Learning to Triage Vulnerability Reports from Program Analysis: An Empirical Study in Node.js
Program analysis tools often produce large volumes of candidate vulnerability reports that require costly manual review, creating a practical challenge: how can security analysts prioritize the reports most likely to be true vulnerabilities? This paper investigates whether machine learning can be applied to prioritizin...
Ronghao Ni, Aidan Z. H. Yang, Min-Chien Hsu et al.
· IEEE/ACM International Confe... · 0 citations