{"id":"W2055765785","doi":"10.1145/1774088.1774504","title":"Can complexity, coupling, and cohesion metrics be used as early indicators of vulnerabilities?","year":2010,"lang":"en","type":"article","venue":"","topic":"Software Engineering Research","field":"Computer Science","cited_by":94,"is_retracted":false,"has_abstract":true,"ca_institutions":"Queen's University","funders":"Universität des Saarlandes; North Carolina State University","keywords":"Cohesion (chemistry); Secure coding; Computer science; Software security assurance; Software metric; Software; Software bug; Software development; Empirical research; Cyclomatic complexity; Security bug; Software quality; Software engineering; Computer security; Information security; Programming language; Statistics; Mathematics","routes":{"ca_aff":true,"ca_fund":false,"ca_venue":false,"about_ca":false,"invisible_to_affiliation_only":false},"retraction":null,"screen":null,"direct_labels":[],"prediction":{"model_version":"codex-gemma-dda1882f352a","candidate_categories":[],"consensus_categories":[],"category_scores_codex":[0.0006717237,0.0001022867,0.0001651846,0.0004786916,0.00007028173,0.0001024224,0.0006773133,0.00008350182,0.00005617204],"category_scores_gemma":[0.001373176,0.00009123878,0.00002837844,0.0009466666,0.0001962646,0.0001547742,0.0004141558,0.0003325376,0.000005453312],"about_ca_system_candidate":false,"about_ca_system_consensus":false,"about_ca_system_score_codex":0.00002281002,"about_ca_system_score_gemma":0.0001031786,"about_ca_topic_candidate":false,"about_ca_topic_consensus":false,"about_ca_topic_score_codex":0.0009657838,"about_ca_topic_score_gemma":0.0001050107,"domain_scores_codex":[0.9986861,0.00001685776,0.0001810826,0.0002769337,0.0005943962,0.0002446267],"domain_scores_gemma":[0.9978497,0.001287961,0.0000484773,0.0005354929,0.00009839906,0.0001799644],"domain_codex":null,"domain_gemma":null,"domain_candidate":null,"domain_consensus":null,"study_design_codex":"observational","study_design_gemma":"observational","study_design_scores_codex":[0.000004733015,0.0001061928,0.8391507,0.00008104151,0.00002714064,0.00000921791,0.002079182,0.00005752178,0.005799924,0.1484237,0.0004922803,0.003768428],"study_design_scores_gemma":[0.0009648393,0.0006002912,0.8525364,0.00002385324,0.000008915341,0.00002079479,0.00009667703,0.05106131,0.08284596,0.009770537,0.001534275,0.0005361022],"study_design_candidate":"observational","study_design_consensus":"observational","genre_codex":"empirical","genre_gemma":"empirical","genre_scores_codex":[0.9774836,0.0000179858,0.0212432,0.0005138371,0.0001916772,0.0001348206,0.000003441499,0.000187848,0.0002236377],"genre_scores_gemma":[0.9769462,0.000003081432,0.02282559,0.00004850753,0.00001829523,0.000005618804,0.000001192735,0.000009860635,0.0001416177],"genre_candidate":"empirical","genre_consensus":"empirical","teacher_disagreement_score":0.1386531,"threshold_uncertainty_score":0.372061,"prediction_status":"machine_predicted_unvalidated"},"machine_scores":{"provisional":true,"baseline":true,"maturity_gate_passed":false,"score_opus":0.0328252097964023,"score_gpt":0.2922418905803097,"score_spread":0.2594166807839074,"validation_status":"score_only:v0-immature-baseline","note":"Baseline scores from an immature model (maturity gate not passed). Scores rank; they never assert a category."}}