Software Vulnerabilities (SVs) are increasing in complexity and scale, posing great security
risks to many software systems. Given the limited resources in practice, SV assessment and …

This paper proposes a pipeline for quantitatively evaluating interactive Large Language
Models (LLMs) using publicly available datasets. We carry out an extensive technical …

Though many deep learning (DL)-based vulnerability detection approaches have been
proposed and indeed achieved remarkable performance, they still have limitations in the …

Context: The dramatically increasing number of vulnerabilities makes manual vulnerability
analysis increasingly more difficult. Automatic extraction of vulnerability information can help …

Vulnerable third-party libraries pose significant threats to software applications that reuse
these libraries. At an industry scale of reuse, manual analysis of third-party library …

Due to convenience, open-source software is widely used. For beneficial reasons, open-
source maintainers often fix the vulnerabilities silently, exposing their users unaware of the …

Public security vulnerability reports (eg, CVE reports) play an important role in the
maintenance of computer and network systems. Security companies and administrators rely …

Data on software vulnerabilities, products, and exploits are typically collected from multiple
non-structured sources. Valuable information, eg, on which products are affected by which …

Security databases describe characteristics of discovered vulnerabilities in text for future
studying and patching. However, due to different maintainers having different perspectives …

Cyber-threat landscape and adversarial capabilities have strengthened significantly due to
the digital transformation and increased computational capacity of individuals. To stay …