{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,6,5]],"date-time":"2026-06-05T03:06:45Z","timestamp":1780628805975,"version":"3.54.1"},"reference-count":61,"publisher":"Institute of Electrical and Electronics Engineers (IEEE)","issue":"1","license":[{"start":{"date-parts":[[2021,1,1]],"date-time":"2021-01-01T00:00:00Z","timestamp":1609459200000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/ieeexplore.ieee.org\/Xplorehelp\/downloads\/license-information\/IEEE.html"},{"start":{"date-parts":[[2021,1,1]],"date-time":"2021-01-01T00:00:00Z","timestamp":1609459200000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-029"},{"start":{"date-parts":[[2021,1,1]],"date-time":"2021-01-01T00:00:00Z","timestamp":1609459200000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-037"}],"funder":[{"DOI":"10.13039\/100004358","name":"Samsung","doi-asserted-by":"publisher","award":["2016 Global Research Outreach Program"],"award-info":[{"award-number":["2016 Global Research Outreach Program"]}],"id":[{"id":"10.13039\/100004358","id-type":"DOI","asserted-by":"publisher"}]}],"content-domain":{"domain":[],"crossmark-restriction":false},"short-container-title":["IIEEE Trans. Software Eng."],"published-print":{"date-parts":[[2021,1,1]]},"DOI":"10.1109\/tse.2018.2881961","type":"journal-article","created":{"date-parts":[[2018,11,20]],"date-time":"2018-11-20T00:44:56Z","timestamp":1542674696000},"page":"67-85","source":"Crossref","is-referenced-by-count":136,"title":["Automatic Feature Learning for Predicting Vulnerable Software Components"],"prefix":"10.1109","volume":"47","author":[{"ORCID":"https:\/\/orcid.org\/0000-0003-4246-0526","authenticated-orcid":false,"given":"Hoa Khanh","family":"Dam","sequence":"first","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0001-6531-8907","authenticated-orcid":false,"given":"Truyen","family":"Tran","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0003-3702-7963","authenticated-orcid":false,"given":"Trang","family":"Pham","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-4673-0397","authenticated-orcid":false,"given":"Shien Wee","family":"Ng","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0003-4928-7076","authenticated-orcid":false,"given":"John","family":"Grundy","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Aditya","family":"Ghose","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]}],"member":"263","reference":[{"key":"ref39","first-page":"307","article-title":"Noise-contrastive estimation of unnormalized statistical models, with applications to natural image statistics","volume":"13","author":"gutmann","year":"2012","journal-title":"J Mach Learn Res"},{"key":"ref38","article-title":"Keras: Deep Learning library for Theano and TensorFlow","year":"0"},{"key":"ref33","doi-asserted-by":"publisher","DOI":"10.1109\/TSE.2012.83"},{"key":"ref32","doi-asserted-by":"publisher","DOI":"10.3115\/v1\/P14-1023"},{"key":"ref31","doi-asserted-by":"publisher","DOI":"10.1023\/A:1010884214864"},{"key":"ref30","article-title":"Field Guide to Dynamical Recurrent Networks","author":"hochreiter","year":"2001","journal-title":"IEEE Press"},{"key":"ref37","article-title":"Theano","year":"0"},{"key":"ref36","doi-asserted-by":"publisher","DOI":"10.1023\/A:1010933404324"},{"key":"ref35","doi-asserted-by":"publisher","DOI":"10.1145\/2746194.2746198"},{"key":"ref34","doi-asserted-by":"publisher","DOI":"10.1109\/ICCV.1999.790410"},{"key":"ref60","first-page":"1606","article-title":"Learning unified features from natural and programming languages for locating buggy source code","author":"huo","year":"2016","journal-title":"Proc 25th Int Joint Conf Artif Intell"},{"key":"ref61","first-page":"396","article-title":"Advances in neural information processing systems 2","author":"cun","year":"1990"},{"key":"ref28","doi-asserted-by":"publisher","DOI":"10.1109\/TSE.2014.2354037"},{"key":"ref27","doi-asserted-by":"publisher","DOI":"10.1109\/SCAM.2016.15"},{"key":"ref29","doi-asserted-by":"publisher","DOI":"10.1162\/089976600300015015"},{"key":"ref2","article-title":"Net Losses: Estimating the Global Cost of Cybercrime","year":"2014"},{"key":"ref1","article-title":"On Heartbleed's anniversary, 3 of 4 big companies are still vulnerable","author":"hackett","year":"2015"},{"key":"ref20","doi-asserted-by":"publisher","DOI":"10.1109\/ICSE.2012.6227135"},{"key":"ref22","doi-asserted-by":"crossref","first-page":"436","DOI":"10.1038\/nature14539","article-title":"Deep learning","volume":"521","author":"lecun","year":"2015","journal-title":"Nature"},{"key":"ref21","doi-asserted-by":"publisher","DOI":"10.1145\/1081706.1081755"},{"key":"ref24","first-page":"1","article-title":"A deep language model for software code","author":"dam","year":"2016","journal-title":"Proc Workshop Naturalness Softw (NL+SE) co-located with 24th ACM SIGSOFT Int Symp Foundations Softw Eng"},{"key":"ref23","doi-asserted-by":"publisher","DOI":"10.1162\/neco.1997.9.8.1735"},{"key":"ref26","doi-asserted-by":"publisher","DOI":"10.1109\/ISSRE.2014.32"},{"key":"ref25","article-title":"SEI CERT Oracle Coding Standard for Java","author":"mohindra","year":"0"},{"key":"ref50","first-page":"284","article-title":"Use of relative code churn measures to predict system defect density","author":"nagappan","year":"2005","journal-title":"Proc 27th Int l Conf Software Eng"},{"key":"ref51","doi-asserted-by":"publisher","DOI":"10.1145\/1453101.1453105"},{"key":"ref59","first-page":"1345","article-title":"Deepfix: Fixing common C language errors by deep learning","author":"gupta","year":"2017","journal-title":"Proc 31st AAAI Conf Artif Intell"},{"key":"ref58","doi-asserted-by":"publisher","DOI":"10.1145\/2950290.2950334"},{"key":"ref57","doi-asserted-by":"publisher","DOI":"10.1145\/2970276.2970326"},{"key":"ref56","doi-asserted-by":"publisher","DOI":"10.1145\/2950290.2983985"},{"key":"ref55","doi-asserted-by":"publisher","DOI":"10.1126\/science.1127647"},{"key":"ref54","doi-asserted-by":"publisher","DOI":"10.1109\/QRS.2015.14"},{"key":"ref53","doi-asserted-by":"publisher","DOI":"10.1109\/ICSE.2009.5070510"},{"key":"ref52","doi-asserted-by":"publisher","DOI":"10.1145\/1368088.1368160"},{"key":"ref10","doi-asserted-by":"publisher","DOI":"10.1109\/TSE.2010.81"},{"key":"ref11","doi-asserted-by":"publisher","DOI":"10.1016\/j.sysarc.2010.06.003"},{"key":"ref40","article-title":"Android study dataset","author":"scandariato","year":"2014"},{"key":"ref12","doi-asserted-by":"publisher","DOI":"10.1007\/s10664-011-9190-8"},{"key":"ref13","doi-asserted-by":"publisher","DOI":"10.1109\/TR.2016.2630503"},{"key":"ref14","doi-asserted-by":"publisher","DOI":"10.1109\/ASE.2017.8115724"},{"key":"ref15","doi-asserted-by":"publisher","DOI":"10.1145\/2884781.2884804"},{"key":"ref16","doi-asserted-by":"publisher","DOI":"10.1145\/1595696.1595713"},{"key":"ref17","doi-asserted-by":"publisher","DOI":"10.1109\/MSR.2015.38"},{"key":"ref18","doi-asserted-by":"publisher","DOI":"10.1145\/2635868.2635875"},{"key":"ref19","first-page":"858","article-title":"Graph-based statistical language model for code","author":"nguyen","year":"2015","journal-title":"Proceedings of the International Conference on Software Engineering ICSE'94"},{"key":"ref4","article-title":"Anatomy of OpenSSL's Heartbleed: Just four bytes trigger horror bug","author":"williams","year":"0"},{"key":"ref3","article-title":"Cybersecurity market report","author":"ventures","year":"2017"},{"key":"ref6","doi-asserted-by":"publisher","DOI":"10.1109\/ESEM.2011.18"},{"key":"ref5","doi-asserted-by":"publisher","DOI":"10.1109\/ICST.2010.32"},{"key":"ref8","doi-asserted-by":"publisher","DOI":"10.1109\/TSE.2014.2340398"},{"key":"ref7","doi-asserted-by":"publisher","DOI":"10.1145\/2961111.2962611"},{"key":"ref49","doi-asserted-by":"publisher","DOI":"10.1145\/1368088.1368114"},{"key":"ref9","doi-asserted-by":"publisher","DOI":"10.1145\/1414004.1414065"},{"key":"ref46","doi-asserted-by":"publisher","DOI":"10.1002\/stvr.1486"},{"key":"ref45","doi-asserted-by":"publisher","DOI":"10.1145\/2884781.2884848"},{"key":"ref48","doi-asserted-by":"publisher","DOI":"10.1016\/j.eswa.2008.10.027"},{"key":"ref47","doi-asserted-by":"publisher","DOI":"10.1007\/s10664-011-9173-9"},{"key":"ref42","doi-asserted-by":"publisher","DOI":"10.1126\/science.1127647"},{"key":"ref41","doi-asserted-by":"publisher","DOI":"10.1109\/TSE.2011.103"},{"key":"ref44","doi-asserted-by":"publisher","DOI":"10.1145\/2372251.2372285"},{"key":"ref43","first-page":"2579","article-title":"Visualizing data using t-SNE","volume":"9","author":"van der maaten","year":"2008","journal-title":"J Mach Learn Res"}],"container-title":["IEEE Transactions on Software Engineering"],"original-title":[],"link":[{"URL":"http:\/\/xplorestaging.ieee.org\/ielx7\/32\/9318455\/08540022.pdf?arnumber=8540022","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2022,5,10]],"date-time":"2022-05-10T14:50:04Z","timestamp":1652194204000},"score":1,"resource":{"primary":{"URL":"https:\/\/ieeexplore.ieee.org\/document\/8540022\/"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2021,1,1]]},"references-count":61,"journal-issue":{"issue":"1"},"URL":"https:\/\/doi.org\/10.1109\/tse.2018.2881961","relation":{},"ISSN":["0098-5589","1939-3520","2326-3881"],"issn-type":[{"value":"0098-5589","type":"print"},{"value":"1939-3520","type":"electronic"},{"value":"2326-3881","type":"electronic"}],"subject":[],"published":{"date-parts":[[2021,1,1]]}}}