{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,7,9]],"date-time":"2026-07-09T21:49:50Z","timestamp":1783633790596,"version":"3.55.0"},"reference-count":98,"publisher":"Association for Computing Machinery (ACM)","issue":"1","license":[{"start":{"date-parts":[[2023,1,31]],"date-time":"2023-01-31T00:00:00Z","timestamp":1675123200000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/www.acm.org\/publications\/policies\/copyright_policy#Background"}],"funder":[{"name":"Australian Government\u2019s Cooperative Research Centres Programme"},{"name":"super-computing resources provided by the Phoenix HPC service at the University of Adelaide"}],"content-domain":{"domain":["dl.acm.org"],"crossmark-restriction":true},"short-container-title":["ACM Trans. Softw. Eng. Methodol."],"published-print":{"date-parts":[[2023,1,31]]},"abstract":"<jats:p>\n            Security Orchestration, Automation, and Response (SOAR) platforms integrate and orchestrate a wide variety of security tools to accelerate the operational activities of Security Operation Center (SOC). Integration of security tools in a SOAR platform is mostly done manually using APIs, plugins, and scripts. SOC teams need to navigate through API calls of different security tools to find a suitable API to define or update an incident response action. Analyzing various types of API documentation with diverse API format and presentation structure involves significant challenges such as data availability, data heterogeneity, and semantic variation for automatic identification of security tool APIs specific to a particular task. Given these challenges can have negative impact on SOC team\u2019s ability to handle security incident effectively and efficiently, we consider it important to devise suitable automated support solutions to address these challenges. We propose a novel learning-based framework for automated security tool\n            <jats:underline>\n              <jats:bold>API<\/jats:bold>\n            <\/jats:underline>\n            <jats:underline>\n              <jats:bold>R<\/jats:bold>\n            <\/jats:underline>\n            ecommendation for security\n            <jats:underline>\n              <jats:bold>O<\/jats:bold>\n            <\/jats:underline>\n            rchestration, automation, and response,\n            <jats:bold>APIRO<\/jats:bold>\n            . To mitigate data availability constraint, APIRO enriches security tool API description by applying a wide variety of data augmentation techniques. To learn data heterogeneity of the security tools and semantic variation in API descriptions, APIRO consists of an API-specific word embedding model and a Convolutional Neural Network (CNN) model that are used for prediction of top three relevant APIs for a task. We experimentally demonstrate the effectiveness of APIRO in recommending APIs for different tasks using three security tools and 36 augmentation techniques. Our experimental results demonstrate the feasibility of APIRO for achieving 91.9% Top-1 Accuracy. Compared to the state-of-the-art baseline, APIRO is 26.93%, 23.03%, and 20.87% improved in terms of Top-1, Top-2, and Top-3 Accuracy and outperforms the baseline by 23.7% in terms of Mean Reciprocal Rank (MRR).\n          <\/jats:p>","DOI":"10.1145\/3512768","type":"journal-article","created":{"date-parts":[[2022,3,31]],"date-time":"2022-03-31T12:11:27Z","timestamp":1648728687000},"page":"1-42","update-policy":"https:\/\/doi.org\/10.1145\/crossmark-policy","source":"Crossref","is-referenced-by-count":30,"title":["APIRO: A Framework for Automated Security Tools API Recommendation"],"prefix":"10.1145","volume":"32","author":[{"ORCID":"https:\/\/orcid.org\/0000-0003-2418-330X","authenticated-orcid":false,"given":"Zarrin Tasnim","family":"Sworna","sequence":"first","affiliation":[{"name":"CREST \u2013 Centre for Research on Engineering Software Technologies, University of Adelaide, Adelaide SA, Australia and Cyber Security Cooperative Research Centre (CSCRC)"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Chadni","family":"Islam","sequence":"additional","affiliation":[{"name":"CREST \u2013 Centre for Research on Engineering Software Technologies, University of Adelaide, Adelaide SA, Australia"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Muhammad Ali","family":"Babar","sequence":"additional","affiliation":[{"name":"CREST \u2013 Centre for Research on Engineering Software Technologies, University of Adelaide, Adelaide SA, Australia and Cyber Security Cooperative Research Centre (CSCRC)"}],"role":[{"vocabulary":"crossref","role":"author"}]}],"member":"320","published-online":{"date-parts":[[2023,2,13]]},"reference":[{"key":"e_1_3_3_2_2","unstructured":"2019. NLTK: Categorizing and Tagging Words. Retrieved January 13 2021 from https:\/\/www.nltk.org\/book\/ch05.html."},{"key":"e_1_3_3_3_2","volume-title":"PyMISP - Python API","year":"2017","unstructured":"MISP. 2017. PyMISP - Python API. Retrieved from https:\/\/pymisp.readthedocs.io\/en\/latest\/. Accessed March 3, 2021."},{"key":"e_1_3_3_4_2","doi-asserted-by":"crossref","first-page":"289","DOI":"10.1109\/SP.2016.25","volume-title":"Proceedings of the 2016 IEEE Symposium on Security and Privacy (SP)","author":"Acar Yasemin","year":"2016","unstructured":"Yasemin Acar, Michael Backes, Sascha Fahl, Doowon Kim, Michelle L. Mazurek, and Christian Stransky. 2016. You get where you\u2019re looking for: The impact of information sources on code security. In Proceedings of the 2016 IEEE Symposium on Security and Privacy (SP). IEEE, 289\u2013305."},{"key":"e_1_3_3_5_2","unstructured":"Heike Adel and Hinrich Sch\u00fctze. 2016. Exploring different dimensions of attention for uncertainty detection. arXiv:1612.06549. Retrieved from https:\/\/arxiv.org\/abs\/1612.06549."},{"key":"e_1_3_3_6_2","volume-title":"DITA Best Practices: A Roadmap for Writing, Editing, and Architecting in DITA","author":"Bellamy Laura","year":"2011","unstructured":"Laura Bellamy, Michelle Carey, and Jenifer Schlotfeldt. 2011. DITA Best Practices: A Roadmap for Writing, Editing, and Architecting in DITA. IBM Press."},{"key":"e_1_3_3_7_2","doi-asserted-by":"publisher","DOI":"10.5555\/1816498"},{"key":"e_1_3_3_8_2","doi-asserted-by":"publisher","DOI":"10.1162\/tacl_a_00051"},{"key":"e_1_3_3_9_2","volume-title":"The State of Incident Response 2017","author":"Networks Cortex XSOAR by Palo Alto","year":"2019","unstructured":"Cortex XSOAR by Palo Alto Networks. 2019. The State of Incident Response 2017. Retrieved from https:\/\/www.paloaltonetworks.com\/resources\/research\/the-state-of-incident-response-2017. Accessed March 3, 2021."},{"key":"e_1_3_3_10_2","first-page":"54","volume-title":"Proceedings of the 2019 IEEE\/ACM International Conference on Software and System Processes (ICSSP)","author":"Nepal C. Islam, M. A. Babar, and S.","year":"2019","unstructured":"C. Islam, M. A. Babar, and S. Nepal. 2019. An ontology-driven approach to automating the process of integrating security software systems. In Proceedings of the 2019 IEEE\/ACM International Conference on Software and System Processes (ICSSP). IEEE, 54\u201363."},{"key":"e_1_3_3_11_2","doi-asserted-by":"publisher","DOI":"10.1145\/3338906.3341174"},{"key":"e_1_3_3_12_2","first-page":"1273","volume-title":"Proceedings of the 2021 IEEE\/ACM 43rd International Conference on Software Engineering (ICSE)","author":"Cao Kaibo","year":"2021","unstructured":"Kaibo Cao, Chunyang Chen, Sebastian Baltes, Christoph Treude, and Xiang Chen. 2021. Automated query reformulation for efficient search based on query logs from stack overflow. In Proceedings of the 2021 IEEE\/ACM 43rd International Conference on Software Engineering (ICSE). IEEE, 1273\u20131285."},{"key":"e_1_3_3_13_2","doi-asserted-by":"publisher","DOI":"10.1145\/2393596.2393606"},{"key":"e_1_3_3_14_2","doi-asserted-by":"publisher","DOI":"10.1145\/3134667"},{"key":"e_1_3_3_15_2","first-page":"826","volume-title":"Proceedings of the 2018 33rd IEEE\/ACM International Conference on Automated Software Engineering (ASE)","author":"Chen Qingying","year":"2018","unstructured":"Qingying Chen and Minghui Zhou. 2018. A neural framework for retrieval and summarization of source code. In Proceedings of the 2018 33rd IEEE\/ACM International Conference on Automated Software Engineering (ASE). IEEE, 826\u2013831."},{"key":"e_1_3_3_16_2","volume-title":"Keras","author":"Chollet Fran\u00e7ois","year":"2015","unstructured":"Fran\u00e7ois Chollet et\u00a0al. 2015. Keras. Retrieved from https:\/\/github.com\/fchollet\/keras. Accessed March 3, 2021."},{"key":"e_1_3_3_17_2","volume-title":"Sampling Techniques","author":"Cochran William G.","year":"2007","unstructured":"William G. Cochran. 2007. Sampling Techniques. John Wiley & Sons."},{"key":"e_1_3_3_18_2","volume-title":"SOAR Platforms: Everything You Need to Know About Security Orchestration, Automation, and Response","author":"Connect Threat","year":"2019","unstructured":"Threat Connect. 2019. SOAR Platforms: Everything You Need to Know About Security Orchestration, Automation, and Response. Retrieved from https:\/\/threatconnect.com\/wp-content\/uploads\/ThreatConnect-SOAR-eBook.pdf. Accessed January 13, 2021."},{"key":"e_1_3_3_19_2","unstructured":"Claude Coulombe. 2018. Text data augmentation made simple by leveraging NLP cloud APIs. arXiv:1812.04718. Retrieved from https:\/\/arxiv.org\/abs\/1812.04718."},{"key":"e_1_3_3_20_2","volume-title":"SOAR: Conclusions for 2020","author":"Defense Orange Cyber","year":"2020","unstructured":"Orange Cyber Defense. 2020. SOAR: Conclusions for 2020. Retrieved from https:\/\/orangecyberdefense.com\/global\/blog\/managed-detection-response\/soar-conclusions-for-2020\/. March 3, 2021."},{"key":"e_1_3_3_21_2","doi-asserted-by":"crossref","first-page":"12","DOI":"10.1109\/ASE.2015.12","volume-title":"Proceedings of the 2015 30th IEEE\/ACM International Conference on Automated Software Engineering (ASE)","author":"Sorbo Andrea Di","year":"2015","unstructured":"Andrea Di Sorbo, Sebastiano Panichella, Corrado A. Visaggio, Massimiliano Di Penta, Gerardo Canfora, and Harald C. Gall. 2015. Development emails content analyzer: Intention mining in developer discussions (T). In Proceedings of the 2015 30th IEEE\/ACM International Conference on Automated Software Engineering (ASE). IEEE, 12\u201323."},{"key":"e_1_3_3_22_2","doi-asserted-by":"crossref","unstructured":"Marzieh Fadaee Arianna Bisazza and Christof Monz. 2017. Data augmentation for low-resource neural machine translation. arXiv:1705.00440. Retrieved from https:\/\/arxiv.org\/abs\/1705.00440.","DOI":"10.18653\/v1\/P17-2090"},{"issue":"1","key":"e_1_3_3_23_2","first-page":"1","article-title":"Technical Q&A site answer recommendation via question boosting","volume":"30","author":"Gao Zhipeng","year":"2020","unstructured":"Zhipeng Gao, Xin Xia, David Lo, and John Grundy. 2020. Technical Q&A site answer recommendation via question boosting. ACM Transactions on Software Engineering and Methodology (TOSEM) 30, 1 (2020), 1\u201334.","journal-title":"ACM Transactions on Software Engineering and Methodology (TOSEM)"},{"key":"e_1_3_3_24_2","doi-asserted-by":"publisher","DOI":"10.1145\/2950290.2950334"},{"key":"e_1_3_3_25_2","first-page":"531","volume-title":"Proceedings of the 27th  \\(\\lbrace\\) USENIX \\(\\rbrace\\)  Security Symposium ( \\(\\lbrace\\) USENIX \\(\\rbrace\\)  Security 18)","author":"Harkous Hamza","year":"2018","unstructured":"Hamza Harkous, Kassem Fawaz, R\u00e9mi Lebret, Florian Schaub, Kang G. Shin, and Karl Aberer. 2018. Polisis: Automated analysis and presentation of privacy policies using deep learning. In Proceedings of the 27th \\(\\lbrace\\) USENIX \\(\\rbrace\\) Security Symposium ( \\(\\lbrace\\) USENIX \\(\\rbrace\\) Security 18). 531\u2013548."},{"key":"e_1_3_3_26_2","doi-asserted-by":"publisher","DOI":"10.1162\/neco.1997.9.8.1735"},{"key":"e_1_3_3_27_2","doi-asserted-by":"publisher","DOI":"10.1109\/TSE.2018.2876340"},{"key":"e_1_3_3_28_2","first-page":"293","volume-title":"Proceedings of the 2018 33rd IEEE\/ACM International Conference on Automated Software Engineering (ASE)","author":"Huang Qiao","year":"2018","unstructured":"Qiao Huang, Xin Xia, Zhenchang Xing, David Lo, and Xinyu Wang. 2018. API method recommendation without worrying about the task-API knowledge gap. In Proceedings of the 2018 33rd IEEE\/ACM International Conference on Automated Software Engineering (ASE). IEEE, 293\u2013304."},{"key":"e_1_3_3_29_2","doi-asserted-by":"crossref","first-page":"513","DOI":"10.1007\/978-3-030-21290-2_32","volume-title":"Proceedings of the International Conference on Advanced Information Systems Engineering","author":"Islam Chadni","year":"2019","unstructured":"Chadni Islam, M. Ali Babar, and Surya Nepal. 2019. Automated interpretation and integration of security tools using semantic knowledge. In Proceedings of the International Conference on Advanced Information Systems Engineering. Springer, 513\u2013528."},{"key":"e_1_3_3_30_2","doi-asserted-by":"crossref","first-page":"165","DOI":"10.1007\/978-3-030-58923-3_11","volume-title":"Proceedings of the European Conference on Software Architecture","author":"Islam Chadni","year":"2020","unstructured":"Chadni Islam, Muhammad Ali Babar, and Surya Nepal. 2020. Architecture-centric support for integrating security tools in a security orchestration platform. In Proceedings of the European Conference on Software Architecture. Springer, 165\u2013181."},{"key":"e_1_3_3_31_2","volume-title":"Cybersecurity Analytics and Operations in Transition: Challenges, Plans, Successes, and Strategies.","author":"Oltsik ESG Jon","year":"2017","unstructured":"ESG Jon Oltsik. July 2017. Cybersecurity Analytics and Operations in Transition: Challenges, Plans, Successes, and Strategies. Retrieved from https:\/\/www.esg-global.com\/. Accessed March 3, 2021."},{"key":"e_1_3_3_32_2","doi-asserted-by":"publisher","DOI":"10.1016\/j.scico.2020.102598"},{"key":"e_1_3_3_33_2","first-page":"347","volume-title":"Proceedings of the International Conference on Genetic and Evolutionary Computing","author":"Khin Nyein Pyae Pyae","year":"2015","unstructured":"Nyein Pyae Pyae Khin and Than Nwe Aung. 2015. Analyzing tagging accuracy of part-of-speech taggers. In Proceedings of the International Conference on Genetic and Evolutionary Computing. Springer, 347\u2013354."},{"key":"e_1_3_3_34_2","doi-asserted-by":"publisher","DOI":"10.3390\/app9112347"},{"key":"e_1_3_3_35_2","unstructured":"Yoon Kim. 2014. Convolutional neural networks for sentence classification. arXiv:1408.5882. Retrieved from https:\/\/arxiv.org\/abs\/1408.5882."},{"key":"e_1_3_3_36_2","doi-asserted-by":"crossref","unstructured":"Sosuke Kobayashi. 2018. Contextual augmentation: Data augmentation by words with paradigmatic relations. arXiv:1805.06201. Retrieved from https:\/\/arxiv.org\/abs\/1805.06201.","DOI":"10.18653\/v1\/N18-2072"},{"key":"e_1_3_3_37_2","volume-title":"Proceedings of the AAAI Conference on Artificial Intelligence","volume":"29","author":"Lai Siwei","year":"2015","unstructured":"Siwei Lai, Liheng Xu, Kang Liu, and Jun Zhao. 2015. Recurrent convolutional neural networks for text classification. In Proceedings of the AAAI Conference on Artificial Intelligence, Vol. 29."},{"key":"e_1_3_3_38_2","doi-asserted-by":"publisher","DOI":"10.1145\/3379597.3387443"},{"key":"e_1_3_3_39_2","first-page":"371","volume-title":"Proceedings of the 2019 IEEE\/ACM 16th International Conference on Mining Software Repositories (MSR)","author":"Le Triet Huynh Minh","year":"2019","unstructured":"Triet Huynh Minh Le, Bushra Sabir, and Muhammad Ali Babar. 2019. Automated software vulnerability assessment with concept drift. In Proceedings of the 2019 IEEE\/ACM 16th International Conference on Mining Software Repositories (MSR). IEEE, 371\u2013382."},{"key":"e_1_3_3_40_2","first-page":"1381","volume-title":"Proceedings of the 29th  \\(\\lbrace\\) USENIX \\(\\rbrace\\)  Security Symposium ( \\(\\lbrace\\) USENIX \\(\\rbrace\\)  Security 20)","author":"Li Jinfeng","year":"2020","unstructured":"Jinfeng Li, Tianyu Du, Shouling Ji, Rong Zhang, Quan Lu, Min Yang, and Ting Wang. 2020. Textshield: Robust text classification based on multimodal embedding and neural machine translation. In Proceedings of the 29th \\(\\lbrace\\) USENIX \\(\\rbrace\\) Security Symposium ( \\(\\lbrace\\) USENIX \\(\\rbrace\\) Security 20). 1381\u20131398."},{"key":"e_1_3_3_41_2","unstructured":"Zhen Li Deqing Zou Shouhuai Xu Xinyu Ou Hai Jin Sujuan Wang Zhijun Deng and Yuyi Zhong. 2018. Vuldeepecker: A deep learning-based system for vulnerability detection. arXiv:1801.01681. Retrieved from https:\/\/arxiv.org\/abs\/1801.01681."},{"key":"e_1_3_3_42_2","volume-title":"LimaCharlie REST API Documentation","year":"2021","unstructured":"Limacharlie. 2021. LimaCharlie REST API Documentation. Retrieved from https:\/\/api.limacharlie.io\/static\/swagger\/#\/. Accessed March 3, 2021."},{"key":"e_1_3_3_43_2","volume-title":"LimaCharlie Sensor Commands","year":"2021","unstructured":"Limacharlie. 2021. LimaCharlie Sensor Commands. Retrieved from https:\/\/doc.limacharlie.io\/docs\/documentation\/docs\/sensor_commands.md. Accessed March 3, 2021."},{"key":"e_1_3_3_44_2","volume-title":"Python-LimaCharlie API Documentation","year":"2021","unstructured":"Limacharlie. 2021. Python-LimaCharlie API Documentation. Retrieved from https:\/\/python-limacharlie.readthedocs.io\/en\/master\/limacharlie.html. Accessed March 3, 2021."},{"key":"e_1_3_3_45_2","article-title":"Opinion mining for software development: A systematic literature review","author":"Lin Bin","year":"2022","unstructured":"Bin Lin, Nathan Cassee, Alexander Serebrenik, Gabriele Bavota, Nicole Novielli, and Michele Lanza. 2022. Opinion mining for software development: A systematic literature review. ACM Transactions on Software Engineering and Methodology 31, 3 (2022), 1\u201341.","journal-title":"ACM Transactions on Software Engineering and Methodology"},{"key":"e_1_3_3_46_2","doi-asserted-by":"publisher","DOI":"10.1145\/3387904.3389278"},{"key":"e_1_3_3_47_2","first-page":"545","volume-title":"Proceedings of the 2015 IEEE 22nd International Conference on Software Analysis, Evolution, and Reengineering (SANER)","author":"Lu Meili","year":"2015","unstructured":"Meili Lu, Xiaobing Sun, Shaowei Wang, David Lo, and Yucong Duan. 2015. Query expansion via wordnet for effective code search. In Proceedings of the 2015 IEEE 22nd International Conference on Software Analysis, Evolution, and Reengineering (SANER). IEEE, 545\u2013549."},{"key":"e_1_3_3_48_2","volume-title":"NLP Augmentation","author":"Ma Edward","year":"2019","unstructured":"Edward Ma. 2019. NLP Augmentation. Retrieved from https:\/\/github.com\/makcedward\/nlpaug. Accessed March 3, 2021."},{"key":"e_1_3_3_49_2","first-page":"3","volume-title":"Proceedings of the Information Retrieval Facility Conference","author":"Mahdabi Parvaz","year":"2011","unstructured":"Parvaz Mahdabi, Mostafa Keikha, Shima Gerani, Monica Landoni, and Fabio Crestani. 2011. Building queries for prior-art search. In Proceedings of the Information Retrieval Facility Conference. Springer, 3\u201315."},{"key":"e_1_3_3_50_2","doi-asserted-by":"publisher","DOI":"10.11613\/BM.2012.031"},{"key":"e_1_3_3_51_2","doi-asserted-by":"publisher","DOI":"10.1145\/1985793.1985809"},{"key":"e_1_3_3_52_2","doi-asserted-by":"publisher","DOI":"10.1177\/0047281617721853"},{"key":"e_1_3_3_53_2","unstructured":"Tomas Mikolov Kai Chen Greg Corrado and Jeffrey Dean. 2013. Efficient estimation of word representations in vector space. arXiv:1301.3781. Retrieved from https:\/\/arxiv.org\/abs\/1301.3781."},{"key":"e_1_3_3_54_2","first-page":"3111","volume-title":"Proceedings of the Advances in Neural Information Processing Systems","author":"Mikolov Tomas","year":"2013","unstructured":"Tomas Mikolov, Ilya Sutskever, Kai Chen, Greg S. Corrado, and Jeff Dean. 2013. Distributed representations of words and phrases and their compositionality. In Proceedings of the Advances in Neural Information Processing Systems. 3111\u20133119."},{"key":"e_1_3_3_55_2","volume-title":"MISP Automation API","year":"2021","unstructured":"MISP. 2021. MISP Automation API. Retrieved from https:\/\/www.circl.lu\/doc\/misp\/automation\/. Accessed March 3, 2021."},{"key":"e_1_3_3_56_2","volume-title":"PyMISP - Python Library to Access MISP: Example Scripts","year":"2021","unstructured":"MISP. 2021. PyMISP - Python Library to Access MISP: Example Scripts. Retrieved from https:\/\/www.circl.lu\/doc\/misp\/pymisp\/. Accessed March 3, 2021."},{"key":"e_1_3_3_57_2","doi-asserted-by":"crossref","first-page":"438","DOI":"10.1109\/ICSE.2017.47","volume-title":"Proceedings of the 2017 IEEE\/ACM 39th International Conference on Software Engineering (ICSE)","author":"Nguyen Trong Duc","year":"2017","unstructured":"Trong Duc Nguyen, Anh Tuan Nguyen, Hung Dang Phan, and Tien N. Nguyen. 2017. Exploring API embedding for API usages and applications. In Proceedings of the 2017 IEEE\/ACM 39th International Conference on Software Engineering (ICSE). IEEE, 438\u2013449."},{"key":"e_1_3_3_58_2","doi-asserted-by":"publisher","DOI":"10.21105\/joss.02136"},{"key":"e_1_3_3_59_2","doi-asserted-by":"crossref","unstructured":"Wiebke Wagner. 2010. Steven bird ewan klein and edward loper: Natural language processing with python analyzing text with the natural language toolkit. Language Resources and Evaluation 44 4 (2010) 421\u2013424.","DOI":"10.1007\/s10579-010-9124-x"},{"key":"e_1_3_3_60_2","doi-asserted-by":"publisher","DOI":"10.1145\/1166324.1166329"},{"key":"e_1_3_3_61_2","doi-asserted-by":"publisher","DOI":"10.1109\/ICSM.2015.7332474"},{"key":"e_1_3_3_62_2","article-title":"Crowd documentation: Exploring the coverage and the dynamics of API discussions on Stack Overflow","volume":"11","author":"Parnin Chris","year":"2012","unstructured":"Chris Parnin, Christoph Treude, Lars Grammel, and Margaret-Anne Storey. 2012. Crowd documentation: Exploring the coverage and the dynamics of API discussions on Stack Overflow. Georgia Institute of Technology, Tech. Rep 11 (2012).","journal-title":"Georgia Institute of Technology, Tech. Rep"},{"key":"e_1_3_3_63_2","doi-asserted-by":"publisher","DOI":"10.3115\/v1\/D14-1162"},{"key":"e_1_3_3_64_2","volume-title":"Splunk Phantom: Harness the Full Power of Your Security Investments with Security Orchestration, Automation and Response.","author":"Phantom Splunk","year":"2021","unstructured":"Splunk Phantom. 2021. Splunk Phantom: Harness the Full Power of Your Security Investments with Security Orchestration, Automation and Response. Retrieved from https:\/\/www.splunk.com\/en_us\/software\/splunk-security-orchestration-and-automation\/features.html. Accessed March 3, 2021."},{"key":"e_1_3_3_65_2","doi-asserted-by":"crossref","first-page":"55","DOI":"10.1007\/3-540-49430-8_3","volume-title":"Proceedings of the Neural Networks: Tricks of the Trade","author":"Prechelt Lutz","year":"1998","unstructured":"Lutz Prechelt. 1998. Early stopping-but when? In Proceedings of the Neural Networks: Tricks of the Trade. Springer, 55\u201369."},{"key":"e_1_3_3_66_2","doi-asserted-by":"publisher","DOI":"10.1145\/3366424.3383552"},{"key":"e_1_3_3_67_2","first-page":"357","volume-title":"Proceedings of the 2016 IEEE\/ACM 38th International Conference on Software Engineering (ICSE)","author":"Raghothaman Mukund","year":"2016","unstructured":"Mukund Raghothaman, Yi Wei, and Youssef Hamadi. 2016. Swim: Synthesizing what i mean-code search and idiomatic snippet synthesis. In Proceedings of the 2016 IEEE\/ACM 38th International Conference on Software Engineering (ICSE). IEEE, 357\u2013367."},{"key":"e_1_3_3_68_2","first-page":"349","volume-title":"Proceedings of the 2016 IEEE 23rd International Conference on Software Analysis, Evolution, and Reengineering (SANER)","volume":"1","author":"Rahman Mohammad Masudur","year":"2016","unstructured":"Mohammad Masudur Rahman, Chanchal K. Roy, and David Lo. 2016. Rack: Automatic api recommendation using crowdsourced knowledge. In Proceedings of the 2016 IEEE 23rd International Conference on Software Analysis, Evolution, and Reengineering (SANER), Vol. 1. IEEE, 349\u2013359."},{"key":"e_1_3_3_69_2","volume-title":"Security Orchestration and Automation (SOAR) Playbook: Your Practical Guide to Implementing a SOAR Solution","year":"2020","unstructured":"Rapid7. 2020. Security Orchestration and Automation (SOAR) Playbook: Your Practical Guide to Implementing a SOAR Solution. Retrieved from https:\/\/www.rapid7.com\/info\/security-orchestration-and-automation-playbook\/. Accessed March 3, 2021."},{"key":"e_1_3_3_70_2","first-page":"45","volume-title":"Proceedings of the LREC 2010 Workshop on New Challenges for NLP Frameworks","author":"\u0158eh\u016f\u0159ek Radim","year":"2010","unstructured":"Radim \u0158eh\u016f\u0159ek and Petr Sojka. 2010. Software framework for topic modelling with large corpora. In Proceedings of the LREC 2010 Workshop on New Challenges for NLP Frameworks. ELRA, Valletta, Malta, 45\u201350."},{"key":"e_1_3_3_71_2","volume-title":"Threat Connect- Playbook Fridays: How to Create a Playbook for the Non-Programmer","author":"Rikard Buddy","unstructured":"Buddy Rikard. 2019, Accessed March 3, 2021. Threat Connect- Playbook Fridays: How to Create a Playbook for the Non-Programmer. Retrieved from https:\/\/threatconnect.com\/blog\/playbooks-for-non-programmers\/."},{"key":"e_1_3_3_72_2","doi-asserted-by":"crossref","first-page":"258","DOI":"10.1145\/2808719.2808746","volume-title":"Proceedings of the 6th ACM Conference on Bioinformatics, Computational Biology and Health Informatics","author":"Rios Anthony","year":"2015","unstructured":"Anthony Rios and Ramakanth Kavuluru. 2015. Convolutional neural networks for biomedical text classification: Application in indexing biomedical articles. In Proceedings of the 6th ACM Conference on Bioinformatics, Computational Biology and Health Informatics. 258\u2013267."},{"key":"e_1_3_3_73_2","article-title":"Garbage in, garbage out: How purport-edly great ML models can be screwed up by bad data","author":"Sanders Hillary","year":"2017","unstructured":"Hillary Sanders and Joshua Saxe. 2017. Garbage in, garbage out: How purport-edly great ML models can be screwed up by bad data. Proceedings of Blackhat 2017 (2017).","journal-title":"Proceedings of Blackhat 2017"},{"key":"e_1_3_3_74_2","doi-asserted-by":"publisher","DOI":"10.1109\/78.650093"},{"key":"e_1_3_3_75_2","volume-title":"ENTERPRISE INCIDENT & CASE MANAGEMENT SOLUTION FOR SECURITY ORCHESTRATION, AUTOMATION, & RESPONSE","author":"Security D3","year":"2021","unstructured":"D3 Security. 2021. ENTERPRISE INCIDENT & CASE MANAGEMENT SOLUTION FOR SECURITY ORCHESTRATION, AUTOMATION, & RESPONSE. Retrieved from https:\/\/query.prod.cms.rt.microsoft.com\/cms\/api\/am\/binary\/RE36vyb. Accessed March 3, 2021."},{"key":"e_1_3_3_76_2","volume-title":"Running Snort as a Daemon","year":"2020","unstructured":"SNORT. 2020. Running Snort as a Daemon. Retrieved from http:\/\/manual-snort-org.s3-website-us-east-1.amazonaws.com\/node11.html. Accessed March 3, 2021."},{"key":"e_1_3_3_77_2","volume-title":"SNORT Users Manual 2.9.16","year":"2020","unstructured":"SNORT. 2020. SNORT Users Manual 2.9.16. Retrieved from http:\/\/manual-snort-org.s3-website-us-east-1.amazonaws.com\/. Accessed March 3, 2021."},{"key":"e_1_3_3_78_2","first-page":"1","volume-title":"Proceedings of the 2017 IEEE International Symposium on High Performance Computer Architecture (HPCA)","author":"Song Mingcong","year":"2017","unstructured":"Mingcong Song, Yang Hu, Huixiang Chen, and Tao Li. 2017. Towards pervasive and user satisfactory cnn across gpu microarchitectures. In Proceedings of the 2017 IEEE International Symposium on High Performance Computer Architecture (HPCA). IEEE, 1\u201312."},{"key":"e_1_3_3_79_2","doi-asserted-by":"publisher","DOI":"10.1109\/PDP.2010.43"},{"key":"e_1_3_3_80_2","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-030-32381-3_16"},{"key":"e_1_3_3_81_2","volume-title":"Security Orchestration, Automation and Response (SOAR) Capabilities.","year":"2021","unstructured":"Swimlane. 2021. Security Orchestration, Automation and Response (SOAR) Capabilities. Retrieved from https:\/\/swimlane.com\/assets\/uploads\/documents\/SOAR_Capabilities_e_book___Swimlane.pdf."},{"key":"e_1_3_3_82_2","volume-title":"Sparse_categorical_crossentropy","year":"2021","unstructured":"TensorFlow. 2021. Sparse_categorical_crossentropy. Retrieved from https:\/\/www.tensorflow.org\/api_docs\/python\/tf\/keras\/losses\/sparse_categorical_crossentropy. Accessed January 27, 2021."},{"key":"e_1_3_3_83_2","doi-asserted-by":"crossref","first-page":"153","DOI":"10.1109\/ASE.2017.8115628","volume-title":"Proceedings of the 2017 32nd IEEE\/ACM International Conference on Automated Software Engineering (ASE)","author":"Tian Yuan","year":"2017","unstructured":"Yuan Tian, Ferdian Thung, Abhishek Sharma, and David Lo. 2017. APIBot: Question answering bot for API documentation. In Proceedings of the 2017 32nd IEEE\/ACM International Conference on Automated Software Engineering (ASE). IEEE, 153\u2013158."},{"key":"e_1_3_3_84_2","first-page":"042077","volume-title":"Proceedings of the Journal of Physics: Conference Series","volume":"1529","author":"Tiun S.","year":"2020","unstructured":"S. Tiun, U. A. Mokhtar, S. H. Bakar, and S. Saad. 2020. Classification of functional and non-functional requirement in software requirement using Word2vec and fast Text. In Proceedings of the Journal of Physics: Conference Series, Vol. 1529. IOP Publishing, 042077."},{"key":"e_1_3_3_85_2","volume-title":"Princeton University \u201cAbout WordNet\u201d","author":"University Princeton","year":"2010","unstructured":"Princeton University. 2010. Princeton University \u201cAbout WordNet\u201d. Retrieved from https:\/\/wordnet.princeton.edu\/. January 13, 2021."},{"key":"e_1_3_3_86_2","doi-asserted-by":"publisher","DOI":"10.1371\/journal.pone.0243300"},{"key":"e_1_3_3_87_2","doi-asserted-by":"publisher","DOI":"10.1109\/ACCESS.2020.3045514"},{"key":"e_1_3_3_88_2","doi-asserted-by":"crossref","first-page":"321","DOI":"10.1109\/MSR.2019.00058","volume-title":"Proceedings of the 2019 IEEE\/ACM 16th International Conference on Mining Software Repositories (MSR)","author":"Wang Shaohua","year":"2019","unstructured":"Shaohua Wang, NhatHai Phan, Yan Wang, and Yong Zhao. 2019. Extracting API tips from developer question and answer websites. In Proceedings of the 2019 IEEE\/ACM 16th International Conference on Mining Software Repositories (MSR). IEEE, 321\u2013332."},{"key":"e_1_3_3_89_2","doi-asserted-by":"crossref","unstructured":"Jason Wei and Kai Zou. 2019. Eda: Easy data augmentation techniques for boosting performance on text classification tasks. arXiv:1901.11196. Retrieved from https:\/\/arxiv.org\/abs\/1901.11196.","DOI":"10.18653\/v1\/D19-1670"},{"key":"e_1_3_3_90_2","unstructured":"Ying Wen Weinan Zhang Rui Luo and Jun Wang. 2016. Learning text representation using recurrent convolutional neural network with highway layers. arXiv:1606.06905. Retrieved from https:\/\/arxiv.org\/abs\/1606.06905."},{"issue":"5","key":"e_1_3_3_91_2","first-page":"e1369","article-title":"Data-driven approach to application programming interface documentation mining: A review","volume":"10","author":"Wu Di","year":"2020","unstructured":"Di Wu, Xiao-Yuan Jing, Hongyu Zhang, Xiaohui Kong, Yu Xie, and Zhiguo Huang. 2020. Data-driven approach to application programming interface documentation mining: A review. Wiley Interdisciplinary Reviews: Data Mining and Knowledge Discovery 10, 5 (2020), e1369.","journal-title":"Wiley Interdisciplinary Reviews: Data Mining and Knowledge Discovery"},{"key":"e_1_3_3_92_2","doi-asserted-by":"publisher","DOI":"10.1145\/3368089.3409731"},{"key":"e_1_3_3_93_2","doi-asserted-by":"publisher","DOI":"10.1016\/j.jss.2018.04.060"},{"key":"e_1_3_3_94_2","doi-asserted-by":"publisher","DOI":"10.1145\/2884781.2884862"},{"key":"e_1_3_3_95_2","first-page":"339","volume-title":"Proceedings of the International Conference on Applications of Natural Language to Information Systems","author":"Yenigalla Promod","year":"2018","unstructured":"Promod Yenigalla, Sibsambhu Kar, Chirag Singh, Ajay Nagar, and Gaurav Mathur. 2018. Addressing unseen word problem in text classification. In Proceedings of the International Conference on Applications of Natural Language to Information Systems. Springer, 339\u2013351."},{"issue":"4","key":"e_1_3_3_96_2","doi-asserted-by":"crossref","first-page":"157","DOI":"10.4236\/jcc.2014.24021","article-title":"Tagging accuracy analysis on part-of-speech taggers","volume":"2","author":"Yumusak Semih","year":"2014","unstructured":"Semih Yumusak, Erdogan Dogdu, and Halife Kodaz. 2014. Tagging accuracy analysis on part-of-speech taggers. Journal of Computer and Communications 2, 4 (2014), 157\u2013162.","journal-title":"Journal of Computer and Communications"},{"key":"e_1_3_3_97_2","first-page":"649","volume-title":"Proceedings of the Advances in Neural Information Processing Systems","author":"Zhang Xiang","year":"2015","unstructured":"Xiang Zhang, Junbo Zhao, and Yann LeCun. 2015. Character-level convolutional networks for text classification. In Proceedings of the Advances in Neural Information Processing Systems. 649\u2013657."},{"key":"e_1_3_3_98_2","doi-asserted-by":"publisher","DOI":"10.1109\/ASE.2009.94"},{"key":"e_1_3_3_99_2","unstructured":"Peng Zhou Zhenyu Qi Suncong Zheng Jiaming Xu Hongyun Bao and Bo Xu. 2016. Text classification improved by integrating bidirectional LSTM with two-dimensional max pooling. arXiv:1611.06639. Retrieved from https:\/\/arxiv.org\/abs\/1611.06639."}],"container-title":["ACM Transactions on Software Engineering and Methodology"],"original-title":[],"language":"en","link":[{"URL":"https:\/\/dl.acm.org\/doi\/10.1145\/3512768","content-type":"unspecified","content-version":"vor","intended-application":"text-mining"},{"URL":"https:\/\/dl.acm.org\/doi\/pdf\/10.1145\/3512768","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2025,6,17]],"date-time":"2025-06-17T18:09:29Z","timestamp":1750183769000},"score":1,"resource":{"primary":{"URL":"https:\/\/dl.acm.org\/doi\/10.1145\/3512768"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2023,1,31]]},"references-count":98,"journal-issue":{"issue":"1","published-print":{"date-parts":[[2023,1,31]]}},"alternative-id":["10.1145\/3512768"],"URL":"https:\/\/doi.org\/10.1145\/3512768","relation":{},"ISSN":["1049-331X","1557-7392"],"issn-type":[{"value":"1049-331X","type":"print"},{"value":"1557-7392","type":"electronic"}],"subject":[],"published":{"date-parts":[[2023,1,31]]},"assertion":[{"value":"2021-05-27","order":0,"name":"received","label":"Received","group":{"name":"publication_history","label":"Publication History"}},{"value":"2022-01-19","order":1,"name":"accepted","label":"Accepted","group":{"name":"publication_history","label":"Publication History"}},{"value":"2023-02-13","order":2,"name":"published","label":"Published","group":{"name":"publication_history","label":"Publication History"}}]}}