{"id":"W2055765785","doi":"10.1145/1774088.1774504","title":"Can complexity, coupling, and cohesion metrics be used as early indicators of vulnerabilities?","year":2010,"lang":"en","type":"article","venue":"","topic":"Software Engineering Research","field":"Computer Science","cited_by":94,"is_retracted":false,"has_abstract":true,"ca_institutions":"Queen's University","funders":"Universität des Saarlandes; North Carolina State University","keywords":"Cohesion (chemistry); Secure coding; Computer science; Software security assurance; Software metric; Software; Software bug; Software development; Empirical research; Cyclomatic complexity; Security bug; Software quality; Software engineering; Computer security; Information security; Programming language; Statistics; Mathematics","routes":{"ca_aff":true,"ca_fund":false,"ca_venue":false,"about_ca":false,"invisible_to_affiliation_only":false},"retraction":null,"screen":null,"direct_labels":[],"prediction":{"model_version":"metacan-v3-hybrid-931329e0061c","candidate_categories":[],"consensus_categories":[],"category_scores_codex":[0.006487799,0.001401456,0.0009661405,0.009997351,0.0004662286,0.002131417,0.000782218,0.001207479,0.0007746148],"category_scores_gemma":[0.09534537,0.0005854186,0.0006365117,0.006720535,0.001246979,0.006039069,0.001441486,0.001241939,0.0004818582],"about_ca_system_candidate":false,"about_ca_system_consensus":false,"about_ca_system_score_codex":0.0008656403,"about_ca_system_score_gemma":0.001181329,"about_ca_topic_candidate":false,"about_ca_topic_consensus":false,"about_ca_topic_score_codex":0.004817332,"about_ca_topic_score_gemma":0.008094595,"domain_scores_codex":[0.9935997,0.00198574,0.0005156154,0.0006774875,0.002845751,0.0003758007],"domain_scores_gemma":[0.8991084,0.0458366,0.03436334,0.006922789,0.01174991,0.002019055],"domain_codex":null,"domain_gemma":null,"domain_candidate":null,"domain_consensus":null,"study_design_codex":"observational","study_design_gemma":"simulation_or_modeling","study_design_scores_codex":[0.0001715151,0.0001510345,0.8518898,0.0003047614,0.0004254747,0.0001537817,0.001407809,0.009117121,0.007296751,0.003470375,0.001545774,0.1240659],"study_design_scores_gemma":[0.00002282018,0.0006053594,0.932829,0.0001979809,0.0001590633,0.0003358806,0.001025154,0.04131424,0.006564785,0.01294532,0.003830867,0.0001696056],"study_design_candidate":"simulation_or_modeling","study_design_consensus":null,"genre_codex":"empirical","genre_gemma":"empirical","genre_scores_codex":[0.9253332,0.001999713,0.06200938,0.001658895,0.0001300856,0.0001252669,0.0008213636,0.0006686624,0.007253581],"genre_scores_gemma":[0.9819546,0.0003520309,0.01667219,0.00008047173,0.00003009603,0.00007287501,0.0003225304,0.00007779605,0.0004374851],"genre_candidate":"empirical","genre_consensus":"empirical","teacher_disagreement_score":0.009997351,"threshold_uncertainty_score":0.03431118,"prediction_status":"machine_predicted_unvalidated"},"machine_scores":{"provisional":true,"baseline":true,"maturity_gate_passed":false,"score_opus":0.0328252097964023,"score_gpt":0.2922418905803097,"score_spread":0.2594166807839074,"validation_status":"score_only:v0-immature-baseline","note":"Baseline scores from an immature model (maturity gate not passed). Scores rank; they never assert a category."}}