Automated detection of software vulnerabilities is a fundamental problem in software
security. Existing program analysis techniques either suffer from high false positives or false …

Abstract Context: Modern Code Review (MCR) is a widely known practice of software quality
assurance. However, the existing body of knowledge of MCR is currently not understood as …

Code review is effective, but human-intensive (eg, developers need to manually modify
source code until it is approved). Recently, prior work proposed a Neural Machine …

Vulnerabilities publicly disclosed in the National Vulnerability Database (NVD) are assigned
with CVE (Common Vulnerabilities and Exposures) IDs and associated with specific …

Representing code changes as numeric feature vectors, ie, code change representations, is
usually an essential step to automate many software engineering tasks related to code …

Background: Modern Code Review (MCR) is a lightweight alternative to traditional code
inspections. While secondary studies on MCR exist, it is ua nknown whether the research …

Context Tangled commits are changes to software that address multiple concerns at once.
For researchers interested in bugs, tangled commits mean that they actually study not only …

Code review is a software development practice aimed at assessing code quality, finding
defects, and sharing knowledge among developers. Despite its wide adoption, code review …

Enlightened by the big success of pre-training in natural language processing, pre-trained
models for programming languages have been widely used to promote code intelligence in …

In collaborative software development, it is considered to be a best practice to submit code
changes as a sequence of cohesive commits, each of which records the work result of a …