A study on software vulnerability prediction model

Developing a secure software is time consuming and a complex activity. The main source of insecurity is vulnerabilities in the software. So the prediction of software vulnerability plays important role in software engineering, especially in web application development. A software vulnerability prediction model forecasts whether a software component is vulnerable or not. This paper describes various software vulnerability prediction models. Mainly two types of software vulnerability models are used to predict the vulnerability component in software. In software metrics based prediction model, different software metrics are used as an indicator of software vulnerability. In text analysis based method, source code of the software is used as input to the prediction model. Source code is converted into tokens and frequencies. These are used to predict the vulnerability.