Temporal Analysis and Common Weakness Enumeration (CWE) Code Prediction for Software Vulnerabilities Using Machine Learning

Zero-day attacks present a significant challenge in cybersecurity by exploiting vulnerabilities that have not been identified yet. This paper leverages the Common Weakness Enumeration (CWE) system—a widely recognized framework for identifying and categorizing software weaknesses—to predict potential zero-day attacks through temporal analysis. By examining historical CWE data, this study aims to uncover patterns that could indicate emerging vulnerabilities, thereby enabling the implementation of proactive security measures. This research offers a new method of predicting zero-day attacks through a systematic analysis of temporal trends, contributing to developing more complex cybersecurity defences. The work is unique and not previously documented in the literature, highlighting the importance of temporal analysis in forecasting and mitigating cybersecurity threats. The proposed predictive model, which employs statistical methods, time series analysis, and prediction model, achieved an accuracy of 0.66, a precision of 0.65, an F1 score of 0.64, and a recall of 0.66. These results demonstrate the model's balanced performance in effectively identifying relevant CWE codes while minimizing false positives.

Authors

Publication Details

Published
2024-11-07
DOI
https://doi.org/10.1109/csitss64042.2024.10816791
Citations
1
Primary Topic
Software Reliability and Analysis Research
Type
article
Field-Weighted Citation Impact
0.49
Controls
|||
ALL TIME
JAN
FEB
MAR
APR
MAY
JUN
JUL
AUG
SEP
OCT
article

Temporal Analysis and Common Weakness Enumeration (CWE) Code Prediction for Software Vulnerabilities Using Machine Learning

Minal Moharir, Suraj Singh, Mohana, S Jeevan et al.
1 citations
Software Reliability and Analysis Research
0.49
article

Temporal Analysis and Common Weakness Enumeration (CWE) Code Prediction for Software Vulnerabilities Using Machine Learning

Minal Moharir, Suraj Singh, Mohana, S Jeevan, N.S. Reddy, Kishan Karthik S
article en
1 citations

Abstract

Zero-day attacks present a significant challenge in cybersecurity by exploiting vulnerabilities that have not been identified yet. This paper leverages the Common Weakness Enumeration (CWE) system—a widely recognized framework for identifying and categorizing software weaknesses—to predict potential zero-day attacks through temporal analysis. By examining historical CWE data, this study aims to uncover patterns that could indicate emerging vulnerabilities, thereby enabling the implementation of proactive security measures. This research offers a new method of predicting zero-day attacks through a systematic analysis of temporal trends, contributing to developing more complex cybersecurity defences. The work is unique and not previously documented in the literature, highlighting the importance of temporal analysis in forecasting and mitigating cybersecurity threats. The proposed predictive model, which employs statistical methods, time series analysis, and prediction model, achieved an accuracy of 0.66, a precision of 0.65, an F1 score of 0.64, and a recall of 0.66. These results demonstrate the model's balanced performance in effectively identifying relevant CWE codes while minimizing false positives.

Reduced inequalities
Openalex Percentile: Top 27%
Software Reliability and Analysis Research
0.49
AI Navigator

Ask Laika to Summarize, Analyze, and Connect papers live on the map.

Summarize Papers & Methodologies

Extract key findings, datasets, and comparative methods across publications.

Benchmark Rankings & Visual Analytics

Rank top research institutions, authors, funders, topics, and journals by Field-Weighted Citation Impact (FWCI) and paper volume with instant charts.

Connect Distant Disciplines

Bridge topological clusters on the map to find hidden collaborative intersections.