Find research datasets worth reusing
Search datasets from major research repositories and use ShareScore to quickly assess how well each record supports discovery, access, and reuse.
15
datasets available to search
ShareScore release 0.7.1
Dataset results
15 results for “Software Security”
An Empirical Evaluation of the Relationship between Technical Debt and Software Security
<p>This dataset contains the static analysis results of 50 open source software applications retrieved from Github. The results were produced by using SonarQube, PMD, CKJM Extended and Findbugs tools. Further details can be found in the relevant publication: </p> <ul> <li>Siavvas, M., Tsoukalas, D., Janković, M., Kehagias, D., Chatzigeorgiou, A., Tzovaras, D., Aničić, N., Gelenbe, E. <em>An Empirical Evaluation of the Relationship between Technical Debt and Software Security</em>. In: Konjović, Z., Zdravković, M., Trajanović, M. (Eds.) ICIST 2019 Proceedings Vol.1, pp.199-203, 2019</li> </ul>
Dataset for : A New Era in Software Security: Towards Self-Healing Software via Large Language Models and Formal Verification
<p>We present a novel solution combining Large Language Model (LLM) capabilities with Formal Verification strategies to falsify and automatically repair software vulnerabilities. Initially, we employ Bounded Model Checking (BMC) to locate the software vulnerability and derive a counterexample. Relying on mathematical proofs, counterexamples provide evidence that the system behaves incorrectly or contains a vulnerability, thereby preventing the generation of false positive alerts. The counterexample that has been detected, along with the source code, are provided to the LLM engine. Our approach involves establishing a specialized prompt language for conducting code debugging and generation to understand the vulnerability's root cause and repair the code. Finally, we use BMC to verify the corrected version of the code generated by the LLM. As a proof of concept, we create \esbmcai based on the Efficient SMT-based Context-Bounded Model Checker (ESBMC) and a pre-trained Transformer model, specifically gpt-3.5-turbo, to detect and fix errors in C programs. We generated a dataset comprising $1{,}000$ C code samples, each consisting of $20$ to $50$ lines of C code. Experimental results show that our proposed method achieved an impressive success rate of up to $80$\% in repairing vulnerable code, encompassing buffer overflow, arithmetic overflow, and pointer dereference failures. To our knowledge, \esbmcai represents the first proposal for a pioneering initiative to integrate a Large Language Model (LLM) with software model checking. We advocate that this automated approach has the potential to incorporate into the software development lifecycle's continuous integration and deployment (CI/CD) process. </p> <p> </p> <p>The uploaded dataset contains 1000 codes, each comprising 20 to 50 lines of C code generated with gpt-3.5-turbo. The material also consists of a version of ESBMC statically compiled with all dependencies, a classifier script, and the output file.</p> <p> </p> <p> </p>
A Study on Organizational IT Security in Mobile Software Ecosystems Literature
<p>Information security is a key topic for most organizations. With the digital revolution, smartphones have become popular not only for personal use but also within organizations where many employees use them for business purposes. As smartphones are increasingly present in organizations, it is necessary to understand what recommendations the literature provides for the safe use of such devices, helping organizations to protect themselves from threats. ISO 27000 is a well-known standard for information security in a business context. It provides a set of controls that must be observed to ensure more secure organizational information. Therefore, the goal of this study is to identify which controls presented in ISO 27000, more specifically ISO 27001, are present in the Mobile Software Ecosystem (MSECO) literature. To do so, we conducted a systematic mapping review supplemented by a snowballing process to identify studies in the field of MSECO that have addressed any subject that is present in ISO 27001. We found that 34 out of the 114 ISO 27001 controls are covered by the MSECO literature. Also, some of the ISO sections (e.g., Asset Management) have not yet been explored in the MSECO literature. Our results can inspire future and further studies on the topic of MSECO information security.</p>
Dataset and Analysis Scripts for Survey "Understanding Security Tactics in Microservice APIs using Annotated Software Architecture Decomposition Models -- A Controlled Experiment"
<pre>Dataset, R-Scripts and questionnaire templates for our survey <em>Understanding Security Tactics in Microservice APIs using Annotated Software Architecture Decomposition Models -- A Controlled Experiment.</em></pre>
DASP: A Framework for Driving the Adoption of Software Security Practices
<p>Online appendix for the publication:</p> <p>DASP: A Framework for Driving the Adoption of Software Security Practices.</p>
On the Relationship between Software Security and Energy Consumption - Dataset
<p>The dataset for estimating the Relationship between Software Security and Energy Consumption described in Siavvas, Miltiadis, Marantos, Charalampos, Papadopoulos, Lazaros, Kehagias, Dionysios, Soudris, Dimitrios, & Tzovaras, Dimitrios. (2019). On the Relationship between Software Security and Energy Consumption (Version 1.0).</p>
Supporting Software Engineers in IT Security and Privacy through Automated Knowledge Discovery - Dataset
<h1>Supporting Software Engineers in IT Security and Privacy through Automated Knowledge Discovery - Dataset</h1> <h2> </h2> <h2>Dataset corresponding to <a href="https://doi.org/10.1145/3672608.3707798">https://doi.org/10.1145/3672608.3707798</a></h2> <div>This is the dataset corresponding to <a href="https://doi.org/10.1145/3672608.3707798">https://doi.org/10.1145/3672608.3707798</a> "Supporting Software Engineers in IT Security and Privacy through Automated Knowledge Discovery" with the goal of providing a systematic method to discover state-of-the-art security knowledge, focused on threats, measures, and properties from science and project literature with minimal manual effort, and providing software engineers with the awareness and means they need to apply the knowledge to their projects.</div> <p> </p> <h2>Structure of the files</h2> <div>The dataset contains the extraction prompt, the extraction results, and metadata.</div> <div>- <strong>ACM_IEEE_EU_Results.zip</strong> is an archive file with the metadata and extraction results with the following folder structure: </div> <div> - <strong>Meta/ </strong>contains the DOI, title, publication date, and pages (omitted for IEEE since it may contain intellectual property).</div> <div> - <strong>Extract/</strong> contains extraction results generated by the LLM in response to the extraction_prompt.txt file.</div> <div> - <strong>ExtractMeta/</strong> contains the metadata for the extraction, such as execution time.</div> <div>- <strong>extraction_prompt.txt</strong> is the prompt used to extract information from the science and project publications.</div>
Study Data: Semi-Automated Prioritization of Industrial Security Findings in Agile Software Development
<p>Dataset for the study of the paper "Semi-Automated Prioritization of Industrial Security Findings in Agile Software Development"</p>
Replication Package - Moderator Factors of Software Security and Performance Verification
<p>Replication package for the paper "Moderator Factors of Software Security and Performance Verification"</p>
A Versatile and Secure Data Management System API facilitating the Interconnection of any software component and Easy Data Access.
<p>In the context of the EU-funded project PILOTING (No. 871542), a versatile Data Management System (DMS) was deployed and facilitated the easy integration of nine different robotic systems and various payloads and the storing of all the data observations produced during the inspections. The DMS is designed under the DMS-Data Model (DMS-DM) and operates on top of a representational state transfer (REST) application programming interface (API) that provides a simplified way to exchange data through HTTP(S) requests from a client to the server. One of its key advantages is that it provides a great deal of flexibility so the model could accommodate extensions if needed. Data is not tied to resources or methods, so REST can handle multiple types of calls, return different data formats and even change structurally with the correct implementation of hypermedia. <br> It supports CRUD operations via GET, POST, PUT, PATCH, and DELETE HTTP methods and stores the data on a PostgreSQL object-relational database system. The REST API has been created with Python's Django (web framework) and Django REST Framework, a powerful and flexible toolkit for building Web APIs. <br> The constructed document presents the communication endpoints (DMS API’s Uniform Resource Identifiers (URIs)) under which an authorized user can have access to the DMS API and subsequently to the collected data. </p>
Artifacts Package - "Software Security during Modern Code Review: The Developer's Perspective"
<p>Artifacts Package of the accepted FSE 22 paper: "Software Security during Modern Code Review: The Developer's Perspective".</p>
The KISS principle in Software-Defined Networking: a framework for secure communications - dkreutz data
<p>Scripts, summarized data, plots</p> <p>type of data: raw data and processed data</p>
Material Suplementar - Is secure software development education necessary in the software industry? Answers from professionals of a technology hub in Brazil
<p><span>Context: The education and training of information security professionals is essential to ensure the protection of data and systems, as well as the privacy and security of sensitive information. Problem: This work aims to explore the context of a local technology hub to answer the following research question: Is secure software development education necessary in the software industry? Solution: To answer this question, an exploratory study was performed to understand the need for secure software development education from the point of view of software practitioners in a technology hub. Method: A questionnaire was prepared and sent to professionals of a Brazilian technology hub. Answers were analyzed by using qualitative research methods. Results: We obtained thirty eight answers. According to the results obtained, the majority of participants consider information security education important for the development of secure software. However, there is still a lack of information security education. Contributions: It is concluded that companies should invest more in adequate and comprehensive training on the topic, in addition to encouraging and rewarding professionals who prioritize software security in their projects. It is essential to disseminate a culture of information security throughout the organization, from senior management to development professionals, to make everyone aware of the importance of information security and their responsibility in maintaining it. Finally, it should be noted that developers have a crucial role in ensuring software security, being responsible for seeking knowledge and improving their skills in secure development through training, reading and practice</span><span>. (Paper accepted in the Brazilian Symposium of Software Engineering)</span></p>
Security for Software-Defined Wireless Sensor Networks: Performance evaluation comparison
Open the record for dataset details and reuse information.
Dataset for Large-Scale Analysis of Modern Code Review Practices and Software Security in Open Source Software
Open the record for dataset details and reuse information.
ScienceDex guides
Understand access before you commit
These curated guides explain access requirements, typical timelines, costs, and reuse considerations for widely used research datasets.
Allen Brain Atlas
Allen Brain Atlas is an Allen Institute collection of brain map atlases, datasets, APIs, and analysis tools covering mouse, human, and non-human primate brain resources.
Annotated Behaviour and Observability Dataset (ABODe)
ABODe is a University of Edinburgh DataShare dataset for behavior classification in group-housed mice using home-cage video, identities, bounding boxes, ground-plate positions, and annotator labels.
DANDI Archive for NWB datasets
DANDI is a BRAIN Initiative archive for publishing and sharing neurophysiology data, including electrophysiology, optophysiology, and behavioral data packaged as NWB and related standards.
International Brain Laboratory public data
The International Brain Laboratory public data releases expose standardized mouse decision-making experiments, including Neuropixels recordings, widefield calcium imaging, behavior, and session metadata accessed through the ONE API.
OpenNeuro
OpenNeuro is a free, open platform for sharing neuroimaging datasets, with public search, dataset pages, and download paths for web, S3, DataLad, and the OpenNeuro CLI.