Title
Extracting Rules For Vulnerabilities Detection With Static Metrics Using Machine Learning
Abstract
Software quality is the prime solicitude in software engineering and vulnerability is one of the major threat in this respect. Vulnerability hampers the security of the software and also impairs the quality of the software. In this paper, we have conducted experimental research on evaluating the utility of machine learning algorithms to detect the vulnerabilities. To execute this experiment; a set of software metrics was extracted using machine learning in the form of easily accessible laws. Here, 32 supervised machine learning algorithms have been considered for 3 most occurred vulnerabilities namely:Lawofdemeter,BeanMemberShouldSerialize,andLocalVariablecouldBeFinalin a software system. Using the J48 machine learning algorithm in this research, up to 96% of accurate result in vulnerability detection was achieved. The results are validated against tenfold cross validation and also, the statistical parameters like ROC curve, Kappa statistics; Recall, Precision, etc. have been used for analyzing the result.
Year
DOI
Venue
2021
10.1007/s13198-020-01036-0
INTERNATIONAL JOURNAL OF SYSTEM ASSURANCE ENGINEERING AND MANAGEMENT
Keywords
DocType
Volume
Software metrics, Machine learning, Static code analysis, Supervised learning
Journal
12
Issue
ISSN
Citations 
1
0975-6809
0
PageRank 
References 
Authors
0.34
0
4
Name
Order
Citations
PageRank
Aakanshi Gupta100.34
Bharti Suri2638.02
Vijay Kumar300.34
Pragyashree Jain400.34