Published June 20, 2022 | Version 1.0.0
Dataset Open

Dataset for AIFix4SecCode

Authors/Creators

  • 1. Anonymus

Description

Dataset for AIFix4SecCode

(Work in progress) The dataset can be used for teaching machine-learning based fixing of detectable issues in AIFix4SecCode developed in the AssureMOSS project. It contains examples for vulnerable and fixed versions for:

SonarQube:

  • S1444
  • S2384

Spotbugs:

  • EI_EXPOSE_REP
  • EI_EXPOSE_REP2
  • FI_PUBLIC_SHOULD_BE_PROTECTED
  • MS_EXPOSE_REP
  • MS_MUTABLE_ARRAY
  • MS_MUTABLE_COLLECTION
  • MS_MUTABLE_COLLECTION_PKGPROTECT
  • MS_SHOULD_BE_FINAL
  • NP_NULL_ON_SOME_PATH
  • NP_NULL_ON_SOME_PATH_EXCEPTION
  • NP_NULL_PARAM_DEREF
  • NP_NULL_PARAM_DEREF_ALL_TARGETS_DANGEROUS
  • NP_NULL_PARAM_DEREF_NONVIRTUAL
  • SQL_NONCONSTANT_STRING_PASSED_TO_EXECUTE
  • XSS_REQUEST_PARAMETER_TO_SERVLET_WRITER

Notes

The Full paper using the dataset is available at https://doi.org/10.1109/SCAM55253.2022.00034

Files

Dataset4AIFix4SecCode-main.zip

Files (15.7 MB)

Name Size Download all
md5:8eac5eca20b235176e6e93a9ed5de348
15.7 MB Preview Download

Additional details

Funding

European Commission
AssureMOSS - Assurance and certification in secure Multi-party Open Software and Services. 952647