Towards an Improved Understanding of Software Vulnerability Assessment Using Data-Driven Approaches

Triet H. M. Le

Towards an Improved Understanding of Software Vulnerability Assessment Using Data-Driven Approaches

Not yet reviewed by Pith; the record is open.

Re-run · record.json Download PDF Read on arXiv ↗

This paper has not been read by Pith yet. Machine review is queued; the pith claim, tier, and objections will appear here once it completes.

SPECIMEN: schema-true, not a live event

T0 review · schema-true

One-sentence machine reading of the paper's core claim.

pith:XXXXXXXX · record.json · timestamp

arxiv 2207.11708 v3 pith:4362YCEM submitted 2022-07-24 cs.SE cs.CRcs.LG

Triet H. M. Le This is my paper · ORCID

classification cs.SEcs.CRcs.LG

keywords softwareassessmentdata-drivenvulnerabilityapproachesknowledgesecuritythesis

verification ladder T0 review T1 audit T2 compute T3 formal

Signed reviews

No signed human review yet.

0 comments

read the original abstract

The thesis advances the field of software security by providing knowledge and automation support for software vulnerability assessment using data-driven approaches. Software vulnerability assessment provides important and multifaceted information to prevent and mitigate dangerous cyber-attacks in the wild. The key contributions include a systematisation of knowledge, along with a suite of novel data-driven techniques and practical recommendations for researchers and practitioners in the area. The thesis results help improve the understanding and inform the practice of assessing ever-increasing vulnerabilities in real-world software systems. This in turn enables more thorough and timely fixing prioritisation and planning of these critical security issues.

Discussion (0). Continue with ORCID to comment.

Forward citations

Cited by 1 Pith paper

Reviewed papers in the Pith corpus that reference this work. Sorted by Pith novelty score. Full citation record

LLMSecConfig: An LLM-Based Approach for Fixing Software Container Misconfigurations
cs.SE 2025-02 conditional novelty 6.0 of 10

LLMSecConfig couples Checkov static analysis with retrieval-augmented LLM prompting to repair Kubernetes security misconfigurations, reaching a 94.3% pass rate with Mistral Large 2.

Pith tools