{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,6,25]],"date-time":"2026-06-25T19:50:53Z","timestamp":1782417053098,"version":"3.54.5"},"reference-count":90,"publisher":"IEEE","license":[{"start":{"date-parts":[[2021,11,1]],"date-time":"2021-11-01T00:00:00Z","timestamp":1635724800000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/ieeexplore.ieee.org\/Xplorehelp\/downloads\/license-information\/IEEE.html"},{"start":{"date-parts":[[2021,11,1]],"date-time":"2021-11-01T00:00:00Z","timestamp":1635724800000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-029"},{"start":{"date-parts":[[2021,11,1]],"date-time":"2021-11-01T00:00:00Z","timestamp":1635724800000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-037"}],"content-domain":{"domain":[],"crossmark-restriction":false},"short-container-title":[],"published-print":{"date-parts":[[2021,11]]},"DOI":"10.1109\/ase51524.2021.9678622","type":"proceedings-article","created":{"date-parts":[[2022,1,20]],"date-time":"2022-01-20T20:33:49Z","timestamp":1642710829000},"page":"717-729","source":"Crossref","is-referenced-by-count":51,"title":["DeepCVA: Automated Commit-level Vulnerability Assessment with Deep Multi-task Learning"],"prefix":"10.1109","author":[{"given":"Triet Huynh","family":"Minh Le","sequence":"first","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"David","family":"Hin","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Roland","family":"Croft","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"M.","family":"Ali Babar","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]}],"member":"263","reference":[{"key":"ref73","doi-asserted-by":"publisher","DOI":"10.1145\/3377811.3380361"},{"key":"ref72","doi-asserted-by":"publisher","DOI":"10.1016\/j.jss.2018.12.001"},{"key":"ref71","author":"wattanakriengkrai","year":"2020","journal-title":"Predicting defective lines using a model-agnostic technique"},{"key":"ref70","doi-asserted-by":"publisher","DOI":"10.1016\/j.jss.2020.110659"},{"key":"ref76","doi-asserted-by":"publisher","DOI":"10.1145\/3463274.3463331"},{"key":"ref77","doi-asserted-by":"publisher","DOI":"10.1145\/1835804.1835821"},{"key":"ref74","doi-asserted-by":"publisher","DOI":"10.1145\/3180155.3180167"},{"key":"ref39","doi-asserted-by":"publisher","DOI":"10.1145\/1082983.1083147"},{"key":"ref75","doi-asserted-by":"publisher","DOI":"10.1145\/3196321.3196334"},{"key":"ref38","doi-asserted-by":"publisher","DOI":"10.1109\/TSE.2017.2693980"},{"key":"ref78","doi-asserted-by":"publisher","DOI":"10.1109\/ISSRE.2010.53"},{"key":"ref79","doi-asserted-by":"publisher","DOI":"10.1145\/3139367.3139390"},{"key":"ref33","article-title":"Rectified linear units improve restricted boltzmann machines","author":"nair","year":"2010","journal-title":"ICML"},{"key":"ref32","doi-asserted-by":"publisher","DOI":"10.3115\/v1\/D14-1181"},{"key":"ref31","doi-asserted-by":"publisher","DOI":"10.1145\/3290353"},{"key":"ref30","doi-asserted-by":"publisher","DOI":"10.1145\/3377811.3380345"},{"key":"ref37","doi-asserted-by":"publisher","DOI":"10.1109\/MSR.2019.00064"},{"key":"ref36","doi-asserted-by":"publisher","DOI":"10.1038\/323533a0"},{"key":"ref35","author":"ruder","year":"2016","journal-title":"An overview of gradient descent optimization algorithms"},{"key":"ref34","author":"bahdanau","year":"2014","journal-title":"Neural machine translation by jointly learning to align and translate"},{"key":"ref60","author":"shen","year":"2018","journal-title":"Baseline needs more love On simple word-embedding-based models and associated pooling mechanisms"},{"key":"ref62","first-page":"3146","article-title":"Lightgbm: A highly efficient gradient boosting decision tree","volume":"30","author":"ke","year":"2017","journal-title":"Advances in neural information processing systems"},{"key":"ref61","doi-asserted-by":"publisher","DOI":"10.1145\/2939672.2939785"},{"key":"ref63","doi-asserted-by":"publisher","DOI":"10.1145\/3379597.3387443"},{"key":"ref28","doi-asserted-by":"publisher","DOI":"10.1145\/3239235.3267440"},{"key":"ref64","doi-asserted-by":"crossref","first-page":"196","DOI":"10.1007\/978-1-4612-4380-9_16","article-title":"Individual comparisons by ranking methods","author":"wilcoxon","year":"1992","journal-title":"Break-Throughs in Statistics"},{"key":"ref27","doi-asserted-by":"publisher","DOI":"10.1109\/ICSME.2018.00058"},{"key":"ref65","doi-asserted-by":"publisher","DOI":"10.1145\/3383458"},{"key":"ref66","doi-asserted-by":"publisher","DOI":"10.1109\/TII.2018.2821768"},{"key":"ref29","doi-asserted-by":"crossref","first-page":"981","DOI":"10.1145\/3324884.3416532","article-title":"Evaluating Representation Learning of Code Changes for Predicting Patch Correctness in Program Repair","author":"tian","year":"2020","journal-title":"IEEE\/ACM Int Conference on Automated Software Engineering (ASE)"},{"key":"ref67","doi-asserted-by":"publisher","DOI":"10.1109\/TSE.2018.2876537"},{"key":"ref68","doi-asserted-by":"publisher","DOI":"10.1109\/ACCESS.2019.2930578"},{"key":"ref69","doi-asserted-by":"publisher","DOI":"10.1613\/jair.953"},{"key":"ref2","doi-asserted-by":"publisher","DOI":"10.1016\/S1353-4858(17)30027-2"},{"key":"ref1","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-319-92624-7_1"},{"key":"ref20","doi-asserted-by":"publisher","DOI":"10.1109\/MSR.2015.23"},{"key":"ref22","article-title":"Patchnet: Hierarchical deep learning-based stable patch identification for the linux kernel","author":"hoang","year":"2019","journal-title":"IEEE Transactions on Software Engineering"},{"key":"ref21","doi-asserted-by":"publisher","DOI":"10.1145\/2786805.2786857"},{"key":"ref24","doi-asserted-by":"publisher","DOI":"10.1109\/WACV.2019.00164"},{"key":"ref23","author":"zhang","year":"2017","journal-title":"A survey on multi-task learning"},{"key":"ref26","article-title":"Exploiting old vulnerabilities","author":"future","year":"0"},{"key":"ref25","article-title":"Reproduction package","year":"0"},{"key":"ref50","author":"devlin","year":"2018","journal-title":"BERT Pre-training of deep bidirectional transformers for language understanding"},{"key":"ref51","first-page":"9","article-title":"Language models are unsupervised multitask learners","volume":"1","author":"radford","year":"2019","journal-title":"OpenAIRE blog"},{"key":"ref90","doi-asserted-by":"publisher","DOI":"10.1109\/TR.2019.2924932"},{"key":"ref59","doi-asserted-by":"publisher","DOI":"10.1145\/3106237.3117771"},{"key":"ref58","doi-asserted-by":"publisher","DOI":"10.1109\/TIT.1982.1056489"},{"key":"ref57","first-page":"448","article-title":"Batch normalization: Accelerating deep network training by reducing internal covariate shift","author":"ioffe","year":"2015","journal-title":"International Conference on Machine Learning"},{"key":"ref56","first-page":"1929","article-title":"Dropout: a simple way to prevent neural networks from over-fitting","volume":"15","author":"srivastava","year":"2014","journal-title":"The Journal of Machine Learning Research"},{"key":"ref55","author":"kingma","year":"2014","journal-title":"Adam A method for stochastic optimization"},{"key":"ref54","doi-asserted-by":"publisher","DOI":"10.1162\/tacl_a_00051"},{"key":"ref53","author":"mikolov","year":"0","journal-title":"Distributed Representations of Words and Phrases and Their Compositionality"},{"key":"ref52","doi-asserted-by":"publisher","DOI":"10.1145\/3276517"},{"key":"ref10","article-title":"National vulnerability database","year":"0"},{"key":"ref11","doi-asserted-by":"publisher","DOI":"10.1109\/ESEM.2013.19"},{"key":"ref40","doi-asserted-by":"publisher","DOI":"10.1109\/TSE.2021.3087419"},{"key":"ref12","doi-asserted-by":"publisher","DOI":"10.1109\/MSR.2019.00016"},{"key":"ref13","doi-asserted-by":"publisher","DOI":"10.1109\/TSE.2012.70"},{"key":"ref14","doi-asserted-by":"publisher","DOI":"10.1145\/2810103.2813604"},{"key":"ref15","doi-asserted-by":"publisher","DOI":"10.1109\/GLOCOM.2017.8254428"},{"key":"ref82","doi-asserted-by":"publisher","DOI":"10.1109\/ICECCS.2019.00011"},{"key":"ref16","article-title":"Analysis of vulnerability disclosure delays from the national vulnerability database","author":"rodriguez","year":"2018","journal-title":"Anais do I Workshop de Segurança Cibernética em Dispositivos Conectados"},{"key":"ref81","doi-asserted-by":"publisher","DOI":"10.1145\/3407023.3407038"},{"key":"ref17","author":"sawadogo","year":"2020","journal-title":"Learning to catch security patches"},{"key":"ref84","doi-asserted-by":"publisher","DOI":"10.1007\/s10664-020-09830-x"},{"key":"ref18","doi-asserted-by":"publisher","DOI":"10.1109\/ICSM.2012.6405302"},{"key":"ref83","doi-asserted-by":"publisher","DOI":"10.1109\/ICSME.2018.00054"},{"key":"ref19","first-page":"17","article-title":"Peer code review in open source communities using reviewboard","author":"bosu","year":"2012","journal-title":"Proceedings of the ACM 4th annual workshop on Evaluation and usability of programming languages and tools"},{"key":"ref80","doi-asserted-by":"publisher","DOI":"10.1145\/3041008.3041009"},{"key":"ref89","doi-asserted-by":"publisher","DOI":"10.1145\/2635868.2635880"},{"key":"ref4","doi-asserted-by":"publisher","DOI":"10.1109\/CANDAR.2018.00009"},{"key":"ref3","article-title":"Common vulnerability scoring system","year":"0"},{"key":"ref6","doi-asserted-by":"publisher","DOI":"10.1109\/ICSME.2017.52"},{"key":"ref5","doi-asserted-by":"publisher","DOI":"10.1109\/MSR.2010.5463284"},{"key":"ref85","doi-asserted-by":"publisher","DOI":"10.1109\/QRS.2015.14"},{"key":"ref8","doi-asserted-by":"publisher","DOI":"10.1109\/MSR.2019.00063"},{"key":"ref86","doi-asserted-by":"publisher","DOI":"10.1109\/MSR.2015.32"},{"key":"ref7","doi-asserted-by":"publisher","DOI":"10.1016\/j.jss.2018.09.039"},{"key":"ref49","doi-asserted-by":"publisher","DOI":"10.1016\/j.compbiolchem.2004.09.006"},{"key":"ref87","doi-asserted-by":"publisher","DOI":"10.1109\/TSE.2017.2787653"},{"key":"ref88","doi-asserted-by":"publisher","DOI":"10.1109\/MSR.2010.5463340"},{"key":"ref9","author":"le","year":"2021","journal-title":"A survey on data-driven software vulnerability assessment and prioritization"},{"key":"ref46","doi-asserted-by":"publisher","DOI":"10.1145\/3338906.3338941"},{"key":"ref45","doi-asserted-by":"publisher","DOI":"10.1007\/s10664-020-09868-x"},{"key":"ref48","doi-asserted-by":"publisher","DOI":"10.1016\/j.patcog.2019.02.023"},{"key":"ref47","author":"raschka","year":"2018","journal-title":"Model Evaluation Model Selection and Algorithm Selection in Machine Learning"},{"key":"ref42","doi-asserted-by":"publisher","DOI":"10.11613\/BM.2012.031"},{"key":"ref41","author":"cochran","year":"2007","journal-title":"Sampling Techniques"},{"key":"ref44","article-title":"The impact of changes mislabeled by szz on just-in-time defect prediction","author":"fan","year":"2019","journal-title":"IEEE Transactions on Software Engineering"},{"key":"ref43","doi-asserted-by":"publisher","DOI":"10.1109\/ICSE.2019.00123"}],"event":{"name":"2021 36th IEEE\/ACM International Conference on Automated Software Engineering (ASE)","location":"Melbourne, Australia","start":{"date-parts":[[2021,11,15]]},"end":{"date-parts":[[2021,11,19]]}},"container-title":["2021 36th IEEE\/ACM International Conference on Automated Software Engineering (ASE)"],"original-title":[],"link":[{"URL":"http:\/\/xplorestaging.ieee.org\/ielx7\/9678507\/9678392\/09678622.pdf?arnumber=9678622","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2022,5,10]],"date-time":"2022-05-10T16:57:43Z","timestamp":1652201863000},"score":1,"resource":{"primary":{"URL":"https:\/\/ieeexplore.ieee.org\/document\/9678622\/"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2021,11]]},"references-count":90,"URL":"https:\/\/doi.org\/10.1109\/ase51524.2021.9678622","relation":{},"subject":[],"published":{"date-parts":[[2021,11]]}}}