{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2025,9,11]],"date-time":"2025-09-11T22:01:55Z","timestamp":1757628115685,"version":"3.44.0"},"reference-count":122,"publisher":"Institute of Electrical and Electronics Engineers (IEEE)","license":[{"start":{"date-parts":[[2025,1,1]],"date-time":"2025-01-01T00:00:00Z","timestamp":1735689600000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/creativecommons.org\/licenses\/by\/4.0\/legalcode"}],"content-domain":{"domain":[],"crossmark-restriction":false},"short-container-title":["IEEE Access"],"published-print":{"date-parts":[[2025]]},"DOI":"10.1109\/access.2025.3602480","type":"journal-article","created":{"date-parts":[[2025,8,25]],"date-time":"2025-08-25T20:47:29Z","timestamp":1756154849000},"page":"153896-153917","source":"Crossref","is-referenced-by-count":0,"title":["Predicting Vulnerable Code Changes Using Technical Debt Indicators"],"prefix":"10.1109","volume":"13","author":[{"ORCID":"https:\/\/orcid.org\/0000-0002-9941-2712","authenticated-orcid":false,"given":"Rusen Akkus","family":"Halepmollasi","sequence":"first","affiliation":[{"name":"Faculty of Computer and Informatics Engineering, Istanbul Technical University, Istanbul, Türkiye"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0000-0003-1859-7872","authenticated-orcid":false,"given":"Ayse","family":"Tosun","sequence":"additional","affiliation":[{"name":"Faculty of Computer and Informatics Engineering, Istanbul Technical University, Istanbul, Türkiye"}],"role":[{"role":"author","vocabulary":"crossref"}]}],"member":"263","reference":[{"key":"ref1","doi-asserted-by":"publisher","DOI":"10.1109\/MS.2021.3060552"},{"key":"ref2","doi-asserted-by":"publisher","DOI":"10.1145\/157710.157715"},{"issue":"4","key":"ref3","first-page":"110","article-title":"Managing technical debt in software engineering (dagstuhl seminar 16162)","volume-title":"Dagstuhl Rep.","volume":"6","author":"Avgeriou","year":"2016"},{"key":"ref4","doi-asserted-by":"publisher","DOI":"10.1145\/2347696.2347698"},{"key":"ref5","doi-asserted-by":"publisher","DOI":"10.1109\/secdev.2016.047"},{"volume-title":"ISO\/IEC 25010:2011","year":"2022","key":"ref6"},{"key":"ref7","doi-asserted-by":"publisher","DOI":"10.1109\/MSECP.2004.1281254"},{"key":"ref8","doi-asserted-by":"publisher","DOI":"10.1109\/ISSRE.2006.43"},{"key":"ref9","doi-asserted-by":"publisher","DOI":"10.1109\/MC.2008.514"},{"volume-title":"All-in-OneCISSP Exam Guide","year":"2016","author":"Harris","key":"ref10"},{"key":"ref11","doi-asserted-by":"publisher","DOI":"10.1109\/MSP.2004.55"},{"volume-title":"Common Weakness Enumeration","year":"2022","key":"ref12"},{"key":"ref13","doi-asserted-by":"publisher","DOI":"10.1109\/ESEM.2017.12"},{"key":"ref14","doi-asserted-by":"publisher","DOI":"10.1109\/BigDataSecurity-HPSC-IDS.2019.00013"},{"key":"ref15","doi-asserted-by":"publisher","DOI":"10.1109\/APSEC51365.2020.00011"},{"key":"ref16","doi-asserted-by":"publisher","DOI":"10.1145\/3549035.3561182"},{"key":"ref17","doi-asserted-by":"publisher","DOI":"10.1080\/17517575.2020.1824017"},{"key":"ref18","doi-asserted-by":"publisher","DOI":"10.1016\/j.infsof.2017.11.010"},{"article-title":"An empirical evaluation of the relationship between technical debt and software security","volume-title":"Proc. 9th Int. Conf. Inf. Soc. Technol.","author":"Siavvas","key":"ref19"},{"key":"ref20","doi-asserted-by":"publisher","DOI":"10.2478\/fcds-2022-0001"},{"article-title":"Can knowledge of technical debt help identify software vulnerabilities","volume-title":"Proc. 9th Workshop Cyber Secur. Experimentation Test","author":"Nord","key":"ref21"},{"key":"ref22","doi-asserted-by":"publisher","DOI":"10.1145\/3339252.3340338"},{"key":"ref23","doi-asserted-by":"publisher","DOI":"10.1109\/CyberSecPODS.2019.8885100"},{"key":"ref24","doi-asserted-by":"publisher","DOI":"10.1145\/1414004.1414065"},{"key":"ref25","doi-asserted-by":"publisher","DOI":"10.1109\/CSCI.2017.159"},{"key":"ref26","doi-asserted-by":"publisher","DOI":"10.1145\/3558489.3559069"},{"key":"ref27","doi-asserted-by":"publisher","DOI":"10.5220\/0011859300003464"},{"key":"ref28","doi-asserted-by":"publisher","DOI":"10.1145\/3510003.3510113"},{"volume-title":"Static Code Analyzer, PMD","year":"2023","key":"ref29"},{"key":"ref30","doi-asserted-by":"publisher","DOI":"10.1016\/j.jss.2014.12.027"},{"key":"ref31","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-642-29044-2"},{"key":"ref32","doi-asserted-by":"publisher","DOI":"10.1002\/smr.2547"},{"key":"ref33","doi-asserted-by":"publisher","DOI":"10.1007\/s10664-022-10269-5"},{"key":"ref34","doi-asserted-by":"publisher","DOI":"10.1145\/2507288.2507326"},{"key":"ref35","first-page":"327","article-title":"Got technical debt? Surfacing elusive technical debt in issue trackers","volume-title":"Proc. IEEE\/ACM 13th Work. Conf. Mining Softw. Repositories (MSR)","author":"Bellomo"},{"key":"ref36","first-page":"315","article-title":"A large-scale empirical study on self-admitted technical debt","volume-title":"Proc. IEEE\/ACM 13th Work. Conf. Mining Softw. Repositories (MSR)","author":"Bavota"},{"key":"ref37","article-title":"Detecting discussions of technical debt","author":"Ozkaya","year":"2022","journal-title":"arXiv:2201.12177"},{"key":"ref38","doi-asserted-by":"publisher","DOI":"10.1109\/MS.2016.13"},{"key":"ref39","article-title":"Towards measuring the impact of technical debt on lead time: An industrial case study","author":"Paudel","year":"2024","journal-title":"arXiv:2406.01578"},{"key":"ref40","doi-asserted-by":"publisher","DOI":"10.1145\/1985362.1985368"},{"key":"ref41","doi-asserted-by":"publisher","DOI":"10.1145\/1985362.1985364"},{"key":"ref42","doi-asserted-by":"publisher","DOI":"10.1109\/MTD.2012.6226000"},{"volume-title":"A Product for Clean Code, Sonarqube","year":"2023","key":"ref43"},{"volume-title":"Augmented Software Analytics, Squore","year":"2023","key":"ref44"},{"volume-title":"Code Security, Kiuwan","year":"2023","key":"ref45"},{"key":"ref46","doi-asserted-by":"publisher","DOI":"10.1147\/JRD.2012.2204512"},{"key":"ref47","doi-asserted-by":"publisher","DOI":"10.1016\/b978-0-12-410464-8.00006-4"},{"key":"ref48","doi-asserted-by":"publisher","DOI":"10.1109\/MTD.2012.6225993"},{"volume-title":"Refactoring: Improving the Design of Existing Code","year":"2018","author":"Fowler","key":"ref49"},{"key":"ref50","doi-asserted-by":"publisher","DOI":"10.1145\/2884781.2884822"},{"key":"ref51","doi-asserted-by":"publisher","DOI":"10.1109\/WCRE.2004.33"},{"key":"ref52","doi-asserted-by":"publisher","DOI":"10.1145\/1985793.1985850"},{"key":"ref53","first-page":"103","article-title":"What are the practices used by software practitioners on technical debt payment: Results from an international family of surveys","volume-title":"Proc. 3rd Int. Conf. Tech. Debt","author":"P\u00e9rez"},{"key":"ref54","doi-asserted-by":"publisher","DOI":"10.1016\/j.infsof.2021.106692"},{"key":"ref55","doi-asserted-by":"publisher","DOI":"10.1016\/j.jss.2020.110610"},{"key":"ref56","doi-asserted-by":"publisher","DOI":"10.1016\/j.jss.2015.05.024"},{"key":"ref57","doi-asserted-by":"publisher","DOI":"10.1016\/j.infsof.2021.106675"},{"key":"ref58","doi-asserted-by":"publisher","DOI":"10.1142\/S0218194021500017"},{"key":"ref59","doi-asserted-by":"publisher","DOI":"10.1109\/TSE.2011.41"},{"key":"ref60","doi-asserted-by":"publisher","DOI":"10.1145\/3242163.3242169"},{"key":"ref61","doi-asserted-by":"publisher","DOI":"10.1145\/2950290.2950305"},{"key":"ref62","doi-asserted-by":"publisher","DOI":"10.1016\/j.infsof.2009.04.002"},{"key":"ref63","doi-asserted-by":"publisher","DOI":"10.1145\/3131151.3131171"},{"key":"ref64","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-540-85279-7_20"},{"key":"ref65","doi-asserted-by":"publisher","DOI":"10.1109\/IWoR.2019.00017"},{"key":"ref66","doi-asserted-by":"publisher","DOI":"10.1002\/smr.2395"},{"key":"ref67","doi-asserted-by":"publisher","DOI":"10.1145\/3106237.3106259"},{"key":"ref68","doi-asserted-by":"publisher","DOI":"10.1002\/smr.2447"},{"key":"ref69","doi-asserted-by":"publisher","DOI":"10.1109\/SoutheastCon51012.2023.10115111"},{"key":"ref70","doi-asserted-by":"publisher","DOI":"10.1007\/s10515-024-00413-4"},{"key":"ref71","doi-asserted-by":"publisher","DOI":"10.1145\/3650212.3652136"},{"article-title":"Devign: Effective vulnerability identification by learning comprehensive program semantics via graph neural networks","volume-title":"Proc. Adv. Neural Inf. Process. Syst.","author":"Zhou","key":"ref72"},{"key":"ref73","doi-asserted-by":"publisher","DOI":"10.1145\/1853919.1853923"},{"key":"ref74","doi-asserted-by":"publisher","DOI":"10.1109\/SP.2014.44"},{"key":"ref75","doi-asserted-by":"publisher","DOI":"10.1145\/2420950.2421003"},{"key":"ref76","doi-asserted-by":"publisher","DOI":"10.1145\/2508859.2516665"},{"key":"ref77","doi-asserted-by":"publisher","DOI":"10.53846\/goediss-5356"},{"key":"ref78","doi-asserted-by":"publisher","DOI":"10.1016\/j.infsof.2022.106822"},{"key":"ref79","doi-asserted-by":"publisher","DOI":"10.1145\/3661167.3661281"},{"key":"ref80","doi-asserted-by":"publisher","DOI":"10.1016\/j.jss.2024.112031"},{"key":"ref81","doi-asserted-by":"publisher","DOI":"10.5753\/sbsi.2016.5969"},{"key":"ref82","first-page":"138","article-title":"A position study to investigate technical debt associated with security weaknesses","volume-title":"Proc. IEEE\/ACM Int. Conf. Tech. Debt (TechDebt)","author":"Izurieta"},{"key":"ref83","doi-asserted-by":"publisher","DOI":"10.1109\/TechDebt.2019.00012"},{"key":"ref84","doi-asserted-by":"publisher","DOI":"10.1109\/ICSE.2015.146"},{"volume-title":"Feature engineering for machine learning: Principles and techniques for data scientists","year":"2018","author":"Zheng","key":"ref85"},{"key":"ref86","doi-asserted-by":"publisher","DOI":"10.1109\/TSE.2022.3171202"},{"key":"ref87","article-title":"MSR mining challenge: The SmartSHARK repository mining data","author":"Trautsch","year":"2021","journal-title":"arXiv:2102.11540"},{"key":"ref88","doi-asserted-by":"publisher","DOI":"10.1109\/QRS-C.2019.00034"},{"key":"ref89","doi-asserted-by":"publisher","DOI":"10.1145\/3180155.3180206"},{"key":"ref90","doi-asserted-by":"publisher","DOI":"10.1145\/1101908.1101919"},{"key":"ref91","doi-asserted-by":"publisher","DOI":"10.1145\/1985441.1985452"},{"key":"ref92","doi-asserted-by":"publisher","DOI":"10.1145\/3059009.3059061"},{"key":"ref93","doi-asserted-by":"publisher","DOI":"10.18293\/SEKE2018-081"},{"key":"ref94","doi-asserted-by":"publisher","DOI":"10.1016\/j.infsof.2019.04.014"},{"key":"ref95","doi-asserted-by":"publisher","DOI":"10.1145\/3236024.3264598"},{"key":"ref96","doi-asserted-by":"publisher","DOI":"10.1109\/TSE.2021.3087402"},{"key":"ref97","doi-asserted-by":"publisher","DOI":"10.1109\/MSR.2019.00064"},{"key":"ref98","doi-asserted-by":"publisher","DOI":"10.1109\/TKDE.2008.239"},{"key":"ref99","doi-asserted-by":"publisher","DOI":"10.1613\/jair.1.11192"},{"key":"ref100","doi-asserted-by":"publisher","DOI":"10.1145\/1985362.1985365"},{"issue":"10","key":"ref101","first-page":"19","article-title":"Manage project portfolios more effectively by including software debt in the decision process","volume":"23","author":"Barton","year":"2010","journal-title":"Cutter IT J."},{"key":"ref102","doi-asserted-by":"publisher","DOI":"10.1109\/MTD.2013.6608674"},{"key":"ref103","doi-asserted-by":"publisher","DOI":"10.1186\/s13173-018-0083-1"},{"volume-title":"Refactoring: Improving the Design of Existing Code","year":"1999","author":"Fowler","key":"ref104"},{"key":"ref105","doi-asserted-by":"publisher","DOI":"10.1007\/s11219-013-9200-8"},{"key":"ref106","doi-asserted-by":"publisher","DOI":"10.1145\/3382494.3422172"},{"key":"ref107","doi-asserted-by":"publisher","DOI":"10.1016\/j.jvlc.2004.08.003"},{"key":"ref108","doi-asserted-by":"publisher","DOI":"10.1155\/2013\/869356"},{"key":"ref109","doi-asserted-by":"publisher","DOI":"10.1109\/MSR.2012.6224281"},{"key":"ref110","doi-asserted-by":"publisher","DOI":"10.1109\/SEAA51224.2020.00068"},{"key":"ref111","article-title":"Debt-prone bugs: Technical debt in software maintenance","author":"Xuan","year":"2017","journal-title":"arXiv:1704.04766"},{"volume-title":"Refactoring for Software Design Smells: Managing Technical Debt","year":"2014","author":"Suryanarayana","key":"ref112"},{"journal-title":"Vulnerability_prediction_github","author":"Halepmollasi","key":"ref113"},{"key":"ref114","first-page":"856","article-title":"Feature selection for high-dimensional data: A fast correlation-based filter solution","volume-title":"Proc. 20th Int. Conf. Mach. Learn. (ICML)","author":"Yu"},{"volume-title":"Principal Component Neural Networks: Theory and Applications","year":"1996","author":"Diamantaras","key":"ref115"},{"key":"ref116","doi-asserted-by":"publisher","DOI":"10.1016\/0165-1684(94)90029-9"},{"key":"ref117","doi-asserted-by":"publisher","DOI":"10.1023\/A:1018628609742"},{"key":"ref118","doi-asserted-by":"publisher","DOI":"10.32614\/cran.package.xgboost"},{"issue":"1","key":"ref119","first-page":"25","article-title":"Handling imbalanced datasets: A review","volume":"30","author":"Kotsiantis","year":"2006","journal-title":"GESTS Int. Trans. Comput. Sci. Eng."},{"key":"ref120","doi-asserted-by":"publisher","DOI":"10.5555\/1953048.2078195"},{"key":"ref121","doi-asserted-by":"publisher","DOI":"10.1109\/MITP.2023.3322410"},{"key":"ref122","doi-asserted-by":"publisher","DOI":"10.1109\/CompComm.2017.8322752"}],"container-title":["IEEE Access"],"original-title":[],"link":[{"URL":"http:\/\/xplorestaging.ieee.org\/ielx8\/6287639\/10820123\/11141431.pdf?arnumber=11141431","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2025,9,10]],"date-time":"2025-09-10T05:59:59Z","timestamp":1757483999000},"score":1,"resource":{"primary":{"URL":"https:\/\/ieeexplore.ieee.org\/document\/11141431\/"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2025]]},"references-count":122,"URL":"https:\/\/doi.org\/10.1109\/access.2025.3602480","relation":{},"ISSN":["2169-3536"],"issn-type":[{"type":"electronic","value":"2169-3536"}],"subject":[],"published":{"date-parts":[[2025]]}}}