{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,3,4]],"date-time":"2026-03-04T06:37:16Z","timestamp":1772606236182,"version":"3.50.1"},"publisher-location":"New York, NY, USA","reference-count":50,"publisher":"ACM","license":[{"start":{"date-parts":[[2022,11,7]],"date-time":"2022-11-07T00:00:00Z","timestamp":1667779200000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/www.acm.org\/publications\/policies\/copyright_policy#Background"}],"content-domain":{"domain":["dl.acm.org"],"crossmark-restriction":true},"short-container-title":[],"published-print":{"date-parts":[[2022,11,7]]},"DOI":"10.1145\/3558489.3559066","type":"proceedings-article","created":{"date-parts":[[2022,11,9]],"date-time":"2022-11-09T20:08:53Z","timestamp":1668024533000},"page":"2-11","update-policy":"https:\/\/doi.org\/10.1145\/crossmark-policy","source":"Crossref","is-referenced-by-count":5,"title":["Improving the performance of code vulnerability prediction using abstract syntax tree information"],"prefix":"10.1145","author":[{"given":"Fahad","family":"Al Debeyan","sequence":"first","affiliation":[{"name":"Lancaster University, UK"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Tracy","family":"Hall","sequence":"additional","affiliation":[{"name":"Lancaster University, UK"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"David","family":"Bowes","sequence":"additional","affiliation":[{"name":"Lancaster University, UK"}],"role":[{"role":"author","vocabulary":"crossref"}]}],"member":"320","published-online":{"date-parts":[[2022,11,9]]},"reference":[{"key":"e_1_3_2_1_1_1","doi-asserted-by":"publisher","unstructured":"Fahad Al Debeyan Tracy Hall and David Bowes. 2022. AST N-grams Vulnerability Prediction Replication Package. 9 https:\/\/doi.org\/10.6084\/m9.figshare.19354547.v1 10.6084\/m9.figshare.19354547.v1","DOI":"10.6084\/m9.figshare.19354547.v1"},{"key":"e_1_3_2_1_2_1","doi-asserted-by":"publisher","unstructured":"Fahad Al Debeyan Tracy Hall and David Bowes. 2022. Online Appendix. https:\/\/doi.org\/10.6084\/m9.figshare.20597982.v1 10.6084\/m9.figshare.20597982.v1","DOI":"10.6084\/m9.figshare.20597982.v1"},{"key":"e_1_3_2_1_3_1","doi-asserted-by":"publisher","DOI":"10.1109\/TKDE.2012.232"},{"key":"e_1_3_2_1_4_1","doi-asserted-by":"publisher","DOI":"10.1109\/ACCESS.2020.3016774"},{"key":"e_1_3_2_1_5_1","volume-title":"Optimal classifier for imbalanced data using Matthews Correlation Coefficient metric. PLOS ONE, 12, 6","author":"Boughorbel Sabri","year":"2017","unstructured":"Sabri Boughorbel, Fethi Jarray, and Mohammed El-Anbari. 2017. Optimal classifier for imbalanced data using Matthews Correlation Coefficient metric. PLOS ONE, 12, 6 (2017), 06, 1\u201317."},{"key":"e_1_3_2_1_6_1","doi-asserted-by":"publisher","DOI":"10.1109\/ISSREW.2017.11"},{"key":"e_1_3_2_1_7_1","volume-title":"SMOTE: Synthetic Minority Over-sampling Technique. CoRR, abs\/1106.1813","author":"Bowyer Kevin W.","year":"2011","unstructured":"Kevin W. Bowyer, Nitesh V. Chawla, Lawrence O. Hall, and W. Philip Kegelmeyer. 2011. SMOTE: Synthetic Minority Over-sampling Technique. CoRR, abs\/1106.1813 (2011), arxiv:1106.1813."},{"key":"e_1_3_2_1_8_1","doi-asserted-by":"publisher","DOI":"10.1016\/j.infsof.2021.106576"},{"key":"e_1_3_2_1_9_1","doi-asserted-by":"publisher","DOI":"10.1109\/TSE.2021.3087402"},{"key":"e_1_3_2_1_10_1","doi-asserted-by":"publisher","DOI":"10.1186\/s12864-019-6413-7"},{"key":"e_1_3_2_1_11_1","volume-title":"John Grundy, and Aditya Ghose.","author":"Dam Hoa Khanh","year":"2017","unstructured":"Hoa Khanh Dam, Truyen Tran, Trang Pham, Shien Wee Ng, John Grundy, and Aditya Ghose. 2017. Automatic feature learning for vulnerability prediction. CoRR, abs\/1708.02368 (2017)."},{"key":"e_1_3_2_1_12_1","doi-asserted-by":"publisher","DOI":"10.1109\/TSE.2018.2881961"},{"key":"e_1_3_2_1_13_1","unstructured":"Frank Eibe Mark A Hall and Ian H Witten. 2016. The WEKA workbench. Online appendix for data mining: practical machine learning tools and techniques. In Morgan Kaufmann."},{"key":"e_1_3_2_1_14_1","doi-asserted-by":"publisher","DOI":"10.1007\/s11416-013-0181-8"},{"key":"e_1_3_2_1_15_1","volume-title":"Software Vulnerability Analysis and Discovery Using Machine-Learning and Data-Mining Techniques: A Survey. ACM Comput. Surv., 50, 4","author":"Ghaffarian Seyed Mohammad","year":"2017","unstructured":"Seyed Mohammad Ghaffarian and Hamid Reza Shahriari. 2017. Software Vulnerability Analysis and Discovery Using Machine-Learning and Data-Mining Techniques: A Survey. ACM Comput. Surv., 50, 4 (2017), Article 56, 8, 36 pages. issn:0360-0300"},{"key":"e_1_3_2_1_16_1","unstructured":"Margherita Grandini Enrico Bagli and Giorgio Visani. 2020. Metrics for Multi-Class Classification: an Overview. arxiv:2008.05756."},{"key":"e_1_3_2_1_17_1","volume-title":"ADASYN: Adaptive synthetic sampling approach for imbalanced learning. In 2008 IEEE International Joint cConf.erence on Neural Networks","author":"He Haibo","year":"2008","unstructured":"Haibo He, Yang Bai, Edwardo A. Garcia, and Shutao Li. 2008. ADASYN: Adaptive synthetic sampling approach for imbalanced learning. In 2008 IEEE International Joint cConf.erence on Neural Networks (IEEE World Congress on Computational Intelligence). 1322\u20131328."},{"key":"e_1_3_2_1_18_1","doi-asserted-by":"publisher","DOI":"10.1109\/TSE.2022.3140868"},{"key":"e_1_3_2_1_19_1","doi-asserted-by":"publisher","DOI":"10.1145\/3238147.3238176"},{"key":"e_1_3_2_1_20_1","doi-asserted-by":"publisher","DOI":"10.1145\/3029806.3029815"},{"key":"e_1_3_2_1_21_1","volume-title":"SySeVR: A Framework for Using Deep Learning to Detect Software Vulnerabilities. CoRR, abs\/1807.06756","author":"Li Zhen","year":"2018","unstructured":"Zhen Li, Deqing Zou, Shouhuai Xu, Hai Jin, Yawei Zhu, Zhaoxuan Chen, Sujuan Wang, and Jialai Wang. 2018. SySeVR: A Framework for Using Deep Learning to Detect Software Vulnerabilities. CoRR, abs\/1807.06756 (2018)."},{"key":"e_1_3_2_1_22_1","volume-title":"VulDeePecker: A Deep Learning-Based System for Vulnerability Detection. CoRR, abs\/1801.01681","author":"Li Zhen","year":"2018","unstructured":"Zhen Li, Deqing Zou, Shouhuai Xu, Xinyu Ou, Hai Jin, Sujuan Wang, Zhijun Deng, and Yuyi Zhong. 2018. VulDeePecker: A Deep Learning-Based System for Vulnerability Detection. CoRR, abs\/1801.01681 (2018)."},{"key":"e_1_3_2_1_23_1","doi-asserted-by":"publisher","DOI":"10.1145\/3133956.3138840"},{"key":"e_1_3_2_1_24_1","doi-asserted-by":"publisher","DOI":"10.1109\/TFUZZ.2019.2958558"},{"key":"e_1_3_2_1_25_1","doi-asserted-by":"crossref","unstructured":"Rui Ma Zefeng Jian Guangyuan Chen Ke Ma and Yujia Chen. 2019. ReJection: A AST-Based Reentrancy Vulnerability Detection Method. In Chinese cConf.erence on Trusted Computing and Information Security. 58\u201371.","DOI":"10.1007\/978-981-15-3418-8_5"},{"key":"e_1_3_2_1_26_1","volume-title":"Digital Investigation of PDF Files: Unveiling Traces of Embedded Malware. CoRR, abs\/1707.05102","author":"Maiorca Davide","year":"2017","unstructured":"Davide Maiorca and Battista Biggio. 2017. Digital Investigation of PDF Files: Unveiling Traces of Embedded Malware. CoRR, abs\/1707.05102 (2017)."},{"key":"e_1_3_2_1_27_1","doi-asserted-by":"publisher","DOI":"10.1145\/2746194.2746198"},{"key":"e_1_3_2_1_28_1","unstructured":"NIST. 2021. Software Assurance Reference Dataset (SARD). https:\/\/samate.nist.gov\/SRD\/"},{"key":"e_1_3_2_1_29_1","volume-title":"Automatic Identification of Vulnerable Code: Investigations with an AST-Based Neural Network. In 2021 IEEE 45th Annual Computers, Software, and Applications cConf.erence (COMPSAC). 1475\u20131482","author":"Partenza Garrett","unstructured":"Garrett Partenza, Trevor Amburgey, Lin Deng, Josh Dehlinger, and Suranjan Chakraborty. 2021. Automatic Identification of Vulnerable Code: Investigations with an AST-Based Neural Network. In 2021 IEEE 45th Annual Computers, Software, and Applications cConf.erence (COMPSAC). 1475\u20131482."},{"key":"e_1_3_2_1_30_1","doi-asserted-by":"crossref","unstructured":"Valentina Piantadosi Simone Scalabrino and Rocco Oliveto. 2019. Fixing of Security Vulnerabilities in Open Source Projects: A Case Study of Apache HTTP Server and Apache Tomcat. In 2019 12th IEEE cConf.erence on Software Testing Validation and Verification (ICST). 68\u201378.","DOI":"10.1109\/ICST.2019.00017"},{"key":"e_1_3_2_1_31_1","volume-title":"A ground-truth dataset of real security patches. CoRR, abs\/2110.09635","author":"Reis Sofia","year":"2021","unstructured":"Sofia Reis and Rui Abreu. 2021. A ground-truth dataset of real security patches. CoRR, abs\/2110.09635 (2021)."},{"key":"e_1_3_2_1_32_1","volume-title":"McConley","author":"Russell Rebecca L.","year":"2018","unstructured":"Rebecca L. Russell, Louis Y. Kim, Lei H. Hamilton, Tomo Lazovich, Jacob A. Harer, Onur Ozdemir, Paul M. Ellingwood, and Marc W. McConley. 2018. Automated Vulnerability Detection in Source Code Using Deep Representation Learning. CoRR, abs\/1807.04320 (2018)."},{"key":"e_1_3_2_1_33_1","volume-title":"The truth of the f-measure","author":"Sasaki Yutaka","year":"2007","unstructured":"Yutaka Sasaki. 2007. The truth of the f-measure. 2007. https:\/\/www.cs.odu.edu\/ mukka\/cs795sum09dm\/Lecturenotes\/Day3\/F-measure-YS-26Oct07.pdf"},{"key":"e_1_3_2_1_34_1","doi-asserted-by":"publisher","DOI":"10.1109\/TSE.2014.2340398"},{"key":"e_1_3_2_1_35_1","doi-asserted-by":"publisher","DOI":"10.1145\/3368089.3409723"},{"key":"e_1_3_2_1_36_1","doi-asserted-by":"publisher","DOI":"10.1109\/SP.2019.00052"},{"key":"e_1_3_2_1_37_1","doi-asserted-by":"publisher","DOI":"10.1016\/j.cola.2020.100979"},{"key":"e_1_3_2_1_38_1","doi-asserted-by":"publisher","DOI":"10.1145\/1414004.1414065"},{"key":"e_1_3_2_1_39_1","volume-title":"Can traditional fault prediction models be used for vulnerability prediction? Empirical Software Engineering, 18, 1","author":"Shin Yonghee","year":"2013","unstructured":"Yonghee Shin and Laurie Williams. 2013. Can traditional fault prediction models be used for vulnerability prediction? Empirical Software Engineering, 18, 1 (2013), 01 2, 25\u201359. issn:1573-7616"},{"key":"e_1_3_2_1_40_1","doi-asserted-by":"publisher","DOI":"10.1016\/j.infsof.2018.10.001"},{"key":"e_1_3_2_1_41_1","doi-asserted-by":"publisher","DOI":"10.1016\/j.eswa.2013.08.015"},{"key":"e_1_3_2_1_42_1","doi-asserted-by":"publisher","DOI":"10.1145\/3029806.3029825"},{"key":"e_1_3_2_1_43_1","doi-asserted-by":"publisher","DOI":"10.1002\/smr.2303"},{"key":"e_1_3_2_1_44_1","doi-asserted-by":"publisher","DOI":"10.1016\/j.infsof.2019.106204"},{"key":"e_1_3_2_1_45_1","unstructured":"Alexander Trautsch Steffen Herbold and Jens Grabowski. 2021. Are automated static analysis tools worth it? An investigation into relative warning density and external software quality. arxiv:2111.09188."},{"key":"e_1_3_2_1_46_1","doi-asserted-by":"publisher","DOI":"10.1145\/2970276.2970341"},{"key":"e_1_3_2_1_47_1","unstructured":"Tielei Wang Tao Wei Zhiqiang Lin and Wei Zou. 2009. IntScope: Automatically Detecting Integer Overflow Vulnerability in X86 Binary Using Symbolic Execution.. In NDSS."},{"key":"e_1_3_2_1_48_1","volume-title":"Topical N-Grams: Phrase and Topic Discovery, with an Application to Information Retrieval","author":"Wang Xuerui","year":"2007","unstructured":"Xuerui Wang, Andrew McCallum, and Xing Wei. 2007. Topical N-Grams: Phrase and Topic Discovery, with an Application to Information Retrieval. In Seventh IEEE International cConf.erence on Data Mining (ICDM 2007). 697\u2013702."},{"key":"e_1_3_2_1_49_1","volume-title":"Charagram: Embedding Words and Sentences via Character n-grams. CoRR, abs\/1607.02789","author":"Wieting John","year":"2016","unstructured":"John Wieting, Mohit Bansal, Kevin Gimpel, and Karen Livescu. 2016. Charagram: Embedding Words and Sentences via Character n-grams. CoRR, abs\/1607.02789 (2016)."},{"key":"e_1_3_2_1_50_1","volume-title":"Xiaoning Du, and Yang Liu.","author":"Zhou Yaqin","year":"2019","unstructured":"Yaqin Zhou, Shangqing Liu, Jing Kai Siow, Xiaoning Du, and Yang Liu. 2019. Devign: Effective Vulnerability Identification by Learning Comprehensive Program Semantics via Graph Neural Networks. CoRR, abs\/1909.03496 (2019)."}],"event":{"name":"PROMISE '22: 18th International Conference on Predictive Models and Data Analytics in Software Engineering","location":"Singapore Singapore","acronym":"PROMISE '22","sponsor":["SIGSOFT ACM Special Interest Group on Software Engineering","NUS NUS"]},"container-title":["Proceedings of the 18th International Conference on Predictive Models and Data Analytics in Software Engineering"],"original-title":[],"link":[{"URL":"https:\/\/dl.acm.org\/doi\/10.1145\/3558489.3559066","content-type":"unspecified","content-version":"vor","intended-application":"text-mining"},{"URL":"https:\/\/dl.acm.org\/doi\/pdf\/10.1145\/3558489.3559066","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2025,6,17]],"date-time":"2025-06-17T16:47:08Z","timestamp":1750178828000},"score":1,"resource":{"primary":{"URL":"https:\/\/dl.acm.org\/doi\/10.1145\/3558489.3559066"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2022,11,7]]},"references-count":50,"alternative-id":["10.1145\/3558489.3559066","10.1145\/3558489"],"URL":"https:\/\/doi.org\/10.1145\/3558489.3559066","relation":{},"subject":[],"published":{"date-parts":[[2022,11,7]]},"assertion":[{"value":"2022-11-09","order":2,"name":"published","label":"Published","group":{"name":"publication_history","label":"Publication History"}}]}}