TraceVIC: Causal Reasoning over Code Evolution for Identifying Vulnerability-Inducing Commits
TraceVIC is presented, a temporal graph-based approach for identifying and ranking VICs by reasoning over code evolution, which improves F2 by up to 28.7% over state-of-the-art methods and identifies a valid VIC for 78 of 79 vulnerabilities across four unseen C/C++ projects.
Fnu Tanish, Samiha Shimmi, Samikshya Chapagain et al.
· 0 citations