Empirical Analysis of Static Code Metrics for Predicting Risk Scores in Android Applications

摘要: Recently, with the purpose of helping developers reduce needed effort to build highly secure software, researchers have proposed a number vulnerable source code prediction models that are built on different kinds features. Identifying security vulnerabilities along differentiating non-vulnerable from is not an easy task. Commonly, remain dormant until they exploited. Software metrics been widely used predict and indicate several quality characteristics about but question at hand whether can recognize ones. In this work, we conduct study static metrics, their interdependency, relationship in Android applications. The aim understand: (i) correlation between software metrics; (ii) ability these vulnerabilities, (iii) which most informative discriminative allow identifying units code.