A C/C++ Code Vulnerability Dataset with Code Changes and CVE Summaries
A C/C++ Code Vulnerability Dataset with Code Changes and CVE Summaries
复制标题
包含代码更改和 CVE 摘要的 C/C 代码漏洞数据集
DOI：
--
复制
发表时间：
2020
期刊：
影响因子：
--
通讯作者：
T. Nguyen
中科院分区：
文献类型：
--
作者：
Jiahao Fan;Yi Li;Shaohua Wang;T. Nguyen
我们从开源Github项目Big-Vul中收集了一个大型C/C++代码漏洞数据集。我们爬取了公共的通用漏洞和暴露（CVE）数据库和与CVE相关的源代码存储库。具体来说，我们从CVE数据库中收集了漏洞的描述信息，例如，CVE ID、CVE严重性分数和CVE摘要。通过CVE信息及其相关的Github代码库链接，我们下载了所有代码库，并提取了与漏洞相关的代码更改。Big-Vul总共包含3，754个代码漏洞，跨越91种不同的漏洞类型。所有这些代码漏洞都是从348个Github项目中提取的。所有信息都以CSV格式存储。我们将代码更改与CVE描述性信息联系起来。因此，我们的Big-Vul可用于各种研究主题，例如，检测和修复漏洞，分析漏洞相关的代码更改。Big-Vul在Github上公开。
We collected a large C/C++ code vulnerability dataset from open-source Github projects, namely Big-Vul. We crawled the public Common Vulnerabilities and Exposures (CVE) database and CVE-related source code repositories. Specifically, we collected the descriptive information of the vulnerabilities from the CVE database, e.g., CVE IDs, CVE severity scores, and CVE summaries. With the CVE information and its related published Github code repository links, we downloaded all of the code repositories and extracted vulnerability related code changes. In total, Big-Vul contains 3,754 code vulnerabilities spanning 91 different vulnerability types. All these code vulnerabilities are extracted from 348 Github projects. All information is stored in the CSV format. We linked the code changes with the CVE descriptive information. Thus, our Big-Vul can be used for various research topics, e.g., detecting and fixing vulnerabilities, analyzing the vulnerability related code changes. Big-Vul is publicly available on Github.