{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,5,20]],"date-time":"2026-05-20T22:38:08Z","timestamp":1779316688033,"version":"3.51.4"},"reference-count":27,"publisher":"Springer Science and Business Media LLC","issue":"1","license":[{"start":{"date-parts":[[2020,9,12]],"date-time":"2020-09-12T00:00:00Z","timestamp":1599868800000},"content-version":"tdm","delay-in-days":0,"URL":"https:\/\/www.springer.com\/tdm"},{"start":{"date-parts":[[2020,9,12]],"date-time":"2020-09-12T00:00:00Z","timestamp":1599868800000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/www.springer.com\/tdm"}],"content-domain":{"domain":["link.springer.com"],"crossmark-restriction":false},"short-container-title":["Int J Syst Assur Eng Manag"],"published-print":{"date-parts":[[2021,2]]},"DOI":"10.1007\/s13198-020-01036-0","type":"journal-article","created":{"date-parts":[[2020,9,12]],"date-time":"2020-09-12T13:02:32Z","timestamp":1599915752000},"page":"65-76","update-policy":"https:\/\/doi.org\/10.1007\/springer_crossmark_policy","source":"Crossref","is-referenced-by-count":33,"title":["Extracting rules for vulnerabilities detection with static metrics using machine learning"],"prefix":"10.1007","volume":"12","author":[{"given":"Aakanshi","family":"Gupta","sequence":"first","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Bharti","family":"Suri","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-2996-7181","authenticated-orcid":false,"given":"Vijay","family":"Kumar","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Pragyashree","family":"Jain","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]}],"member":"297","published-online":{"date-parts":[[2020,9,12]]},"reference":[{"key":"1036_CR1","doi-asserted-by":"crossref","unstructured":"Alves H, Fonseca B, Antunes N (2016) Experimenting machine learning techniques to predict vulnerabilities. In: 2016 Seventh Latin-American symposium on dependable computing (LADC), pp 151\u2013156. IEEE","DOI":"10.1109\/LADC.2016.32"},{"issue":"4","key":"1036_CR2","first-page":"288","volume":"2","author":"N Bhatt","year":"2017","unstructured":"Bhatt N, Anand A, Yadavalli VSS, Kumar V (2017) Modeling and characterizing software vulnerabilities. Int J Math Eng Manag Sci 2(4):288\u2013299","journal-title":"Int J Math Eng Manag Sci"},{"issue":"3","key":"1036_CR3","doi-asserted-by":"publisher","first-page":"294","DOI":"10.1016\/j.sysarc.2010.06.003","volume":"57","author":"I Chowdhury","year":"2011","unstructured":"Chowdhury I, Zulkernine M (2011) Using complexity, coupling, and cohesion metrics as early indicators of vulnerabilities. J Syst Archit 57(3):294\u2013313","journal-title":"J Syst Archit"},{"issue":"10","key":"1036_CR4","doi-asserted-by":"publisher","first-page":"1469","DOI":"10.1016\/j.infsof.2009.04.013","volume":"51","author":"M Di Penta","year":"2009","unstructured":"Di Penta M, Cerulo L, Aversano L (2009) The life and death of statically detected vulnerabilities: an empirical study. Inf Softw Technol 51(10):1469\u20131484","journal-title":"Inf Softw Technol"},{"issue":"3","key":"1036_CR5","doi-asserted-by":"publisher","first-page":"1143","DOI":"10.1007\/s10664-015-9378-4","volume":"21","author":"FA Fontana","year":"2016","unstructured":"Fontana FA, M\u00e4ntyl\u00e4 MV, Zanoni M, Marino A (2016) Comparing and experimenting machine learning techniques for code smell detection. Empir Softw Eng 21(3):1143\u20131191","journal-title":"Empir Softw Eng"},{"issue":"1","key":"1036_CR6","doi-asserted-by":"publisher","first-page":"10","DOI":"10.1145\/1656274.1656278","volume":"11","author":"M Hall","year":"2009","unstructured":"Hall M, Frank E, Holmes G, Pfahringer B, Reutemann P, Witten IH (2009) The weka data mining software: an update. ACM SIGKDD Explor Newslett 11(1):10\u201318","journal-title":"ACM SIGKDD Explor Newslett"},{"key":"1036_CR7","doi-asserted-by":"crossref","unstructured":"Islam MR, Zibran MF (2016) A comparative study on vulnerabilities in categories of clones and non-cloned code. In: 2016 IEEE 23rd international conference on software analysis, evolution, and reengineering (SANER), vol 3, pp 8\u201314. IEEE","DOI":"10.1109\/SANER.2016.90"},{"key":"1036_CR8","doi-asserted-by":"publisher","first-page":"1640013","DOI":"10.1142\/S0218539316400131","volume":"23","author":"Y Kansal","year":"2016","unstructured":"Kansal Y, Kumar D, Kapur PK (2016) Vulnerability patch modeling. Int J Reliab Qual Saf Eng 23:1640013","journal-title":"Int J Reliab Qual Saf Eng"},{"key":"1036_CR9","unstructured":"Kapur PK, Sachdeva N, Khatri SK (2015) Vulnerability discovery modeling. In: International conference on quality, reliability, infocom technology and industrial technology management, pp 34\u201354"},{"key":"1036_CR10","doi-asserted-by":"crossref","unstructured":"Kindy DA, Pathan A-SK (2011) A survey on SQL injection: vulnerabilities, attacks, and prevention techniques. In: 2011 IEEE 15th international symposium on consumer electronics (ISCE), pp 468\u2013471. IEEE","DOI":"10.1109\/ISCE.2011.5973873"},{"key":"1036_CR11","doi-asserted-by":"crossref","unstructured":"Kumar S, Pal SK, Singh R (2016) Intelligent energy conservation: indoor temperature forecasting with extreme learning machine. In: Proceedings of intelligent systems technologies and applications 2016, vol 2, pp 977\u2013988. Springer Switzerland","DOI":"10.1007\/978-3-319-47952-1_78"},{"key":"1036_CR12","doi-asserted-by":"publisher","first-page":"275","DOI":"10.1016\/j.enbuild.2018.06.056","volume":"176","author":"S Kumar","year":"2018","unstructured":"Kumar S, Pal SK, Singh R (2018) A novel method based on extreme learning machine to predict heating and cooling load through design and structural attributes. Energy Build 176:275\u2013286","journal-title":"Energy Build"},{"key":"1036_CR13","doi-asserted-by":"publisher","first-page":"101601","DOI":"10.1016\/j.scs.2019.101601","volume":"49","author":"S Kumar","year":"2019","unstructured":"Kumar S, Pal SK, Singh R (2019) A novel hybrid model based on particle swarm optimisation and extreme learning machine for short-term temperature prediction using ambient sensors. Sustain Cities Soc 49:101601","journal-title":"Sustain Cities Soc"},{"key":"1036_CR14","doi-asserted-by":"publisher","first-page":"829","DOI":"10.3758\/BF03196342","volume":"9","author":"BC Love","year":"2002","unstructured":"Love BC (2002) Comparing supervised and unsupervised category learning. Psychon Bull Rev 9:829\u2013835","journal-title":"Psychon Bull Rev"},{"key":"1036_CR15","unstructured":"Mahmood R, Mahmoud QH (2018) Evaluation of static analysis tools for finding vulunerbailities in java and c\/c++ source code. arXiv preprint arXiv:1805.09040"},{"key":"1036_CR16","doi-asserted-by":"crossref","unstructured":"Medeiros I, Neves NF, Correia M (2014) Automatic detection and correction of web application vulnerabilities using data mining to predict false positives. In: Proceedings of the 23rd international conference on world wide web, pp 63\u201374. ACM","DOI":"10.1145\/2566486.2568024"},{"key":"1036_CR17","unstructured":"Miguel MA (2018) Vulnerabilities reached a historic peak. https:\/\/www.welivesecurity.com\/2018\/02\/05\/vulnerabilities-reached-historic-peak-2017\/"},{"key":"1036_CR18","doi-asserted-by":"crossref","unstructured":"Moser A, Kruegel C, Kirda E (2007) Limits of static analysis for malware detection. In: Twenty-third annual computer security applications conference (ACSAC 2007), pp 421\u2013430. IEEE","DOI":"10.1109\/ACSAC.2007.4413008"},{"issue":"9","key":"1036_CR19","first-page":"34","volume":"52","author":"C Nasa","year":"2012","unstructured":"Nasa C, Suman S (2012) Evaluation of different classification techniques for web data. Int J Comput Appl 52(9):34\u201340","journal-title":"Int J Comput Appl"},{"key":"1036_CR20","doi-asserted-by":"crossref","unstructured":"Russell R, Kim L, Hamilton L, Lazovich T, Harer J, Ozdemir O, Ellingwood P, McConley M (2018) Automated vulnerability detection in source code using deep representation learning. In: 2018 17th IEEE international conference on machine learning and applications (ICMLA), pp 757\u2013762. IEEE","DOI":"10.1109\/ICMLA.2018.00120"},{"key":"1036_CR21","unstructured":"Rutar N, Almazan CB, Foster JS (2004) A comparison of bug finding tools for java. In: 15th International symposium on software reliability engineering, pp 245\u2013256. IEEE"},{"issue":"10","key":"1036_CR22","doi-asserted-by":"publisher","first-page":"993","DOI":"10.1109\/TSE.2014.2340398","volume":"40","author":"R Scandariato","year":"2014","unstructured":"Scandariato R, Walden J, Hovsepyan A, Joosen W (2014) Predicting vulnerable software components via text mining. IEEE Trans Softw Eng 40(10):993\u20131006","journal-title":"IEEE Trans Softw Eng"},{"key":"1036_CR23","doi-asserted-by":"crossref","unstructured":"Shar LK, Tan HBK (2012) Predicting common web application vulnerabilities from input validation and sanitization code patterns. In 2012 Proceedings of the 27th IEEE\/ACM international conference on automated software engineering, pp 310\u2013313. IEEE","DOI":"10.1145\/2351676.2351733"},{"issue":"6","key":"1036_CR24","doi-asserted-by":"publisher","first-page":"688","DOI":"10.1109\/TDSC.2014.2373377","volume":"12","author":"LK Shar","year":"2015","unstructured":"Shar LK, Briand LC, Tan HBK (2015) Web application vulnerability prediction using hybrid program analysis and machine learning. IEEE Trans Dependable Secure Comput 12(6):688\u2013707","journal-title":"IEEE Trans Dependable Secure Comput"},{"issue":"6","key":"1036_CR25","doi-asserted-by":"publisher","first-page":"772","DOI":"10.1109\/TSE.2010.81","volume":"37","author":"Y Shin","year":"2011","unstructured":"Shin Y, Meneely A, Williams L, Osborne JA (2011) Evaluating complexity, code churn, and developer activity metrics as indicators of software vulnerabilities. IEEE Trans Softw Eng 37(6):772\u2013787","journal-title":"IEEE Trans Softw Eng"},{"key":"1036_CR26","doi-asserted-by":"publisher","first-page":"8995","DOI":"10.1029\/JC090iC05p08995","volume":"90","author":"CJ Willmott","year":"1985","unstructured":"Willmott CJ, Ackleson SG, Davis RE, Feddema JJ, Klink KM, Legates DR, O\u2019donnell J, Rowe CM (1985) Statistics for the evaluation and comparison of models. J Geophys Res Oceans 90:8995\u20139005","journal-title":"J Geophys Res Oceans"},{"key":"1036_CR27","doi-asserted-by":"crossref","unstructured":"Winkler I, Gomes AT (2017) Chapter 5-how to hack computers. Adv Persistent Secur J","DOI":"10.1016\/B978-0-12-809316-0.00005-1"}],"container-title":["International Journal of System Assurance Engineering and Management"],"original-title":[],"language":"en","link":[{"URL":"https:\/\/link.springer.com\/content\/pdf\/10.1007\/s13198-020-01036-0.pdf","content-type":"application\/pdf","content-version":"vor","intended-application":"text-mining"},{"URL":"https:\/\/link.springer.com\/article\/10.1007\/s13198-020-01036-0\/fulltext.html","content-type":"text\/html","content-version":"vor","intended-application":"text-mining"},{"URL":"https:\/\/link.springer.com\/content\/pdf\/10.1007\/s13198-020-01036-0.pdf","content-type":"application\/pdf","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2021,9,12]],"date-time":"2021-09-12T00:33:25Z","timestamp":1631406805000},"score":1,"resource":{"primary":{"URL":"https:\/\/link.springer.com\/10.1007\/s13198-020-01036-0"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2020,9,12]]},"references-count":27,"journal-issue":{"issue":"1","published-print":{"date-parts":[[2021,2]]}},"alternative-id":["1036"],"URL":"https:\/\/doi.org\/10.1007\/s13198-020-01036-0","relation":{},"ISSN":["0975-6809","0976-4348"],"issn-type":[{"value":"0975-6809","type":"print"},{"value":"0976-4348","type":"electronic"}],"subject":[],"published":{"date-parts":[[2020,9,12]]},"assertion":[{"value":"6 January 2020","order":1,"name":"received","label":"Received","group":{"name":"ArticleHistory","label":"Article History"}},{"value":"29 May 2020","order":2,"name":"revised","label":"Revised","group":{"name":"ArticleHistory","label":"Article History"}},{"value":"12 September 2020","order":3,"name":"first_online","label":"First Online","group":{"name":"ArticleHistory","label":"Article History"}}]}}