outcome of VPMs. To address these limitations, we investigate the significant effect of the Bellwether analysis on VPMs. Specifically, we first develop a Bellwether algorithm to identify and select an exemplary subset of data to be considered as the Bellwether to yield improved prediction accuracy against the growing portfolio benchmark. Next, we build a machine learning approach with different parameter settings to show the improvement of performance of VPMs. The prediction results of the suggested models were assessed in terms of precision, recall, F-measure, and other statistical measures. The preliminary result shows the Bellwether approach outperforms the benchmark technique across the applications studied with F-measure values ranging from 51.1% - 98.5%. In addition, we noticed that the k-nearest neighbor and deep neural network are the most stable classification models measured by our performance metrics. In conclusion, we recommend the Bellwether concept when building VPMs.

Tue 16 Jul

Displayed time zone: Beijing, Chongqing, Hong Kong, Urumqi change

14:00 - 15:30
14:00
20m
Doctoral symposium paper
A Cost-Effective Strategy for Software Vulnerability Prediction Based on Bellwether Analysis
Doctoral Symposium
Patrick Kwaku Kudjo Jiangsu University
14:20
20m
Doctoral symposium paper
Towards Scalable Defense of Information Flow Security for Distributed Systems
Doctoral Symposium
Xiaoqin Fu Washington State University
14:40
20m
Doctoral symposium paper
Mining Constraints for Grammar Fuzzing
Doctoral Symposium
Michaël Mera CISPA, Germany
15:00
30m
Talk
Panel Disscussion
Doctoral Symposium