A C/C++ Code Vulnerability Dataset with Code Changes and CVE SummariesMSR - Data Showcase
In this paper, we collected a C/C++ code vulnerability dataset from open-source projects. We crawled the public Common Vulnerabilities and Exposures (CVE) database and CVE-related code repositories. From the CVE database, we collected the descriptive information of the vulnerabilities, e.g., CVE IDs, CVE severity scores, and CVE summaries. With the CVE information and its related published Git code repository links, we downloaded all of the code repositories and extract vulnerability related code changes. In total, our dataset contains 3754 code vulnerabilities spanning 91 different vulnerability types. All these code vulnerabilities are extracted from 348 Git projects. All this information has been stored in CSV format with clear structure. The code changes and CVE descriptive information were mapped to each other so that the dataset could be used for many research areas, e.g., vulnerability detection and vulnerability fixing patches identification.
Tue 30 JunDisplayed time zone: (UTC) Coordinated Universal Time change
11:00 - 12:00 | SecurityData Showcase / Technical Papers at MSR:Zoom2 Chair(s): Dimitris Mitropoulos Athens University of Economics and Business Q/A & Discussion of Session Papers over Zoom (Joining info available on Slack) | ||
11:00 12mLive Q&A | Did You Remember To Test Your Tokens?MSR - Technical Paper Technical Papers Danielle Gonzalez Rochester Institute of Technology, USA, Michael Rath Technische Universität Ilmenau, Mehdi Mirakhorli Rochester Institute of Technology DOI Pre-print Media Attached | ||
11:12 12mLive Q&A | Automatically Granted Permissions in Android appsMSR - Technical Paper Technical Papers Paolo Calciati IMDEA Software Institute, Konstantin Kuznetsov Saarland University, CISPA, Alessandra Gorla IMDEA Software Institute, Andreas Zeller CISPA Helmholtz Center for Information Security Media Attached | ||
11:24 12mLive Q&A | PUMiner: Mining Security Posts from Developer Question and Answer Websites with PU LearningMSR - Technical Paper Technical Papers Triet Le The University of Adelaide, David Hin , Roland Croft , Muhammad Ali Babar The University of Adelaide DOI Pre-print Media Attached | ||
11:36 12mLive Q&A | A C/C++ Code Vulnerability Dataset with Code Changes and CVE SummariesMSR - Data Showcase Data Showcase A: Jiahao Fan New Jersey Institute of Technology, USA, A: Yi Li New Jersey Institute of Technology, USA, A: Shaohua Wang New Jersey Institute of Technology, USA, A: Tien N. Nguyen University of Texas at Dallas Media Attached | ||
11:48 12mLive Q&A | The Impact of a Major Security Event on an Open Source Project: The Case of OpenSSLMSR - Technical Paper Technical Papers James Walden Northern Kentucky University Pre-print Media Attached |