DC Field | Value | Language |
---|---|---|
dc.contributor.author | Yang, Joonseok | ko |
dc.contributor.author | Ryu, Duksan | ko |
dc.contributor.author | Baik, Jong Moon | ko |
dc.date.accessioned | 2016-07-05T08:04:56Z | - |
dc.date.available | 2016-07-05T08:04:56Z | - |
dc.date.created | 2016-06-03 | - |
dc.date.created | 2016-06-03 | - |
dc.date.issued | 2016-01-20 | - |
dc.identifier.citation | International Conference on Big Data and Smart Computing, BigComp 2016, pp.115 - 122 | - |
dc.identifier.uri | http://hdl.handle.net/10203/209271 | - |
dc.description.abstract | As the need of software has been increasing, the danger of malicious attacks against software has been worse. In order to fortify software systems against adversaries, researchers have devoted significant efforts on mitigating software vulnerabilities. To eliminate security vulnerabilities from software with lower inspection effort, vulnerability prediction approaches have been emerged. By allocating human and time resource on the potentially vulnerable subset, development organization could eliminate vulnerabilities in a cost effective manner. In the vulnerability prediction approaches, a vulnerability prediction model is constructed based on various software attributes. However, vulnerability prediction models based on the traditional software attributes have provided poor prediction accuracy or low cost effectiveness since the traditional software attributes are unable to reflect vulnerability characteristics sufficiently. In this paper, we propose a novel vulnerability prediction approach based on the CERT-C Secure Coding Standard. To evaluate the efficacy of the proposed approach, the prediction results of the suggested prediction models and other traditional models were assessed in terms of prediction accuracy and cost effectiveness. The results show that the proposed method can improve the vulnerability prediction accuracy. | - |
dc.language | English | - |
dc.publisher | Institute of Electrical and Electronics Engineers Inc. | - |
dc.title | Improving Vulnerability Prediction Accuracy with Secure Coding Standard Violation Measures | - |
dc.type | Conference | - |
dc.identifier.wosid | 000381792400016 | - |
dc.identifier.scopusid | 2-s2.0-84964669821 | - |
dc.type.rims | CONF | - |
dc.citation.beginningpage | 115 | - |
dc.citation.endingpage | 122 | - |
dc.citation.publicationname | International Conference on Big Data and Smart Computing, BigComp 2016 | - |
dc.identifier.conferencecountry | HK | - |
dc.identifier.conferencelocation | Regal Riverside Hotel, Hong Kong | - |
dc.identifier.doi | 10.1109/BIGCOMP.2016.7425809 | - |
dc.embargo.liftdate | 9999-12-31 | - |
dc.embargo.terms | 9999-12-31 | - |
dc.contributor.localauthor | Baik, Jong Moon | - |
dc.contributor.nonIdAuthor | Yang, Joonseok | - |
Items in DSpace are protected by copyright, with all rights reserved, unless otherwise indicated.