OpenSource-OperatingSystems-Vulnerabilities-ISSRE2025

Title: Artifacts for the paper "Exploring the Generalizability of Software Vulnerability Classes via Replication and Synthesis" ISSRE 2025 Description:These artifacts accompany the paper titled Exploring the Generalizability of Software Vulnerability Classes via Replication and Synthesis, accepted at the IEEE International Symposium on Software Reliability Engineering (ISSRE 2025). It contains curated datasets of bug reports from three major open-source operating systems: Red Hat Linux (RHL), Fedora, and Ubuntu. Each dataset is provided as a CSV file and includes the following fields: bug report ID, security relevance flag, source component, associated CVE and CWE data (for security-related bugs), CWE-888 primary and secondary class mappings, and the operating system label. The artifact supports replication and further exploration of security classification patterns across operating systems and enables reproducible empirical research in software vulnerability analysis. Contents: fedora.csv rhl.csv ubuntu.csv README (detailed field descriptions and usage instructions) LICENSE (CC BY-SA 4.0) License: Creative Commons Attribution-ShareAlike 4.0 International (CC BY-SA 4.0)Authors: Mohammad Jamil Ahmad, Katerina Goseva-PopstojanovaAffiliation: West Virginia UniversitySubmission Number: 105 (ISSRE 2025) Citation:Ahmad, M. J., & Goseva-Popstojanova, K. (2025). Exploring the Generalizability of Software Vulnerability Classes via Replication and Synthesis. In Proceedings of the IEEE International Symposium on Software Reliability Engineering (ISSRE 2025).标题：发表于IEEE国际软件可靠性工程研讨会（ISSRE 2025）的论文《通过复现与合成探索软件漏洞类别的泛化能力》配套数据集 描述：本配套数据集对应已被IEEE国际软件可靠性工程研讨会（ISSRE 2025）收录的论文《通过复现与合成探索软件漏洞类别的泛化能力》，其中包含从三大主流开源操作系统（红帽Linux（RHL）、Fedora及Ubuntu）中经甄选的缺陷报告数据集。 每份数据集均以逗号分隔值（Comma-Separated Values, CSV）文件形式提供，包含以下字段：缺陷报告ID、安全相关性标记、源代码组件、关联的通用漏洞与暴露（Common Vulnerabilities and Exposures, CVE）及通用弱点枚举（Common Weakness Enumeration, CWE）数据（针对安全相关缺陷）、CWE-888主/次类别映射以及操作系统标签。 本数据集支持跨操作系统的安全分类模式复现与进一步探索，可实现软件漏洞分析领域可复现的实证研究。 数据集内容： fedora.csv rhl.csv ubuntu.csv README（详细字段说明与使用指南） LICENSE（CC BY-SA 4.0） 许可协议：知识共享署名-相同方式共享4.0国际（CC BY-SA 4.0） 作者：Mohammad Jamil Ahmad、Katerina Goseva-Popstojanova 所属机构：西弗吉尼亚大学 提交编号：105（ISSRE 2025） 引用格式：Ahmad, M. J., & Goseva-Popstojanova, K. (2025). 《通过复现与合成探索软件漏洞类别的泛化能力》. 见：IEEE国际软件可靠性工程研讨会（ISSRE 2025）会议论文集。