Using Software Metrics for Predicting Vulnerable Code-Components: A Study on Java and Python Open Source Projects

Software vulnerabilities often remain hidden until an attacker exploits the weak/insecure code. Therefore, testing the software from a vulnerability discovery perspective becomes challenging for developers if they do not inspect their code thoroughly (which is time-consuming). We propose that vulner... View More