@inproceedings{c42aa5edb40a40989b5acb02358b3fc2,
title = "Early identification of vulnerable software components via ensemble learning",
abstract = "Software components, which are vulnerable to being exploited, need to be identified and patched. Employing any prevention techniques designed for the purpose of detecting vulnerable software components in early stages can reduce the expenses associated with the software testing process significantly and thus help building a more reliable and robust software system. Although previous studies have demonstrated the effectiveness of adapting prediction techniques in vulnerability detection, the feasibility of those techniques is limited mainly because of insufficient training data sets. This paper proposes a prediction technique targeting at early identification of potentially vulnerable software components. In the proposed scheme, the potentially vulnerable components are viewed as mislabeled data that may contain true but not yet observed vulnerabilities. The proposed hybrid technique combines the supports vector machine algorithm and ensemble learning strategy to better identify potential vulnerable components. The proposed vulnerability detection scheme is evaluated using some Java Android applications. The results demonstrated that the proposed hybrid technique could identify potentially vulnerable classes with high precision and relatively acceptable accuracy and recall.",
keywords = "Ensemble learning, Mislabeled data, Support vector machine, Vulnerability",
author = "Yulei Pang and Xiaozhen Xue and Namin, {Akbar Siami}",
year = "2017",
month = jan,
day = "31",
doi = "10.1109/ICMLA.2016.83",
language = "English",
series = "Proceedings - 2016 15th IEEE International Conference on Machine Learning and Applications, ICMLA 2016",
publisher = "Institute of Electrical and Electronics Engineers Inc.",
pages = "476--481",
booktitle = "Proceedings - 2016 15th IEEE International Conference on Machine Learning and Applications, ICMLA 2016",
note = "15th IEEE International Conference on Machine Learning and Applications, ICMLA 2016 ; Conference date: 18-12-2016 Through 20-12-2016",
}