Do Chase Your Tail! Missing Key Aspects Augmentation in Textual Vulnerability Descriptions of Long-tail Software through Feature Inference

Understand

Augmenting missing key aspects in Textual Vulnerability Descriptions (TVDs) is crucial for effective vulnerability analysis.

• For instance, in TVDs, key aspects include Attack Vector, Vulnerability Type, among others.
• These key aspects help security engineers understand and address the vulnerability in a timely manner.
• For software with a large user base (non-long-tail software), augmenting these missing key aspects has significantly advanced vulnerability analysis and software security research.