{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,7,31]],"date-time":"2026-07-31T01:27:48Z","timestamp":1785461268400,"version":"3.56.0"},"reference-count":113,"publisher":"Institute of Electrical and Electronics Engineers (IEEE)","license":[{"start":{"date-parts":[[2021,1,1]],"date-time":"2021-01-01T00:00:00Z","timestamp":1609459200000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/creativecommons.org\/licenses\/by\/4.0\/legalcode"},{"start":{"date-parts":[[2021,1,1]],"date-time":"2021-01-01T00:00:00Z","timestamp":1609459200000},"content-version":"am","delay-in-days":0,"URL":"https:\/\/creativecommons.org\/licenses\/by\/4.0\/legalcode"}],"funder":[{"DOI":"10.13039\/100000001","name":"National Science Foundation","doi-asserted-by":"publisher","award":["2026869"],"award-info":[{"award-number":["2026869"]}],"id":[{"id":"10.13039\/100000001","id-type":"DOI","asserted-by":"publisher"}]},{"name":"Cybersecurity Education, Research and Outreach Center (CEROC), Tennessee Technological University"}],"content-domain":{"domain":[],"crossmark-restriction":false},"short-container-title":["IEEE Access"],"published-print":{"date-parts":[[2021]]},"DOI":"10.1109\/access.2021.3058067","type":"journal-article","created":{"date-parts":[[2021,2,10]],"date-time":"2021-02-10T09:40:34Z","timestamp":1612950034000},"page":"28471-28495","source":"Crossref","is-referenced-by-count":14,"title":["Security Bug Report Usage for Software Vulnerability Research: A Systematic Mapping Study"],"prefix":"10.1109","volume":"9","author":[{"ORCID":"https:\/\/orcid.org\/0000-0002-0261-2196","authenticated-orcid":false,"given":"Farzana Ahamed","family":"Bhuiyan","sequence":"first","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-2345-0878","authenticated-orcid":false,"given":"Md Bulbul","family":"Sharif","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-5056-757X","authenticated-orcid":false,"given":"Akond","family":"Rahman","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]}],"member":"263","reference":[{"key":"ref39","author":"spencer","year":"2009","journal-title":"Card Sorting Designing Usable Categories"},{"key":"ref38","doi-asserted-by":"publisher","DOI":"10.1016\/j.jss.2019.110456"},{"key":"ref33","author":"yin","year":"2017","journal-title":"Case study research and applications Design and methods"},{"key":"ref32","doi-asserted-by":"publisher","DOI":"10.2307\/2529310"},{"key":"ref31","doi-asserted-by":"publisher","DOI":"10.1177\/001316446002000104"},{"key":"ref30","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-642-29044-2"},{"key":"ref37","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-319-93638-3_35"},{"key":"ref36","doi-asserted-by":"publisher","DOI":"10.1109\/TSE.2002.1027796"},{"key":"ref35","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-319-72465-2_14"},{"key":"ref34","doi-asserted-by":"publisher","DOI":"10.1109\/ICMLC.2010.5580771"},{"key":"ref28","doi-asserted-by":"publisher","DOI":"10.1016\/j.infsof.2010.12.010"},{"key":"ref27","doi-asserted-by":"publisher","DOI":"10.1073\/pnas.0710375105"},{"key":"ref29","doi-asserted-by":"publisher","DOI":"10.1016\/j.respol.2009.04.002"},{"key":"ref20","doi-asserted-by":"publisher","DOI":"10.1109\/SOCA.2016.15"},{"key":"ref22","doi-asserted-by":"publisher","DOI":"10.5121\/csit.2017.71011"},{"key":"ref21","doi-asserted-by":"publisher","DOI":"10.5220\/0005785501370146"},{"key":"ref24","article-title":"Guidelines for systematic mapping studies in security engineering","author":"felderer","year":"2018","journal-title":"arXiv 1801 06810"},{"key":"ref23","doi-asserted-by":"publisher","DOI":"10.1016\/j.tele.2018.10.004"},{"key":"ref101","doi-asserted-by":"publisher","DOI":"10.3115\/1118108.1118117"},{"key":"ref26","doi-asserted-by":"publisher","DOI":"10.1521\/suli.31.4.367.22048"},{"key":"ref100","doi-asserted-by":"publisher","DOI":"10.1109\/TSE.2007.70721"},{"key":"ref25","doi-asserted-by":"publisher","DOI":"10.1007\/s10664-016-9492-y"},{"key":"ref50","doi-asserted-by":"publisher","DOI":"10.1145\/1985441.1985466"},{"key":"ref51","doi-asserted-by":"publisher","DOI":"10.1145\/2597073.2597117"},{"key":"ref59","doi-asserted-by":"publisher","DOI":"10.1145\/1315245.1315311"},{"key":"ref58","doi-asserted-by":"publisher","DOI":"10.1016\/j.infsof.2020.106314"},{"key":"ref57","article-title":"Better security bug report classification via hyperparameter optimization","author":"shu","year":"2019","journal-title":"arXiv 1905 06872"},{"key":"ref56","doi-asserted-by":"publisher","DOI":"10.1109\/ICROIT.2014.6798341"},{"key":"ref55","doi-asserted-by":"publisher","DOI":"10.1016\/j.cose.2006.10.002"},{"key":"ref54","doi-asserted-by":"publisher","DOI":"10.1007\/s10664-011-9190-8"},{"key":"ref53","article-title":"An empirical study on vulnerability prediction of open-source software releases","author":"jimenez","year":"2019","journal-title":"Proc Joint Eur Softw Eng Conf Symp Found Softw Eng (ESEC\/FSE)"},{"key":"ref52","doi-asserted-by":"publisher","DOI":"10.1109\/TDSC.2019.2939132"},{"key":"ref40","doi-asserted-by":"publisher","DOI":"10.1109\/QRS.2018.00047"},{"key":"ref4","doi-asserted-by":"publisher","DOI":"10.1016\/j.jss.2020.110616"},{"key":"ref3","first-page":"2071","article-title":"A survey-vulnerability classification of bug reports using multiple machine learning approach","volume":"5","author":"patel","year":"2016","journal-title":"COMPUSOFT"},{"key":"ref6","doi-asserted-by":"publisher","DOI":"10.1016\/j.cose.2020.101751"},{"key":"ref5","doi-asserted-by":"publisher","DOI":"10.1007\/s11219-019-09490-1"},{"key":"ref8","article-title":"Guidelines for performing systematic literature reviews in software engineering","author":"kitchenham","year":"2007"},{"key":"ref49","doi-asserted-by":"publisher","DOI":"10.1109\/MSR.2010.5463340"},{"key":"ref7","doi-asserted-by":"publisher","DOI":"10.1016\/j.infsof.2015.03.007"},{"key":"ref9","doi-asserted-by":"publisher","DOI":"10.1109\/TSE.2012.76"},{"key":"ref46","doi-asserted-by":"publisher","DOI":"10.1145\/3106237.3117771"},{"key":"ref45","doi-asserted-by":"publisher","DOI":"10.1109\/ISSRE.2017.42"},{"key":"ref48","doi-asserted-by":"publisher","DOI":"10.1109\/TSE.2017.2787653"},{"key":"ref47","doi-asserted-by":"publisher","DOI":"10.1016\/j.jss.2019.06.001"},{"key":"ref42","doi-asserted-by":"publisher","DOI":"10.1109\/TSE.2010.81"},{"key":"ref41","doi-asserted-by":"publisher","DOI":"10.1016\/j.infsof.2019.106204"},{"key":"ref44","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-642-23088-2_15"},{"key":"ref43","doi-asserted-by":"publisher","DOI":"10.1145\/3379597.3387461"},{"key":"ref73","doi-asserted-by":"publisher","DOI":"10.1109\/ICECCS.2015.15"},{"key":"ref72","first-page":"887","article-title":"Understanding and securing device vulnerabilities through automated bug report analysis","author":"feng","year":"2019","journal-title":"Proc 28th USENIX Conf Secur Symp (SEC)"},{"key":"ref71","doi-asserted-by":"publisher","DOI":"10.1109\/THS.2017.7943493"},{"key":"ref70","article-title":"Vulnerability description ontology (VDO): A framework for characterizing vulnerabilities","author":"booth","year":"2016"},{"key":"ref76","year":"2020","journal-title":"Github"},{"key":"ref77","year":"2018","journal-title":"Comparison of Top Bug Tracking Tools"},{"key":"ref74","doi-asserted-by":"publisher","DOI":"10.1109\/ICST.2010.32"},{"key":"ref75","doi-asserted-by":"publisher","DOI":"10.1016\/0005-2795(75)90109-9"},{"key":"ref78","year":"2017","journal-title":"Custom"},{"key":"ref79","year":"2020","journal-title":"Bugzilla"},{"key":"ref60","doi-asserted-by":"publisher","DOI":"10.1109\/SMARTCOMP.2019.00026"},{"key":"ref62","doi-asserted-by":"publisher","DOI":"10.1109\/ICSME.2017.52"},{"key":"ref61","doi-asserted-by":"publisher","DOI":"10.1109\/TSE.2019.2949275"},{"key":"ref63","doi-asserted-by":"publisher","DOI":"10.1145\/1497577.1497582"},{"key":"ref64","doi-asserted-by":"publisher","DOI":"10.1109\/ACCESS.2019.2900462"},{"key":"ref65","first-page":"3","article-title":"Automatic vulnerability classification using machine learning","author":"gawron","year":"2017","journal-title":"Proc Int Conf Risks Secur Internet Syst"},{"key":"ref66","doi-asserted-by":"publisher","DOI":"10.1109\/APSEC.2018.00049"},{"key":"ref67","doi-asserted-by":"publisher","DOI":"10.1109\/ISDFS49300.2020.9116209"},{"key":"ref68","year":"2020","journal-title":"Common Weakness Enumeration"},{"key":"ref2","doi-asserted-by":"publisher","DOI":"10.1109\/IECON.2014.7049035"},{"key":"ref69","doi-asserted-by":"publisher","DOI":"10.1109\/ICSME.2019.00023"},{"key":"ref1","year":"2019","journal-title":"PC Diagnostic & System Information Solutions Pre-Installed on PC\/Android Systems"},{"key":"ref109","first-page":"1281","article-title":"With great training comes great vulnerability: Practical attacks against transfer learning","author":"wang","year":"2018","journal-title":"Proc 27th USENIX Secur Symp (USENIX Secur )"},{"key":"ref95","doi-asserted-by":"crossref","first-page":"278","DOI":"10.1109\/ICDAR.1995.598994","article-title":"Random decision forests","volume":"1","author":"ho","year":"1995","journal-title":"Proc 3rd Int Conf Document Anal Recognition"},{"key":"ref108","first-page":"1077","article-title":"Efficient transfer learning method for automatic hyperparameter tuning","author":"yogatama","year":"2014","journal-title":"Proc Artif Intell Statist"},{"key":"ref94","doi-asserted-by":"publisher","DOI":"10.1007\/s10462-009-9124-7"},{"key":"ref107","first-page":"1","article-title":"Classification and feature selection techniques in data mining","volume":"1","author":"beniwal","year":"2012","journal-title":"Int J Eng Res Technol"},{"key":"ref93","doi-asserted-by":"publisher","DOI":"10.1016\/B978-0-12-741252-8.50010-8"},{"key":"ref106","doi-asserted-by":"publisher","DOI":"10.1109\/TSE.2017.2755013"},{"key":"ref92","doi-asserted-by":"publisher","DOI":"10.1017\/CBO9781139165495"},{"key":"ref105","doi-asserted-by":"publisher","DOI":"10.1109\/ICST.2013.24"},{"key":"ref91","author":"joyce","year":"2003","journal-title":"Bayes’s Theorem"},{"key":"ref104","doi-asserted-by":"publisher","DOI":"10.3233\/IDA-2002-6504"},{"key":"ref90","author":"hastie","year":"2009","journal-title":"The Elements of Statistical Learning Data Mining Inference and Prediction"},{"key":"ref103","doi-asserted-by":"publisher","DOI":"10.1145\/2746194.2746198"},{"key":"ref102","first-page":"1289","article-title":"An extensive empirical study of feature selection metrics for text classification","volume":"3","author":"forman","year":"2003","journal-title":"J Mach Learn Res"},{"key":"ref111","doi-asserted-by":"publisher","DOI":"10.1016\/j.infsof.2011.09.007"},{"key":"ref112","doi-asserted-by":"publisher","DOI":"10.1016\/j.neucom.2018.12.091"},{"key":"ref110","doi-asserted-by":"publisher","DOI":"10.1109\/TKDE.2009.191"},{"key":"ref98","doi-asserted-by":"publisher","DOI":"10.1145\/354756.354805"},{"key":"ref99","article-title":"Active learning literature survey","author":"settles","year":"2009"},{"key":"ref96","doi-asserted-by":"publisher","DOI":"10.1109\/TDSC.2014.2373377"},{"key":"ref97","doi-asserted-by":"publisher","DOI":"10.1109\/TSMCA.2007.904745"},{"key":"ref10","author":"salda\u00f1a","year":"2015","journal-title":"The Coding Manual for Qualitative Researchers"},{"key":"ref11","author":"akhgari","year":"2016","journal-title":"Bug 1284372 (CVE-2016-5267)"},{"key":"ref12","doi-asserted-by":"publisher","DOI":"10.1016\/j.csi.2016.10.001"},{"key":"ref13","author":"morris","year":"2016","journal-title":"Infrastructure As Code Managing Servers in the Cloud"},{"key":"ref14","doi-asserted-by":"publisher","DOI":"10.1016\/j.infsof.2018.12.004"},{"key":"ref15","doi-asserted-by":"publisher","DOI":"10.1016\/j.jss.2016.03.065"},{"key":"ref16","doi-asserted-by":"publisher","DOI":"10.1016\/j.infsof.2010.12.011"},{"key":"ref82","author":"manning","year":"1999","journal-title":"Foundations of Statistical Natural Language Processing"},{"key":"ref17","doi-asserted-by":"publisher","DOI":"10.1016\/j.infsof.2018.05.011"},{"key":"ref81","doi-asserted-by":"publisher","DOI":"10.1007\/b106453"},{"key":"ref18","doi-asserted-by":"publisher","DOI":"10.1145\/3339252.3339263"},{"key":"ref84","article-title":"Word2vec explained: Deriving Mikolov et al.’s negative-sampling word-embedding method","author":"goldberg","year":"2014","journal-title":"arXiv 1402 3722"},{"key":"ref19","doi-asserted-by":"publisher","DOI":"10.1016\/j.jss.2018.01.036"},{"key":"ref83","doi-asserted-by":"publisher","DOI":"10.1017\/CBO9781139058452"},{"key":"ref113","doi-asserted-by":"publisher","DOI":"10.1109\/ACCESS.2018.2890733"},{"key":"ref80","doi-asserted-by":"publisher","DOI":"10.1145\/1653662.1653717"},{"key":"ref89","doi-asserted-by":"crossref","first-page":"175","DOI":"10.1080\/00031305.1992.10475879","article-title":"An introduction to kernel and nearest-neighbor nonparametric regression","volume":"46","author":"altman","year":"1992","journal-title":"Amer Statistician"},{"key":"ref85","doi-asserted-by":"publisher","DOI":"10.1108\/eb046814"},{"key":"ref86","doi-asserted-by":"publisher","DOI":"10.1016\/j.ipm.2004.08.006"},{"key":"ref87","author":"russell","year":"2002","journal-title":"Artificial Intelligence A Modern Approach"},{"key":"ref88","author":"breiman","year":"1984","journal-title":"Classification and Regression Trees"}],"container-title":["IEEE Access"],"original-title":[],"link":[{"URL":"https:\/\/ieeexplore.ieee.org\/ielam\/6287639\/9312710\/9350573-aam.pdf","content-type":"application\/pdf","content-version":"am","intended-application":"syndication"},{"URL":"http:\/\/xplorestaging.ieee.org\/ielx7\/6287639\/9312710\/09350573.pdf?arnumber=9350573","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2024,8,23]],"date-time":"2024-08-23T23:50:03Z","timestamp":1724457003000},"score":1,"resource":{"primary":{"URL":"https:\/\/ieeexplore.ieee.org\/document\/9350573\/"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2021]]},"references-count":113,"URL":"https:\/\/doi.org\/10.1109\/access.2021.3058067","relation":{},"ISSN":["2169-3536"],"issn-type":[{"value":"2169-3536","type":"electronic"}],"subject":[],"published":{"date-parts":[[2021]]}}}