{"id":"W4388768226","doi":"10.1002/smr.2639","title":"A catalog of metrics at source code level for vulnerability prediction: A systematic mapping study","year":2023,"lang":"en","type":"article","venue":"Journal of Software Evolution and Process","topic":"Software Engineering Research","field":"Computer Science","cited_by":4,"is_retracted":false,"has_abstract":true,"ca_institutions":"University of Saskatchewan","funders":"","keywords":"Computer science; Vulnerability (computing); Code review; Software quality; Software security assurance; Software; Data mining; Software metric; Predictive modelling; Quality (philosophy); Machine learning; Data science; Software development; Computer security; Information security","routes":{"ca_aff":true,"ca_fund":false,"ca_venue":false,"about_ca":false,"invisible_to_affiliation_only":false},"retraction":null,"screen":null,"direct_labels":[],"prediction":{"model_version":"codex-gemma-dda1882f352a","candidate_categories":[],"consensus_categories":[],"category_scores_codex":[0.002961224,0.0001164712,0.0003845906,0.000628614,0.000172359,0.00005593507,0.0004866114,0.00005542553,0.00000123272],"category_scores_gemma":[0.007519752,0.00009716077,0.00008455984,0.00169104,0.00004089124,0.0003889329,0.0001636722,0.0001806309,0.000002091034],"about_ca_system_candidate":false,"about_ca_system_consensus":false,"about_ca_system_score_codex":0.0002039181,"about_ca_system_score_gemma":0.0001815147,"about_ca_topic_candidate":false,"about_ca_topic_consensus":false,"about_ca_topic_score_codex":0.000006196618,"about_ca_topic_score_gemma":0.000003931859,"domain_scores_codex":[0.9980968,0.00009823976,0.0006656807,0.0002116687,0.0007094647,0.0002181649],"domain_scores_gemma":[0.9964052,0.001849567,0.0003885257,0.0002506448,0.0009832181,0.0001227712],"domain_codex":null,"domain_gemma":null,"domain_candidate":null,"domain_consensus":null,"study_design_codex":"observational","study_design_gemma":"observational","study_design_scores_codex":[0.0001599931,0.0005993893,0.9074663,0.05001493,0.0004434015,0.0000299568,0.01826608,0.01703804,0.0001632554,0.0001209231,0.002440111,0.00325761],"study_design_scores_gemma":[0.005116223,0.002586619,0.8124005,0.00462544,0.0001915248,0.0007611749,0.004010124,0.1660269,0.0004102431,0.002967375,0.0003166307,0.0005871766],"study_design_candidate":"observational","study_design_consensus":"observational","genre_codex":"methods","genre_gemma":"empirical","genre_scores_codex":[0.3095341,0.0005442197,0.6890376,0.0000573787,0.0002715727,0.000426336,0.00002083194,0.0001073997,5.474245e-7],"genre_scores_gemma":[0.9922727,0.00001067187,0.007432664,0.000007409767,0.00007614505,0.00004811386,0.000001895949,0.00001132564,0.00013912],"genre_candidate":"empirical","genre_consensus":null,"teacher_disagreement_score":0.6827386,"threshold_uncertainty_score":0.9002389,"prediction_status":"machine_predicted_unvalidated"},"machine_scores":{"provisional":true,"baseline":true,"maturity_gate_passed":false,"score_opus":0.06678564583861035,"score_gpt":0.3157488891498784,"score_spread":0.2489632433112681,"validation_status":"score_only:v0-immature-baseline","note":"Baseline scores from an immature model (maturity gate not passed). Scores rank; they never assert a category."}}