TQRG / secbench
🪐 A Database of Existing Security Vulnerabilities Patches to Enable Evaluation of Techniques (single-commit; multi-language)
☆36Updated last year
Related projects ⓘ
Alternatives and complementary repositories for secbench
- ☠️ Ground-truth dataset for vulnerability prediction (known research datasets and data sources included such as NVD, CVE Details and OSV)…☆82Updated last year
- The public dataset in the paper "PatchDB: A Large-Scale Security Patch Dataset". This paper appears in the 51st Annual IEEE/IFIP Interna…☆37Updated last year
- AIBugHunter: A Practical Tool for Predicting, Classifying and Repairing Software Vulnerabilities☆37Updated 7 months ago
- The official repository of "GraphSPD: Graph-Based Security Patch Detection with Enriched Code Semantics". The paper will appear in the IE…☆41Updated last year
- ☆19Updated 6 months ago
- open science repo of "Neural Transfer Learning for Repairing Security Vulnerabilities in C Code" https://arxiv.org/pdf/2104.08308☆56Updated 8 months ago
- Replication code for the paper "On using distributed representations of source code for the detection of C security vulnerabilities"☆9Updated 2 years ago
- HiddenCPG: Large-Scale Vulnerable Clone Detection Using Subgraph Isomorphism of Code Property Graphs☆40Updated 2 years ago
- Vul4J: A Dataset of Reproducible Java Vulnerabilities☆67Updated 2 months ago
- ☆88Updated 3 weeks ago
- AutoVAS is an automated vulnerability analysis system with a deep learning approach.☆35Updated 3 years ago
- Cyber Code Intelligence (CyberCI)☆14Updated 3 years ago
- ☆120Updated 5 months ago
- SecLLMHolmes is a generalized, fully automated, and scalable framework to systematically evaluate the performance (i.e., accuracy and rea…☆39Updated 2 weeks ago
- This repository is to support contributions for tools and new data entries for the D2A dataset hosted in DAX☆64Updated 2 years ago
- Towards Measuring Supply Chain Attacks on Package Managers for Interpreted Languages☆122Updated 2 years ago
- VulZoo: A Comprehensive Vulnerability Intelligence Dataset (ASE 2024 Demo)☆26Updated 3 weeks ago
- ☆23Updated 9 months ago
- ☆19Updated last year
- Soot-based taint analysis with internal Java fluent interface for security specifications in fluentTQL implemented with MagpieBridge to s…☆16Updated 8 months ago
- A deep learning model for localizing bugs in C/C++ source code (USENIX'23)☆137Updated last year
- Source Code Vulnerability Detection Tools（SCVDT）provides a vulnerable code database, vulnerability detection service for Java and C/C++ p…☆110Updated 3 years ago
- ☆23Updated last month
- Static data flow-based analysis of JavaScript files to detect syntactic clones☆22Updated 4 years ago
- This repo list the core literature in the field of fuzzing test, large language model, and LLM-based fuzzer. Most of papers are selected …☆39Updated 9 months ago
- holding data and processing code for the paper 'A Large-Scale Empirical Study on Vulnerability Distribution within Projects and the Lesso…☆20Updated 4 years ago
- This repository provides the code and guidance for reproducing the results in our ESEC/FSE 2023 submission "Pre-training Code Representat…☆23Updated 9 months ago
- Assisting Static Analysis with Large Language Models: A ChatGPT Experiment☆29Updated last year
- Statement-level deep learning model for automated software vulnerability detection in C/C++ (Accepted in MSR 2022)☆69Updated 2 years ago
- MegaVul - The largest, high-quality, extensible, continuously updated, C/C++/Java vulnerability dataset☆52Updated 2 weeks ago