{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,7,3]],"date-time":"2026-07-03T16:41:55Z","timestamp":1783096915867,"version":"3.54.6"},"publisher-location":"Cham","reference-count":40,"publisher":"Springer International Publishing","isbn-type":[{"value":"9783319936376","type":"print"},{"value":"9783319936383","type":"electronic"}],"license":[{"start":{"date-parts":[[2018,1,1]],"date-time":"2018-01-01T00:00:00Z","timestamp":1514764800000},"content-version":"tdm","delay-in-days":0,"URL":"http:\/\/www.springer.com\/tdm"}],"content-domain":{"domain":["link.springer.com"],"crossmark-restriction":false},"short-container-title":[],"published-print":{"date-parts":[[2018]]},"DOI":"10.1007\/978-3-319-93638-3_35","type":"book-chapter","created":{"date-parts":[[2018,6,12]],"date-time":"2018-06-12T22:43:01Z","timestamp":1528843381000},"page":"619-633","update-policy":"https:\/\/doi.org\/10.1007\/springer_crossmark_policy","source":"Crossref","is-referenced-by-count":12,"title":["Automatically Identifying Security Bug Reports via Multitype Features Analysis"],"prefix":"10.1007","author":[{"given":"Deqing","family":"Zou","sequence":"first","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Zhijun","family":"Deng","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Zhen","family":"Li","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Hai","family":"Jin","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]}],"member":"297","published-online":{"date-parts":[[2018,6,13]]},"reference":[{"key":"35_CR1","doi-asserted-by":"crossref","unstructured":"Anvik, J., Hiew, L., Murphy, G.C.: Who should fix this bug? In: Proceedings of the 28th International Conference on Software engineering (ICSE), pp. 361\u2013370 (2006)","DOI":"10.1145\/1134285.1134336"},{"key":"35_CR2","doi-asserted-by":"crossref","unstructured":"Behl, D., Handa, S., Arora, A.: A bug mining tool to identify and analyze security bugs using Naive Bayes and TF-IDF. In: Proceedings of the 2014 International Conference on Optimization, Reliabilty, and Information Technology (ICROIT), pp. 294\u2013299 (2014)","DOI":"10.1109\/ICROIT.2014.6798341"},{"key":"35_CR3","unstructured":"Bugzilla. https:\/\/www.bugzilla.org\/. Accessed 18 Apr 2018"},{"key":"35_CR4","doi-asserted-by":"crossref","unstructured":"Camilo, F., Meneely, A., Nagappan, M.: Do bugs foreshadow vulnerabilities? A study of the chromium project. In: Proceedings of the 12th IEEE\/ACM Working Conference on Mining Software Repositories (MSR), pp. 269\u2013279 (2015)","DOI":"10.1109\/MSR.2015.32"},{"issue":"3","key":"35_CR5","first-page":"27:1","volume":"2","author":"CC Chang","year":"2011","unstructured":"Chang, C.C., Lin, C.J.: LIBSVM: a library for support vector machines. ACM Trans. Intell. Syst. Technol. (TIST) 2(3), 27:1\u201327:27 (2011)","journal-title":"ACM Trans. Intell. Syst. Technol. (TIST)"},{"issue":"1","key":"35_CR6","doi-asserted-by":"publisher","first-page":"334","DOI":"10.1007\/s10664-017-9520-6","volume":"23","author":"DA da Costa","year":"2018","unstructured":"da Costa, D.A., McIntosh, S., Kulesza, U., Hassan, A.E., Abebe, S.L.: An empirical study of the integration time of fixed issues. Empir. Softw. Eng. (ESE) 23(1), 334\u2013383 (2018). https:\/\/doi.org\/10.1007\/s10664-017-9520-6","journal-title":"Empir. Softw. Eng. (ESE)"},{"key":"35_CR7","unstructured":"Coverity. https:\/\/www.synopsys.com\/software-integrity.html. Accessed 18 Apr 2018"},{"issue":"2","key":"35_CR8","doi-asserted-by":"publisher","first-page":"5:1","DOI":"10.1145\/2619091","volume":"32","author":"W Enck","year":"2014","unstructured":"Enck, W., Gilbert, P., Han, S., Tendulkar, V., Chun, B.G., Cox, L.P., Jung, J., McDaniel, P., Sheth, A.N.: TaintDroid: an information-flow tracking system for realtime privacy monitoring on smartphones. ACM Trans. Comput. Syst. (TOCS) 32(2), 5:1\u20135:29 (2014)","journal-title":"ACM Trans. Comput. Syst. (TOCS)"},{"key":"35_CR9","unstructured":"Flawfinder. https:\/\/www.dwheeler.com\/flawfinder\/. Accessed 18 Apr 2018"},{"key":"35_CR10","doi-asserted-by":"crossref","unstructured":"Gegick, M., Rotella, P., Xie, T.: Identifying security bug reports via text mining: an industrial case study. In: Proceedings of the 7th IEEE\/ACM Working Conference on Mining Software Repositories (MSR), pp. 11\u201320 (2010)","DOI":"10.1109\/MSR.2010.5463340"},{"key":"35_CR11","unstructured":"Haller, I., Slowinska, A., Neugschwandtner, M., Bos, H.: Dowsing for overflows: a guided fuzzer to find buffer boundary violations. In: Proceedings of the 22nd USENIX Security Symposium, pp. 49\u201364 (2013)"},{"issue":"1","key":"35_CR12","first-page":"1","volume":"60","author":"J He","year":"2017","unstructured":"He, J., Zhang, J., Ma, H., Nazar, N., Ren, Z.: Mining authorship characteristics in bug repositories. Sci. China Inf. Sci. (SCIS) 60(1), 1\u201316 (2017)","journal-title":"Sci. China Inf. Sci. (SCIS)"},{"key":"35_CR13","doi-asserted-by":"crossref","unstructured":"Jang, J., Brumley, D., Agrawal, A.: ReDeBug: finding unpatched code clones in entire OS distributions. In: Proceedings of the 33rd IEEE Symposium on Security and Privacy (S&P), pp. 48\u201362 (2012)","DOI":"10.1109\/SP.2012.13"},{"key":"35_CR14","doi-asserted-by":"crossref","unstructured":"Jeong, G., Kim, S., Zimmermann, T.: Improving bug triage with bug tossing graphs. In: Proceedings of the 7th Joint Meeting of the European Software Engineering Conference and the ACM Joint European Software Engineering Conference and Symposium on the Foundations of Software Engineering (ESEC\/FSE), pp. 111\u2013120 (2009)","DOI":"10.1145\/1595696.1595715"},{"key":"35_CR15","unstructured":"Jira. https:\/\/www.atlassian.com\/software\/jira. Accessed 18 Apr 2018"},{"key":"35_CR16","doi-asserted-by":"crossref","unstructured":"Kim, S., Woo, S., Lee, H., Oh, H.: VUDDY: a scalable approach for vulnerable code clone discovery. In: Proceedings of the 38th IEEE Symposium on Security and Privacy (S&P), pp. 595\u2013614 (2017)","DOI":"10.1109\/SP.2017.62"},{"key":"35_CR17","doi-asserted-by":"publisher","unstructured":"Kim, S., Whitehead Jr., E.J.: How long did it take to fix bugs? In: Proceedings of the 3rd IEEE\/ACM International Workshop on Mining Software Repositories (MSR), pp. 173\u2013174 (2006). https:\/\/doi.org\/10.1145\/1137983.1138027","DOI":"10.1145\/1137983.1138027"},{"issue":"6","key":"35_CR18","doi-asserted-by":"publisher","first-page":"5","DOI":"10.1109\/MIS.2016.45","volume":"31","author":"S Lai","year":"2016","unstructured":"Lai, S., Liu, K., He, S., Zhao, J.: How to generate a good word embedding. IEEE Intell. Syst. 31(6), 5\u201314 (2016)","journal-title":"IEEE Intell. Syst."},{"key":"35_CR19","doi-asserted-by":"crossref","unstructured":"Lamkanfi, A., Demeyer, S., Giger, E., Goethals, B.: Predicting the severity of a reported bug. In: Proceedings of the 7th IEEE\/ACM Working Conference on Mining Software Repositories (MSR), pp. 1\u201310 (2010)","DOI":"10.1109\/MSR.2010.5463284"},{"key":"35_CR20","doi-asserted-by":"crossref","unstructured":"Lamkanfi, A., Demeyer, S., Soetens, Q.D., Verdonck, T.: Comparing mining algorithms for predicting the severity of a reported bug. In: Proceedings of the 15th European Conference on Software Maintenance and Reengineering (CSMR), pp. 249\u2013258 (2011)","DOI":"10.1109\/CSMR.2011.31"},{"key":"35_CR21","unstructured":"Mozilla Foundation Security Advisories (MFSA). https:\/\/www.mozilla.org\/en-US\/security\/advisories\/. Accessed 18 Apr 2018"},{"key":"35_CR22","unstructured":"Natural Language Toolkit. http:\/\/www.nltk.org\/. Accessed 18 Apr 2018"},{"key":"35_CR23","doi-asserted-by":"crossref","unstructured":"Ohira, M., Kashiwa, Y., Yamatani, Y., Yoshiyuki, H.: A dataset of high impact bugs: manually-classified issue reports. In: Proceedings of the 12th IEEE\/ACM Working Conference on Mining Software Repositories (MSR), pp. 518\u2013521 (2015)","DOI":"10.1109\/MSR.2015.78"},{"key":"35_CR24","doi-asserted-by":"crossref","unstructured":"Pham, N.H., Nguyen, T.T., Nguyen, H.A., Nguyen, T.N.: Detection of recurring software vulnerabilities. In: Proceedings of the IEEE\/ACM International Conference on Automated Software Engineering (ASE), pp. 447\u2013456. ACM (2010)","DOI":"10.1145\/1858996.1859089"},{"key":"35_CR25","doi-asserted-by":"crossref","unstructured":"Prifti, T., Banerjee, S., Cukic, B.: Detecting bug duplicate reports through local references. In: Proceedings of the 7th International Conference on Predictive Models in Software Engineering (PROMISE), pp. 1\u20139 (2011)","DOI":"10.1145\/2020390.2020398"},{"key":"35_CR26","unstructured":"Rough Auditing Tool for Security (RATS). https:\/\/code.google.com\/archive\/p\/rough-auditing-tool-for-security\/. Accessed 18 Apr 2018"},{"key":"35_CR27","doi-asserted-by":"crossref","unstructured":"Runeson, P., Alexandersson, M., Nyholm, O.: Detection of duplicate defect reports using natural language processing. In: Proceedings of the 29th International Conference on Software Engineering (ICSE), pp. 499\u2013510 (2007)","DOI":"10.1109\/ICSE.2007.32"},{"key":"35_CR28","unstructured":"SAS Text Miner. http:\/\/support.sas.com\/software\/products\/txtminer\/. Accessed 18 Apr 2018"},{"key":"35_CR29","doi-asserted-by":"publisher","unstructured":"Schwartz, E.J., Avgerinos, T., Brumley, D.: All you ever wanted to know about dynamic taint analysis and forward symbolic execution (but might have been afraid to ask). In: Proceedings of the 31st IEEE Symposium on Security and Privacy (S&P), pp. 317\u2013331 (2010). https:\/\/doi.org\/10.1109\/SP.2010.26","DOI":"10.1109\/SP.2010.26"},{"key":"35_CR30","unstructured":"Scikit-learn. http:\/\/scikit-learn.org\/stable\/. Accessed 18 Apr 2018"},{"key":"35_CR31","doi-asserted-by":"crossref","unstructured":"Stephens, N., Grosen, J., Salls, C., Dutcher, A., Wang, R., Corbetta, J., Shoshitaishvili, Y., Kruegel, C., Vigna, G.: Driller: augmenting fuzzing through selective symbolic execution. In: Proceedings of the 23rd Network and Distributed Systems Security Symposium (NDSS), vol. 16, pp. 1\u201316 (2016)","DOI":"10.14722\/ndss.2016.23368"},{"issue":"5","key":"35_CR32","doi-asserted-by":"publisher","first-page":"1354","DOI":"10.1007\/s10664-014-9331-y","volume":"20","author":"Y Tian","year":"2015","unstructured":"Tian, Y., Lo, D., Xia, X., Sun, C.: Automated prediction of bug report priority using multi-factor analysis. Empir. Softw. Eng. (ESE) 20(5), 1354\u20131383 (2015)","journal-title":"Empir. Softw. Eng. (ESE)"},{"issue":"2","key":"35_CR33","doi-asserted-by":"publisher","first-page":"434","DOI":"10.1109\/TR.2013.2259203","volume":"62","author":"S Wang","year":"2013","unstructured":"Wang, S., Yao, X.: Using class imbalance learning for software defect prediction. IEEE Trans. Reliab. 62(2), 434\u2013443 (2013). https:\/\/doi.org\/10.1109\/TR.2013.2259203","journal-title":"IEEE Trans. Reliab."},{"key":"35_CR34","doi-asserted-by":"crossref","unstructured":"Wang, T., Wei, T., Gu, G., Zou, W.: TaintScope: a checksum-aware directed fuzzing tool for automatic software vulnerability detection. In: Proceedings of the 31st IEEE Symposium on Security and Privacy (S&P), pp. 497\u2013512. IEEE (2010)","DOI":"10.1109\/SP.2010.37"},{"key":"35_CR35","doi-asserted-by":"crossref","unstructured":"Wang, X., Zhang, L., Xie, T., Anvik, J., Sun, J.: An approach to detecting duplicate bug reports using natural language and execution information. In: Proceedings of the 30th ACM\/IEEE International Conference on Software Engineering (ICSE), pp. 461\u2013470 (2008)","DOI":"10.1145\/1368088.1368151"},{"key":"35_CR36","doi-asserted-by":"crossref","unstructured":"Wijayasekara, D., Manic, M., Mcqueen, M.: Vulnerability identification and classification via text mining bug databases. In: Proceedings of the 40th Annual Conference of the IEEE Industrial Electronics Society (IECON), pp. 3612\u20133618 (2014)","DOI":"10.1109\/IECON.2014.7049035"},{"key":"35_CR37","unstructured":"Word2vec. http:\/\/radimrehurek.com\/gensim\/models\/word2vec.html. Accessed 18 Apr 2018"},{"key":"35_CR38","doi-asserted-by":"crossref","unstructured":"Yamaguchi, F., Golde, N., Arp, D., Rieck, K.: Modeling and discovering vulnerabilities with code property graphs. In: Proceedings of the 35th IEEE Symposium on Security and Privacy (S&P), pp. 590\u2013604. IEEE (2014)","DOI":"10.1109\/SP.2014.44"},{"key":"35_CR39","doi-asserted-by":"crossref","unstructured":"Yang, X., Lo, D., Huang, Q., Xia, X., Sun, J.: Automated identification of high impact bug reports leveraging imbalanced learning strategies. In: Proceedings of the 40th IEEE Computer Software and Applications Conference (COMPSAC), pp. 227\u2013232 (2016)","DOI":"10.1109\/COMPSAC.2016.67"},{"key":"35_CR40","doi-asserted-by":"crossref","unstructured":"Zhou, Y., Sharma, A.: Automated identification of security issues from commit messages and bug reports. In: Proceedings of the 11th ACM Joint European Software Engineering Conference and Symposium on the Foundations of Software Engineering (ESEC\/FSE), pp. 914\u2013919 (2017)","DOI":"10.1145\/3106237.3117771"}],"container-title":["Lecture Notes in Computer Science","Information Security and Privacy"],"original-title":[],"language":"en","link":[{"URL":"https:\/\/link.springer.com\/content\/pdf\/10.1007\/978-3-319-93638-3_35","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2024,3,13]],"date-time":"2024-03-13T18:52:39Z","timestamp":1710355959000},"score":1,"resource":{"primary":{"URL":"https:\/\/link.springer.com\/10.1007\/978-3-319-93638-3_35"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2018]]},"ISBN":["9783319936376","9783319936383"],"references-count":40,"URL":"https:\/\/doi.org\/10.1007\/978-3-319-93638-3_35","relation":{},"ISSN":["0302-9743","1611-3349"],"issn-type":[{"value":"0302-9743","type":"print"},{"value":"1611-3349","type":"electronic"}],"subject":[],"published":{"date-parts":[[2018]]},"assertion":[{"value":"13 June 2018","order":1,"name":"first_online","label":"First Online","group":{"name":"ChapterHistory","label":"Chapter History"}},{"value":"ACISP","order":1,"name":"conference_acronym","label":"Conference Acronym","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"Australasian Conference on Information Security and Privacy","order":2,"name":"conference_name","label":"Conference Name","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"Wollongong, NSW","order":3,"name":"conference_city","label":"Conference City","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"Australia","order":4,"name":"conference_country","label":"Conference Country","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"2018","order":5,"name":"conference_year","label":"Conference Year","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"11 July 2018","order":7,"name":"conference_start_date","label":"Conference Start Date","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"13 July 2018","order":8,"name":"conference_end_date","label":"Conference End Date","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"23","order":9,"name":"conference_number","label":"Conference Number","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"acisp2018","order":10,"name":"conference_id","label":"Conference ID","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"https:\/\/ssl.informatics.uow.edu.au\/acisp2018\/","order":11,"name":"conference_url","label":"Conference URL","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"Double-blind","order":1,"name":"type","label":"Type","group":{"name":"ConfEventPeerReviewInformation","label":"Peer Review Information (provided by the conference organizers)"}},{"value":"EasyChair","order":2,"name":"conference_management_system","label":"Conference Management System","group":{"name":"ConfEventPeerReviewInformation","label":"Peer Review Information (provided by the conference organizers)"}},{"value":"136","order":3,"name":"number_of_submissions_sent_for_review","label":"Number of Submissions Sent for Review","group":{"name":"ConfEventPeerReviewInformation","label":"Peer Review Information (provided by the conference organizers)"}},{"value":"41","order":4,"name":"number_of_full_papers_accepted","label":"Number of Full Papers Accepted","group":{"name":"ConfEventPeerReviewInformation","label":"Peer Review Information (provided by the conference organizers)"}},{"value":"10","order":5,"name":"number_of_short_papers_accepted","label":"Number of Short Papers Accepted","group":{"name":"ConfEventPeerReviewInformation","label":"Peer Review Information (provided by the conference organizers)"}},{"value":"30% - The value is computed by the equation \"Number of Full Papers Accepted \/ Number of Submissions Sent for Review * 100\" and then rounded to a whole number.","order":6,"name":"acceptance_rate_of_full_papers","label":"Acceptance Rate of Full Papers","group":{"name":"ConfEventPeerReviewInformation","label":"Peer Review Information (provided by the conference organizers)"}},{"value":"2.8","order":7,"name":"average_number_of_reviews_per_paper","label":"Average Number of Reviews per Paper","group":{"name":"ConfEventPeerReviewInformation","label":"Peer Review Information (provided by the conference organizers)"}},{"value":"6.8","order":8,"name":"average_number_of_papers_per_reviewer","label":"Average Number of Papers per Reviewer","group":{"name":"ConfEventPeerReviewInformation","label":"Peer Review Information (provided by the conference organizers)"}},{"value":"Yes","order":9,"name":"external_reviewers_involved","label":"External Reviewers Involved","group":{"name":"ConfEventPeerReviewInformation","label":"Peer Review Information (provided by the conference organizers)"}}]}}