Find research datasets worth reusing
Search datasets from major research repositories and use ShareScore to quickly assess how well each record supports discovery, access, and reuse.
6
datasets available to search
ShareScore release 0.9.0
Dataset results
6 results for “vulnerability repair”
Vul4J+: A Dataset of Vulnerabilities for Automated Vulnerability Repair
<div> <div><strong>Vul4J+</strong> is a dataset of vulnerability fixes for automated vulnerability repair (AVR) in Java. Each entry of the dataset represents a <strong>vulnerability</strong> affecting an open-source Java project, having reference to the commit (revision) containing the code affected by the vulnerability and its version fixed by a human developer (the "left" and "right" parts of the commit). Each vulnerability is equipped with at least one <strong>"oracle"</strong> that shows the presence of the vulnerability, and that can be used to validate the correctness of patches generated by AVR tools. This *"oracle"* might have the form of a:</div> <div>- <strong>Vulnerability-witnessing test</strong>, i.e., a JUnit test case that fails on the vulnerable version of the code but passes on the patched version.</div> <div>- <strong>Warning/report</strong> raised by a vulnerability static analyzer, i.e., SpotBugs, that is presented in the vulnerable version of the code but not in the patched version.</div> <br> <div>In essence, Vul4J+ is a cleaned up and extended version of Vul4J containing:</div> <div>- 106 known vulnerabilities with executable vulnerability-witnessing test cases in Docker containers and warnings (reports) from SpotBugs static analyzer (if found);</div> <div>- 79 come from the original Vul4J;</div> <div>- 27 result from the replication of the same protocol used in the original Vul4J;</div> <div>- 50 vulnerabilities stored in Docker containers with the warnings (reports) from SpotBugs static analyzer ;</div> <div>- 35 known vulnerabilities matched with vulnerability-witnessing test cases retrieved from projects in the wild.</div> <br> <div>In total, Vul4J+ points to <strong>191 vulnerabilities</strong>, each with at least one vulnerability oracle.</div> </div>
An End-to-End Framework for Detecting and Repairing Potential Vulnerabilities
<p>Nowadays, program development is getting easier and easier as the various IDE tools provide advice on what to write in the program. But it is not enough to implement a solution to a problem; it is also important that the non-functional properties, like the quality or security of the code, are appropriate in all aspects. One of the most widely used techniques to ensure quality is testing. If the tests fail, one can fix the code immediately. However, security issues are unexpected cases when implementing the program, which is why we do not write tests for them in advance. In many cases, security-relevant bugs can not only cause financial loss but also put human lives at risk, so detecting and fixing them is an important step for the reliability and quality of the program. The tool presented in this paper aims to generate automatic code repairs to potential vulnerabilities in the program. By integrating the recommended fixes, one can easily harden the security of their program early in the development process. A case study on six open-source Java subject systems showed that we were able to generate viable repair patches for 57 out of the 81 detected security issues (70%). For certain types (e.g., revealing private references of mutable objects), our tool reached close to perfect performance.</p>
Code and Dataset for "Examining Zero-Shot Vulnerability Repair with Large Language Models"
<p><strong>Code and Dataset for "Examining Zero-Shot Vulnerability Repair with Large Language Models"</strong></p> <p>The following Zenodo contains the resources associated with the S&P accepted paper ‘Examining Zero Shot Vulnerability Repair with Large Language Models’, https://arxiv.org/abs/2112.02125</p> <p>In this resource, you can find the following.</p> <p> - 'important_results' directory:<br> This directory is for containing the final raw results as generated by the framework, including a global CSV of all generations and an HTML file containing all of the diffs generated for the 'high-confidence' real-world scenarios.<br> - final_results.csv<br> - This contains the final results of all generated software patches.<br> - Note the nomenclature differences with the manuscript tables. These are explained in the README in the framework.<br> - Original vs LLM-Generated Vulnerability Fixes.html<br> - This contains all of the diffs for the real-world patches versus the canonical developer-provided patches.</p> <p> - 'framework' directory:<br> This directory contains the complete archive of the code framework and all results at the time of the paper’s submission. It contains every language model prompt, suggestions, assembled repair patch and analysis data. It contains every script used for generation and analysis. It is a large archive, and within it contains an included README describing how to understand and use it.<br> - For convenience, we include a copy of the README external to the zipped archive.</p> <p> - 'resources' directory: <br> This directory contains the resources used by our large associated tools, including:<br> - 'gpt2-csrc' subdirectory:<br> Everything to do with the gpt2-csrc model, including the trained files, training scripts, and training data.</p> <p> - 'ExtractFix' subdirectory:<br> A docker image containing all ExtractFix scenarios, even those we did not use. Provided for interest (not required for usage).</p>
Dataset of 'Using Sequence-to-Sequence Learning for Repairing C Vulnerabilities'
<p>This is the dataset we collected for the 'Using Sequence-to-Sequence Learning for Repairing C Vulnerabilities' paper. See the description in the paper for how the dataset was collected. Please cite 'Using Sequence-to-Sequence Learning for Repairing C Vulnerabilities' if you use the dataset.</p> <p> </p> <p>src-all.txt and tgt-all.txt contain the tokenized function pairs and are ready to used as training data. Each line in both txt file corresponds to a function before and after a commit that was classified as a bug fix commit.</p> <p> </p> <p>The two tar files contain the raw data that was used to generate both txt files. Both containing the commits that were collected during the respective year.</p>
[Tool demo] AIFix4SecCode: an Automated Code Repair Framework for Fixing Vulnerabilities
<p> </p> <p><strong>>>>> TOOL DEMO SCREENCAST</strong>: please download file <a href="https://zenodo.org/record/8314593/files/AIFix4SecCode-demo.mp4?download=1">AIFix4SecCode-demo.mp4</a>. <strong><<<<</strong></p> <p> </p> <p>AIFix4SecCode is an automated code repair framework for fixing vulnerabilities. The framework detects vulnerabilities based on static analysis with the help of the <a href="https://github.com/sed-inf-u-szeged/OpenStaticAnalyzer">OpenStaticAnalyzer</a> tool that integrates <a href="https://spotbugs.github.io/">SpotBugs</a> as well.</p> <p>The detected vulnerabilities get automatically patched by an ASG transformation based repair solution implemented in the <a href="https://github.com/FrontEndART/OpenStaticAnalyzer/tree/CodeRepairTool/java/cl/CodeRepair">CodeRepair</a> code module. Currently, the automatic repair of the following security issues are supported:</p> <ul> <li><a href="https://spotbugs.readthedocs.io/en/stable/bugDescriptions.html#ei2-may-expose-internal-representation-by-incorporating-reference-to-mutable-object-ei-expose-rep2">EI_EXPOSE_REP2</a></li> <li><a href="https://spotbugs.readthedocs.io/en/stable/bugDescriptions.html#ei-may-expose-internal-representation-by-returning-reference-to-mutable-object-ei-expose-rep">EI_EXPOSE_REP</a></li> <li><a href="https://spotbugs.readthedocs.io/en/stable/bugDescriptions.html#ms-field-isn-t-final-but-should-be-ms-should-be-final">MS_SHOULD_BE_FINAL</a></li> <li><a href="https://spotbugs.readthedocs.io/en/stable/bugDescriptions.html#np-possible-null-pointer-dereference-np-null-on-some-path">NP_NULL_ON_SOME_PATH</a></li> <li><a href="https://spotbugs.readthedocs.io/en/stable/bugDescriptions.html#np-possible-null-pointer-dereference-in-method-on-exception-path-np-null-on-some-path-exception">NP_NULL_ON_SOME_PATH_EXCEPTION</a></li> <li><a href="https://spotbugs.readthedocs.io/en/stable/bugDescriptions.html#ms-field-should-be-package-protected-ms-pkgprotect">MS_PKGPROTECT</a></li> <li><a href="https://spotbugs.readthedocs.io/en/stable/bugDescriptions.html#ms-field-is-a-mutable-collection-ms-mutable-collection">MS_MUTABLE_COLLECTION</a></li> <li><a href="https://spotbugs.readthedocs.io/en/stable/bugDescriptions.html#fi-finalizer-should-be-protected-not-public-fi-public-should-be-protected">FI_PUBLIC_SHOULD_BE_PROTECTED</a></li> </ul>
Cohesin mutations alter DNA damage repair and chromatin structure and create therapeutic vulnerabilities in MDS/AML
GEO Series GSE165038. Homo sapiens. 7 samples. Type: Other.
ScienceDex guides
Understand access before you commit
These curated guides explain access requirements, typical timelines, costs, and reuse considerations for widely used research datasets.
Allen Brain Atlas
Allen Brain Atlas is an Allen Institute collection of brain map atlases, datasets, APIs, and analysis tools covering mouse, human, and non-human primate brain resources.
Annotated Behaviour and Observability Dataset (ABODe)
ABODe is a University of Edinburgh DataShare dataset for behavior classification in group-housed mice using home-cage video, identities, bounding boxes, ground-plate positions, and annotator labels.
DANDI Archive for NWB datasets
DANDI is a BRAIN Initiative archive for publishing and sharing neurophysiology data, including electrophysiology, optophysiology, and behavioral data packaged as NWB and related standards.
International Brain Laboratory public data
The International Brain Laboratory public data releases expose standardized mouse decision-making experiments, including Neuropixels recordings, widefield calcium imaging, behavior, and session metadata accessed through the ONE API.
OpenNeuro
OpenNeuro is a free, open platform for sharing neuroimaging datasets, with public search, dataset pages, and download paths for web, S3, DataLad, and the OpenNeuro CLI.