{"id":"https://openalex.org/W2945398222","doi":"https://doi.org/10.1109/apsec.2018.00049","title":"Categorizing and Predicting Invalid Vulnerabilities on Common Vulnerabilities and Exposures","display_name":"Categorizing and Predicting Invalid Vulnerabilities on Common Vulnerabilities and Exposures","publication_year":2018,"publication_date":"2018-12-01","ids":{"openalex":"https://openalex.org/W2945398222","doi":"https://doi.org/10.1109/apsec.2018.00049","mag":"2945398222"},"language":"en","primary_location":{"id":"doi:10.1109/apsec.2018.00049","is_oa":false,"landing_page_url":"https://doi.org/10.1109/apsec.2018.00049","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"2018 25th Asia-Pacific Software Engineering Conference (APSEC)","raw_type":"proceedings-article"},"type":"conference-paper","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5002897230","display_name":"Qiuyuan Chen","orcid":"https://orcid.org/0000-0002-1240-9095"},"institutions":[{"id":"https://openalex.org/I168879160","display_name":"Zhejiang University of Science and Technology","ror":"https://ror.org/05mx0wr29","country_code":"CN","type":"education","lineage":["https://openalex.org/I168879160"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Qiuyuan Chen","raw_affiliation_strings":["College of Computer Science and Technology, Zhejiang University, China"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"College of Computer Science and Technology, Zhejiang University, China","institution_ids":["https://openalex.org/I168879160"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5007075465","display_name":"Lingfeng Bao","orcid":"https://orcid.org/0000-0003-1846-0921"},"institutions":[{"id":"https://openalex.org/I76130692","display_name":"Zhejiang University","ror":"https://ror.org/00a2xv884","country_code":"CN","type":"education","lineage":["https://openalex.org/I76130692"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Lingfeng Bao","raw_affiliation_strings":["School of Computer and Computing Science, Zhejiang University City College, China"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"School of Computer and Computing Science, Zhejiang University City College, China","institution_ids":["https://openalex.org/I76130692"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5106407830","display_name":"Li Li","orcid":"https://orcid.org/0000-0003-2990-1614"},"institutions":[{"id":"https://openalex.org/I56590836","display_name":"Monash University","ror":"https://ror.org/02bfwt286","country_code":"AU","type":"education","lineage":["https://openalex.org/I56590836"]}],"countries":["AU"],"is_corresponding":false,"raw_author_name":"Li Li","raw_affiliation_strings":["Faculty of Information Technology, Monash University, Australia"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Faculty of Information Technology, Monash University, Australia","institution_ids":["https://openalex.org/I56590836"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5006669765","display_name":"Xin Xia","orcid":"https://orcid.org/0000-0002-6302-3256"},"institutions":[{"id":"https://openalex.org/I56590836","display_name":"Monash University","ror":"https://ror.org/02bfwt286","country_code":"AU","type":"education","lineage":["https://openalex.org/I56590836"]}],"countries":["AU"],"is_corresponding":false,"raw_author_name":"Xin Xia","raw_affiliation_strings":["Faculty of Information Technology, Monash University, Australia"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Faculty of Information Technology, Monash University, Australia","institution_ids":["https://openalex.org/I56590836"]}]},{"author_position":"last","author":{"id":null,"display_name":"Liang Cai","orcid":null},"institutions":[{"id":"https://openalex.org/I168879160","display_name":"Zhejiang University of Science and Technology","ror":"https://ror.org/05mx0wr29","country_code":"CN","type":"education","lineage":["https://openalex.org/I168879160"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Liang Cai","raw_affiliation_strings":["College of Computer Science and Technology, Zhejiang University, China"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"College of Computer Science and Technology, Zhejiang University, China","institution_ids":["https://openalex.org/I168879160"]}]}],"institutions":[],"countries_distinct_count":2,"institutions_distinct_count":3,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":1.6602,"has_fulltext":false,"cited_by_count":12,"citation_normalized_percentile":{"value":0.87199014,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":{"min":90,"max":97},"biblio":{"volume":null,"issue":null,"first_page":"345","last_page":"354"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10260","display_name":"Software Engineering Research","score":0.9995999932289124,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10260","display_name":"Software Engineering Research","score":0.9995999932289124,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T12479","display_name":"Web Application Security Vulnerabilities","score":0.9984999895095825,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":0.9983999729156494,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.8048053979873657},{"id":"https://openalex.org/keywords/vulnerability","display_name":"Vulnerability (computing)","score":0.7632488012313843},{"id":"https://openalex.org/keywords/categorization","display_name":"Categorization","score":0.6672099232673645},{"id":"https://openalex.org/keywords/leverage","display_name":"Leverage (statistics)","score":0.6272680759429932},{"id":"https://openalex.org/keywords/vulnerability-assessment","display_name":"Vulnerability assessment","score":0.5301894545555115},{"id":"https://openalex.org/keywords/computer-security","display_name":"Computer security","score":0.48817020654678345},{"id":"https://openalex.org/keywords/reputation","display_name":"Reputation","score":0.47228413820266724},{"id":"https://openalex.org/keywords/vulnerability-management","display_name":"Vulnerability management","score":0.4649905562400818},{"id":"https://openalex.org/keywords/root-cause","display_name":"Root cause","score":0.4638858437538147},{"id":"https://openalex.org/keywords/false-positive-paradox","display_name":"False positive paradox","score":0.4516890347003937},{"id":"https://openalex.org/keywords/data-mining","display_name":"Data mining","score":0.38004574179649353},{"id":"https://openalex.org/keywords/data-science","display_name":"Data science","score":0.36555179953575134},{"id":"https://openalex.org/keywords/artificial-intelligence","display_name":"Artificial intelligence","score":0.2965182065963745},{"id":"https://openalex.org/keywords/psychology","display_name":"Psychology","score":0.08970090746879578},{"id":"https://openalex.org/keywords/engineering","display_name":"Engineering","score":0.07581207156181335}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.8048053979873657},{"id":"https://openalex.org/C95713431","wikidata":"https://www.wikidata.org/wiki/Q631425","display_name":"Vulnerability (computing)","level":2,"score":0.7632488012313843},{"id":"https://openalex.org/C94124525","wikidata":"https://www.wikidata.org/wiki/Q912550","display_name":"Categorization","level":2,"score":0.6672099232673645},{"id":"https://openalex.org/C153083717","wikidata":"https://www.wikidata.org/wiki/Q6535263","display_name":"Leverage (statistics)","level":2,"score":0.6272680759429932},{"id":"https://openalex.org/C167063184","wikidata":"https://www.wikidata.org/wiki/Q1400839","display_name":"Vulnerability assessment","level":3,"score":0.5301894545555115},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.48817020654678345},{"id":"https://openalex.org/C48798503","wikidata":"https://www.wikidata.org/wiki/Q877546","display_name":"Reputation","level":2,"score":0.47228413820266724},{"id":"https://openalex.org/C172776598","wikidata":"https://www.wikidata.org/wiki/Q7943570","display_name":"Vulnerability management","level":4,"score":0.4649905562400818},{"id":"https://openalex.org/C84945661","wikidata":"https://www.wikidata.org/wiki/Q7366567","display_name":"Root cause","level":2,"score":0.4638858437538147},{"id":"https://openalex.org/C64869954","wikidata":"https://www.wikidata.org/wiki/Q1859747","display_name":"False positive paradox","level":2,"score":0.4516890347003937},{"id":"https://openalex.org/C124101348","wikidata":"https://www.wikidata.org/wiki/Q172491","display_name":"Data mining","level":1,"score":0.38004574179649353},{"id":"https://openalex.org/C2522767166","wikidata":"https://www.wikidata.org/wiki/Q2374463","display_name":"Data science","level":1,"score":0.36555179953575134},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.2965182065963745},{"id":"https://openalex.org/C15744967","wikidata":"https://www.wikidata.org/wiki/Q9418","display_name":"Psychology","level":0,"score":0.08970090746879578},{"id":"https://openalex.org/C127413603","wikidata":"https://www.wikidata.org/wiki/Q11023","display_name":"Engineering","level":0,"score":0.07581207156181335},{"id":"https://openalex.org/C137176749","wikidata":"https://www.wikidata.org/wiki/Q4105337","display_name":"Psychological resilience","level":2,"score":0.0},{"id":"https://openalex.org/C36289849","wikidata":"https://www.wikidata.org/wiki/Q34749","display_name":"Social science","level":1,"score":0.0},{"id":"https://openalex.org/C200601418","wikidata":"https://www.wikidata.org/wiki/Q2193887","display_name":"Reliability engineering","level":1,"score":0.0},{"id":"https://openalex.org/C144024400","wikidata":"https://www.wikidata.org/wiki/Q21201","display_name":"Sociology","level":0,"score":0.0},{"id":"https://openalex.org/C542102704","wikidata":"https://www.wikidata.org/wiki/Q183257","display_name":"Psychotherapist","level":1,"score":0.0}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1109/apsec.2018.00049","is_oa":false,"landing_page_url":"https://doi.org/10.1109/apsec.2018.00049","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"2018 25th Asia-Pacific Software Engineering Conference (APSEC)","raw_type":"proceedings-article"}],"best_oa_location":null,"sustainable_development_goals":[{"display_name":"Peace, Justice and strong institutions","score":0.5699999928474426,"id":"https://metadata.un.org/sdg/16"}],"awards":[],"funders":[],"has_content":{"grobid_xml":false,"pdf":false},"content_urls":null,"referenced_works_count":40,"referenced_works":["https://openalex.org/W1508191694","https://openalex.org/W1587970460","https://openalex.org/W1660390307","https://openalex.org/W1971733255","https://openalex.org/W1975879668","https://openalex.org/W1978365593","https://openalex.org/W2003529494","https://openalex.org/W2004758929","https://openalex.org/W2018582844","https://openalex.org/W2043837581","https://openalex.org/W2070638095","https://openalex.org/W2074218040","https://openalex.org/W2079753286","https://openalex.org/W2096274199","https://openalex.org/W2101234009","https://openalex.org/W2105776892","https://openalex.org/W2113693268","https://openalex.org/W2118020653","https://openalex.org/W2125121913","https://openalex.org/W2125587588","https://openalex.org/W2137203506","https://openalex.org/W2137789775","https://openalex.org/W2154398797","https://openalex.org/W2160528879","https://openalex.org/W2161911917","https://openalex.org/W2166336492","https://openalex.org/W2242800359","https://openalex.org/W2244669237","https://openalex.org/W2402612280","https://openalex.org/W2435251607","https://openalex.org/W2612705982","https://openalex.org/W2767521898","https://openalex.org/W2793878264","https://openalex.org/W2799610300","https://openalex.org/W2808113972","https://openalex.org/W2887004133","https://openalex.org/W4238011405","https://openalex.org/W6675354045","https://openalex.org/W6684187841","https://openalex.org/W6717827561"],"related_works":["https://openalex.org/W2393340519","https://openalex.org/W2390459954","https://openalex.org/W4220885008","https://openalex.org/W2057803998","https://openalex.org/W4298219515","https://openalex.org/W1613146948","https://openalex.org/W3118510577","https://openalex.org/W2021298062","https://openalex.org/W2185499427","https://openalex.org/W4388541873"],"abstract_inverted_index":{"To":[0],"share":[1],"vulnerability":[2,25,53,56,66,88,109,134,195],"information":[3],"across":[4],"separate":[5],"databases,":[6],"tools,":[7],"and":[8,19,90,120],"services,":[9],"newly":[10],"identified":[11],"vulnerabilities":[12],"are":[13,116],"recurrently":[14],"reported":[15],"to":[16,45,63,81,95,106,130,169,173],"Common":[17],"Vulnerabilities":[18],"Exposures":[20],"(CVE)":[21],"database.Unfortunately,":[22],"not":[23,58,199],"all":[24],"reports":[26,57,89,196],"will":[27],"be":[28,37,167,184,200],"accepted.":[29],"Some":[30],"of":[31,72,86,150,161,180],"them":[32],"might":[33],"get":[34],"rejected":[35,47,119],"or":[36,48,190],"accepted":[38],"with":[39],"disputations.In":[40],"this":[41,77,99],"work,":[42],"we":[43,79,101,124],"refer":[44],"those":[46],"disputed":[49,121],"CVEs":[50,182],"as":[51],"invalid":[52,87,108,133,154,181,194],"reports.":[54,135],"Invalid":[55],"only":[59],"cause":[60],"unnecessary":[61],"efforts":[62],"confirm":[64],"the":[65,70,73,83,132,140,159],"but":[67],"also":[68,157],"impact":[69],"reputation":[71],"software":[74],"vendors.":[75],"In":[76],"paper,":[78],"aim":[80],"understand":[82],"root":[84,178],"causes":[85,179],"build":[91],"a":[92,126],"prediction":[93],"model":[94],"automatically":[96],"identify":[97],"them.To":[98],"end,":[100],"first":[102],"leverage":[103],"card":[104],"sorting":[105],"categorize":[107],"reports,":[110],"from":[111],"which":[112],"six":[113],"main":[114],"reasons":[115],"observed":[117],"for":[118,152],"CVEs,":[122],"respectively.Then,":[123],"propose":[125],"text":[127,142],"mining":[128,143],"approach":[129,144],"predict":[131],"Our":[136],"experiments":[137],"reveal":[138],"that":[139],"proposed":[141],"can":[145,166,183],"achieve":[146],"an":[147],"AUC":[148],"score":[149],"0.87":[151],"predicting":[153],"vulnerabilities.":[155],"We":[156],"discuss":[158],"implications":[160],"our":[162,164],"study:":[163],"categorization":[165],"used":[168],"guide":[170],"new":[171],"committer":[172],"avoid":[174],"these":[175],"traps;":[176],"some":[177],"avoided":[185],"by":[186],"using":[187],"automatic":[188],"techniques":[189],"optimizing":[191],"reviewing":[192],"mechanism;":[193],"data":[197],"should":[198],"neglected.":[201]},"counts_by_year":[{"year":2025,"cited_by_count":2},{"year":2023,"cited_by_count":2},{"year":2021,"cited_by_count":4},{"year":2020,"cited_by_count":3},{"year":2019,"cited_by_count":1}],"updated_date":"2026-07-29T14:22:42.915294","created_date":"2025-10-10T00:00:00"}