Heuristic and Knowledge-Based Security Checks of Source Code Artifacts Using Community Knowledge
By (author) Fabien Patrick Viertel
Paperback (Published)
(August 2021)
ISBN: 9783832553494
5.71 x 8.27 inches
Price: $75.00
Out of stock
The goal of this dissertation is to support developers in applying security checks using community knowledge. Artificial intelligence approaches combined with natural language processing techniques are employed to identify security-related information from community websites such as Stack Overflow or GitHub. All security-related information is stored in a security knowledge base. This knowledge base provides code fragments that represent the community’s knowledge about vulnerabilities, security-patches, and exploits. Comprehensive knowledge is required to carry out security checks on software artifacts, such as data covering known vulnerabilities and their manifestation in the source code as well as possible attack strategies. Approaches that check software libraries and source code fragments are provided for the automated use of the data. Insecure software libraries can be detected using the NVD combined with metadata and library file hash approaches introduced in this dissertation. Vulnerable source code fragments can be identified using community knowledge represented by code fragments extracted from the largest coding community websites: Stack Overflow and GitHub. A state-of-the-art clone detection approach is modified and enriched by several heuristics to enable vulnerability detection and leverage community knowledge while maintaining good performance. Using various case studies, the approaches implemented in Eclipse plugins and a JIRA plugin are adapted to the users’ needs and evaluated.
- By (author) Fabien Patrick Viertel
Similar Books
Care in an Era of New Technologies and Artificial Intelligence
Relationships in a Connected World
Volume 14
Buchblogs zwischen Passion und Profession
Zur Diskursivierung digitaler literaturbezogener Anschlusskommunikation als Arbeit
Volume 5
Proceedings of the 7th Symposium of the Hellenic Society for Archaeometry
Archaeology Archaeometry: 30 Years Later
Die Einfuhrung ins richtige Handeln in der Arithmetik (Madhal ar-rasad ila ‘ilm al-‘adad) von al-Qalasadi (st. 1486)
Bearbeitung und Einordnung in die magribinische Mathematikgeschichte
Volume 19
I disegni e i discorsi di Giovanni Antonio Nigrone vol. I
fontanaro e ingegniero de acqua (1585-1609 ca.)
Volume 481
I disegni e i discorsi di Giovanni Antonio Nigrone vol. II
Fontanaro e ingegniero de acqua (1585-1609 ca.)
Volume 497
Analysing Data from Capacitive Floor Sensors for Human Gait Assessment Using Artificial Neural Networks
Volume 5
Modeling Methods for Process Induced Distortions of CFRP-Parts produced in the Prepreg-Autoclave-Process
Volume 20
Performance Management in Humanitarian Logistics
Development of a Process-driven and IT-supported Performance Measurement System
Volume 66
Supporting Operational and Real-time Planning Tasks of Road Freight Transport with Machine Learning
Guiding the Implementation of Machine Learning Algorithms
Volume 69
