Mapping NVD Records to Their VFCs: How Hard is it?

Replication package of the paper "Mapping NVD Records to Their VFCs: How Hard is it?", accepted to ACM Transactions on Software Engineering and Methodology (TOSEM)

Dataset

• Automatically collected VFCs can be found at dataset/auto
• Details of manual study can be found at dataset/manual

Replicate

1. Install requirement

pip install -r requirements

2. Fill in your API keys for GitHub, GitLab and BitBucket in each of commmit_*.py file

3. Collect VFCs from Patch-tagged NVD entries

python nvd_api_monitor.py

4. Collect VFCs from Non-Patch-tagged NVD entries using NVD references

cd references_scraping
python run.py

5. Collect VFCs from Non-Patch-tagged NVD entries using external resource

cd references_scraping/external_resource
python main.py