PatchView: Multi-modality detection of security patches
Published in Computers & Security, 2025
Overview
Many security fixes in open-source repositories are committed without explicit CVE identifiers or security-related commit messages. PatchView is an approach to detecting these patches by combining three data sources:
- Code changes: AST-level representations of modified source code.
- Commit messages: Text from commit descriptions.
- Repository metadata: Developer activity and commit characteristics extracted from version control.
Read Paper Code Dataset Google Scholar
Recommended citation: Nitzan Farhi, Noam Koenigstein, Yuval Shavitt, "PatchView: Multi-modality detection of security patches." Computers & Security, Vol. 151, 104356, 2025.
Download Paper