Where Should The Bugs Be Fixed? More Accurate Information Retrieval-Based Bug Localization Based On Bug Reports,
Singapore Management University
Where Should The Bugs Be Fixed? More Accurate Information Retrieval-Based Bug Localization Based On Bug Reports, David Lo
Research Collection School Of Information Systems
For a large and evolving software system, the project team could receive a large number of bug reports. Locating the source code files that need to be changed in order to fix the bugs is a challenging task. Once a bug report is received, it is desirable to automatically point out to the files that developers should change in order to fix the bug. In this paper, we propose BugLocator, an information retrieval based method for locating the relevant files for fixing a bug. BugLocator ranks all files based on the textual similarity between the initial bug report and the …
The 2020 Twitter Hack – So Many Lessons To Be Learned,
Kennesaw State University
The 2020 Twitter Hack – So Many Lessons To Be Learned, Paul Witman, Scott Mackelprang
Journal of Cybersecurity Education, Research and Practice
In mid-July 2020, the social media site Twitter had over 100 of its most prominent user accounts start to tweet requests to send Bitcoin to specified Bitcoin wallets. The requests promised that the Bitcoin senders would receive their money back doubled, as a gesture of charity amidst the COVID-19 pandemic. The attack appears to have been carried out by a small group of hackers, leveraging social engineering to get access to internal Twitter support tools. These tools allowed the hackers to gain full control of the high-profile user accounts and post messages on their behalf. The attack provides many paths …
Comparison And Evaluation On Static Application Security Testing (Sast) Tools For Java,
Singapore Management University
Comparison And Evaluation On Static Application Security Testing (Sast) Tools For Java, Ruitao Feng
Research Collection School Of Computing and Information Systems
Static application security testing (SAST) takes a significant role in the software development life cycle (SDLC). However, it is challenging to comprehensively evaluate the effectiveness of SAST tools to determine which is the better one for detecting vulnerabilities. In this paper, based on well-defined criteria, we first selected seven free or open-source SAST tools from 161 existing tools for further evaluation. Owing to the synthetic and newly-constructed real-world benchmarks, we evaluated and compared these SAST tools from different and comprehensive perspectives such as effectiveness, consistency, and performance. While SAST tools perform well on synthetic benchmarks, our results indicate that only …
Mining Software Repositories For Automatic Software Bug Management From Bug Triaging To Patch Backporting,
Singapore Management University
Mining Software Repositories For Automatic Software Bug Management From Bug Triaging To Patch Backporting, Yuan Tian
Dissertations and Theses Collection
Software systems are often released with bugs due to system complexity and inadequate testing. Bug resolving process plays an important role in development and evolution of software systems because developers could collect a considerable number of bugs from users and testers daily. For instance, during September 2015, the Eclipse project received approximately 2,500 bug reports, averaging 80 new reports each day. To help developers effectively address and manage bugs, bug tracking systems such as Bugzilla and JIRA are adopted to manage the life cycle of a bug through bug report. Since most of the information related to bugs are stored …
Research On Artificial Intelligence Crime And China’S Countermeasures,
Chinese Academy of Sciences
Research On Artificial Intelligence Crime And China’S Countermeasures, Jianxin Gao, Yukun Cai
Bulletin of Chinese Academy of Sciences (Chinese Version)
The rapid development of artificial intelligence technology has constantly given rise to new scenarios, models, and markets, changing the way information and knowledge are generated. Nevertheless, the security risks exposed by technology, such as algorithm bias, data leakage, false content generation, and improper use, are also prone to trigger various new types of crimes. There are still loopholes in legal regulation and technological prevention under the current situation, which poses severe challenges to crime crackdown. In order to effectively meet the new challenges of China’s artificial intelligence (AI) crime, we should supplement and improve the existing legal norms, improve the …
Social Media Platforms And Responsibility For Disinformation,
Kennesaw State University
Social Media Platforms And Responsibility For Disinformation, Matt Figlia, Brandon Henschen, Joseph Sims, John-David Rusk
KSU Proceedings on Cybersecurity Education, Research and Practice
Researchers are paying closer attention to the rise of disinformation on social media platforms and what responsibility, if any, the companies that control these platforms have for false information being spread on their websites. In this paper, we highlight the recent growth in concern regarding online disinformation, discuss other works regarding the use of social media as a tool for spreading disinformation, and discuss how coordinated disinformation campaigns on social media platforms are used to spread propaganda and lies about current political events. We also evaluate the reactions of social media platforms in combatting disinformation and the difficulty in policing …
Breaking Through “Data Bottleneck” Of Ai Large Models—Reflections On Building A National Corpus Operation Platform,
Chinese Academy of Sciences
Breaking Through “Data Bottleneck” Of Ai Large Models—Reflections On Building A National Corpus Operation Platform, Xingteng Li
Bulletin of Chinese Academy of Sciences (Chinese Version)
At present, the competition within the global artificial intelligence (AI) large model industry is intensifying, and corpus resources emerging as a critical determinant for enhancing the technical performance and practical efficacy of AI systems. Nevertheless, China’s corpus development faces dual challenges in both quantity and quality, struggling to meet the escalating training demands of the rapidly evolving AI large model sector. Internationally, nations are ramping up efforts to develop their corpus infrastructures, particularly prioritizing the creation and deployment of high-quality linguistic datasets. In this context, through comparative analysis of international benchmarks and domestic conditions, this study proposes a strategic framework …
The Nist Artificial Intelligence Risk Management Framework: Adoption Challenges And Opportunities,
Kennesaw State University
The Nist Artificial Intelligence Risk Management Framework: Adoption Challenges And Opportunities, Paul Wagner, Robert Honomichl, Gillian Kennedy, Devin Patel, Humza Sheikh
Journal of Cybersecurity Education, Research and Practice
Artificial intelligence (AI) is being adopted at an exponential rate to improve efficiency, decision-making, and cybersecurity, but its rapid integration introduces new and often poorly understood risks, including system errors, algorithmic bias, data privacy concerns, security vulnerabilities, and ethical dilemmas. This paper examines how organizations are implementing AI and evaluates the National Institute of Standards and Technology's AI Risk Management Framework (NIST AI RMF) as a tool for managing these risks. It reviews the benefits of AI adoption alongside the risks emerging from its use in business and broader society and examines the legal and ethical challenges organizations face when …
Bluetooth Hacking: A Case Study,
Embry-Riddle Aeronautical University
Bluetooth Hacking: A Case Study, Dennis Browning, Gary Kessler, Gary Kessler, Dennis Browning
Journal of Digital Forensics, Security and Law
This paper describes a student project examining mechanisms with which to attack Bluetooth-enabled devices. The paper briefly describes the protocol architecture of Bluetooth and the Java interface that programmers can use to connect to Bluetooth communication services. Several types of attacks are described, along with a detailed example of two attack tools, Bloover II and BT Info.
Fine-Grained Commit-Level Vulnerability Type Prediction By Cwe Tree Structure,
Singapore Management University
Fine-Grained Commit-Level Vulnerability Type Prediction By Cwe Tree Structure, David Lo
Research Collection School Of Computing and Information Systems
Identifying security patches via code commits to allow early warnings and timely fixes for Open Source Software (OSS) has received increasing attention. However, the existing detection methods can only identify the presence of a patch (i.e., a binary classification) but fail to pinpoint the vulnerability type. In this work, we take the first step to categorize the security patches into fine-grained vulnerability types. Specifically, we use the Common Weakness Enumeration (CWE) as the label and perform fine-grained classification using categories at the third level of the CWE tree. We first formulate the task as a Hierarchical Multi-label Classification (HMC) problem, …
Featured Publications
