Silent Vulnerable Dependency Alert Prediction with Vulnerability Key Aspect Explanation

J. S. Bridle, “Probabilistic interpretation of feedforward classification network outputs, with relationships to statistical pattern recognition,” in Neurocomputing . Springer, 1990, pp. 227–236

1990

Earlier work this paper cites.

J. Viega, J. Bloch, Y. Kohno, and G. McGraw, “Its4: a static vulnerability scanner for c and c++ code,” in Proceedings 16th Annual Computer Security Applications Conference (ACSAC’00) , 2000, pp. 257–267

2000

Earlier work this paper cites.

C.-Y. Lin, “Rouge: A package for automatic evaluation of summaries,” in Text summarization branches out , 2004, pp. 74–81

2004

Earlier work this paper cites.

Y. Younan, W. Joosen, and F. Piessens, “Code injection in c and c++ : A survey of vulnerabilities and countermeasures,” DEPARTEMENT COMPUTERWETENSCHAPPEN, KATHOLIEKE UNIVERSITEIT LEUVEN, Tech. Rep., 2004

2004

Earlier work this paper cites.

N. Tintarev and J. Masthoff, “Designing and evaluating explanations for recommender systems,” in Recommender systems handbook . Springer, 2011, pp. 479–510

2011

Earlier work this paper cites.

I. Papagiannis, M. Migliavacca, and P. Pietzuch, “Php aspis: Using partial taint tracking to protect against injection attacks,” 06 2011, pp. 2–2

2011

Earlier work this paper cites.

J. Tang, H. Gao, H. Liu, and A. Das Sarma, “etrust: Understanding trust evolution in an online world,” in Proceedings of the 18th ACM SIGKDD international conference on Knowledge discovery and data mining , 2012, pp. 253–261

2012

Earlier work this paper cites.

A. Graves, N. Jaitly, and A.-r. Mohamed, “Hybrid speech recognition with deep bidirectional lstm,” in 2013 IEEE workshop on automatic speech recognition and understanding . IEEE, 2013, pp. 273–278

2013

Earlier work this paper cites.

T. Mikolov, I. Sutskever, K. Chen, G. S. Corrado, and J. Dean, “Distributed representations of words and phrases and their compositionality,” Advances in neural information processing systems , vol. 26, 2013

2013

Earlier work this paper cites.

K. Simonyan, A. Vedaldi, and A. Zisserman, “Deep inside convolutional networks: Visualising image classification models and saliency maps,” arXiv preprint arXiv:1312.6034 , 2013

Original

2013

Earlier work this paper cites.

H. Sak, A. W. Senior, and F. Beaufays, “Long short-term memory recurrent neural network architectures for large scale acoustic modeling,” 2014

2014

Earlier work this paper cites.

M. D. Zeiler and R. Fergus, “Visualizing and understanding convolutional networks,” in European conference on computer vision . Springer, 2014, pp. 818–833

2014

Earlier work this paper cites.

A. Bussone, S. Stumpf, and D. O’Sullivan, “The role of explanations on trust and reliance in clinical decision support systems,” in 2015 international conference on healthcare informatics . IEEE, 2015, pp. 160–169

2015

Earlier work this paper cites.

M. K. Lee, D. Kusbit, E. Metsky, and L. Dabbish, “Working with machines: The impact of algorithmic and data-driven management on human workers,” in Proceedings of the 33rd annual ACM conference on human factors in computing systems , 2015, pp. 1603–1612

2015

Earlier work this paper cites.

K. Greff, R. K. Srivastava, J. Koutník, B. R. Steunebrink, and J. Schmidhuber, “Lstm: A search space odyssey,” IEEE transactions on neural networks and learning systems , vol. 28, no. 10, pp. 2222–2232, 2016

2016

Earlier work this paper cites.

J. Zhou, Y. Cao, X. Wang, P. Li, and W. Xu, “Deep recurrent models with fast-forward connections for neural machine translation,” Transactions of the Association for Computational Linguistics , vol. 4, pp. 371–383, 2016

2016

Earlier work this paper cites.

K. He, X. Zhang, S. Ren, and J. Sun, “Deep residual learning for image recognition,” in Proceedings of the IEEE conference on computer vision and pattern recognition , 2016, pp. 770–778

2016

Earlier work this paper cites.

H. Lakkaraju, S. H. Bach, and J. Leskovec, “Interpretable decision sets: A joint framework for description and prediction,” in Proceedings of the 22nd ACM SIGKDD international conference on knowledge discovery and data mining , 2016, pp. 1675–1684

2016

Earlier work this paper cites.

F. Li and V. Paxson, A Large-Scale Empirical Study of Security Patches . New York, NY, USA: Association for Computing Machinery, 2017, p. 2201–2215

2017

Earlier work this paper cites.

Y. Zhou and A. Sharma, “Automated identification of security issues from commit messages and bug reports,” in Proceedings of the 2017 11th Joint Meeting on Foundations of Software Engineering , ser. ESEC/FSE 2017. Association for Computing Machinery, 2017, p. 914–919

2017

Earlier work this paper cites.

A. Vaswani, N. Shazeer, N. Parmar, J. Uszkoreit, L. Jones, A. N. Gomez, L. Kaiser, and I. Polosukhin, “Attention is all you need,” in Proceedings of the 31st International Conference on Neural Information Processing Systems , ser. NIPS’17, 2017, p. 6000–6010

2017

Earlier work this paper cites.

S. Berkovsky, R. Taib, and D. Conway, “How to recommend? user trust factors in movie recommender systems,” in Proceedings of the 22nd international conference on intelligent user interfaces , 2017, pp. 287–300

2017

Earlier work this paper cites.

S. Ponta, H. Plate, and A. Sabetta, “Beyond metadata: Code-centric and usage-based analysis of known vulnerabilities in open-source software,” 06 2018

2018

Earlier work this paper cites.

J. Ruohonen, S. Rauti, S. Hyrynsalmi, and V. Leppänen, “A case study on software vulnerability coordination,” Information and Software Technology , vol. 103, pp. 239–257, 2018

2018

Earlier work this paper cites.

A. Sabetta and M. Bezzi, “A practical approach to the automatic classification of security-relevant commits,” 07 2018

2018

Earlier work this paper cites.

S. Mohseni, N. Zarei, and E. D. Ragan, “A survey of evaluation methods and measures for interpretable machine learning,” ArXiv , vol. abs/1811.11839, 2018

Original

2018

Earlier work this paper cites.

F. Hohman, M. Kahng, R. Pienta, and D. H. Chau, “Visual analytics in deep learning: An interrogative survey for the next frontiers,” IEEE transactions on visualization and computer graphics , vol. 25, no. 8, pp. 2674–2693, 2018

2018

Earlier work this paper cites.

S. E. Ponta, H. Plate, A. Sabetta, M. Bezzi, and C. Dangremont, “A manually-curated dataset of fixes to vulnerabilities of open-source software,” in Proceedings of the 16th International Conference on Mining Software Repositories , ser. MSR ’19. IEEE Press, 2019, p. 383–387

2019

Earlier work this paper cites.

Y. Dong, W. Guo, Y. Chen, X. Xing, Y. Zhang, and G. Wang, “Towards the detection of inconsistencies in public security vulnerability reports,” in 28th USENIX Security Symposium (USENIX Security 19) . Santa Clara, CA: USENIX Association, Aug. 2019, pp. 869–885

2019

Cited alongside, same era.

R. Sen, J. Choobineh, and S. Kumar, “Determinants of software vulnerability disclosure timing,” Production and Operations Management , vol. 29, 10 2019

2019

Cited alongside, same era.

M. Zolanvari, M. A. Teixeira, L. Gupta, K. M. Khan, and R. Jain, “Machine learning-based network vulnerability analysis of industrial internet of things,” IEEE Internet of Things Journal , vol. 6, no. 4, pp. 6822–6834, 2019

2019

Cited alongside, same era.

S. Liu, G. Lin, Q.-L. Han, S. Wen, J. Zhang, and Y. Xiang, “Deepbalance: Deep-learning and fuzzy oversampling for vulnerability detection,” IEEE Transactions on Fuzzy Systems , vol. 28, no. 7, pp. 1329–1343, 2019

2019

Cited alongside, same era.

M. Nourani, C. Roy, J. E. Block, D. R. Honeycutt, T. Rahman, E. Ragan, and V. Gogate, “Anchoring bias affects mental model formation and user reliance in explainable ai systems,” in 26th International Conference on Intelligent User Interfaces , 2021, pp. 340–350

2021

Later among the works it cites.

C. K. Tantithamthavorn and J. Jiarpakdee, “Explainable ai for software engineering,” in 2021 36th IEEE/ACM International Conference on Automated Software Engineering (ASE) . IEEE, 2021, pp. 1–2

2021

Later among the works it cites.

Y. Li, S. Wang, and T. N. Nguyen, “Vulnerability detection with fine-grained interpretations,” in Proceedings of the 29th ACM Joint Meeting on European Software Engineering Conference and Symposium on the Foundations of Software Engineering , 2021, pp. 292–303

2021

Later among the works it cites.

J. Jiarpakdee, C. K. Tantithamthavorn, and J. Grundy, “Practitioners’ perceptions of the goals and visual explanations of defect prediction models,” in 2021 IEEE/ACM 18th International Conference on Mining Software Repositories (MSR) . IEEE, 2021, pp. 432–443