Process-based Indicators of Vulnerability Re-Introducing Code Changes: An Exploratory Case Study

Samiha Shimmi; Nicholas M. Synovic; Mona Rahimi; George K. Thiruvathukal

doi:10.1145/3786165.3788438

Process-based Indicators of Vulnerability Re-Introducing Code Changes: An Exploratory Case Study

Samiha Shimmi
, Nicholas M. Synovic
, Mona Rahimi
, George K. Thiruvathukal

Loyola University Chicago

Northern Illinois University
Loyola University of Chicago

Research output: Chapter in Book/Report/Conference proceeding › Conference contribution

Original language	English
Title of host publication	Proceedings 2026 IEEE/ACM 4th International Workshop on Software Vulnerability Management, SVM 2026
Publisher	Association for Computing Machinery, Inc
Pages	9-16
Number of pages	8
ISBN (Electronic)	9798400723971
DOIs	https://doi.org/10.1145/3786165.3788438
State	Published - May 13 2026
Event	IEEE/ACM 4th International Workshop on Software Vulnerability Management, SVM 2026 - Rio de Janeiro, Brazil Duration: Apr 12 2026 → Apr 18 2026

Publication series

Name	Proceedings 2026 IEEE/ACM 4th International Workshop on Software Vulnerability Management, SVM 2026

Conference

Conference	IEEE/ACM 4th International Workshop on Software Vulnerability Management, SVM 2026
Country/Territory	Brazil
City	Rio de Janeiro
Period	4/12/26 → 4/18/26

ASJC Scopus Subject Areas

Software
Safety, Risk, Reliability and Quality

Keywords

Longitudinal metrics
Mining software repositories
Risky fixes
Scientific software
Software process metrics
Software security
Vulnerability prediction
Vulnerability reintroduction

Access to Document

10.1145/3786165.3788438

Cite this

Shimmi, S., Synovic, N. M., Rahimi, M., & Thiruvathukal, G. K. (2026). Process-based Indicators of Vulnerability Re-Introducing Code Changes: An Exploratory Case Study. In Proceedings 2026 IEEE/ACM 4th International Workshop on Software Vulnerability Management, SVM 2026 (pp. 9-16). (Proceedings 2026 IEEE/ACM 4th International Workshop on Software Vulnerability Management, SVM 2026). Association for Computing Machinery, Inc. https://doi.org/10.1145/3786165.3788438

Process-based Indicators of Vulnerability Re-Introducing Code Changes: An Exploratory Case Study. / Shimmi, Samiha; Synovic, Nicholas M.; Rahimi, Mona et al.
Proceedings 2026 IEEE/ACM 4th International Workshop on Software Vulnerability Management, SVM 2026. Association for Computing Machinery, Inc, 2026. p. 9-16 (Proceedings 2026 IEEE/ACM 4th International Workshop on Software Vulnerability Management, SVM 2026).

Research output: Chapter in Book/Report/Conference proceeding › Conference contribution

Shimmi, S, Synovic, NM, Rahimi, M & Thiruvathukal, GK 2026, Process-based Indicators of Vulnerability Re-Introducing Code Changes: An Exploratory Case Study. in Proceedings 2026 IEEE/ACM 4th International Workshop on Software Vulnerability Management, SVM 2026. Proceedings 2026 IEEE/ACM 4th International Workshop on Software Vulnerability Management, SVM 2026, Association for Computing Machinery, Inc, pp. 9-16, IEEE/ACM 4th International Workshop on Software Vulnerability Management, SVM 2026, Rio de Janeiro, Brazil, 4/12/26. https://doi.org/10.1145/3786165.3788438

Shimmi S, Synovic NM, Rahimi M, Thiruvathukal GK. Process-based Indicators of Vulnerability Re-Introducing Code Changes: An Exploratory Case Study. In Proceedings 2026 IEEE/ACM 4th International Workshop on Software Vulnerability Management, SVM 2026. Association for Computing Machinery, Inc. 2026. p. 9-16. (Proceedings 2026 IEEE/ACM 4th International Workshop on Software Vulnerability Management, SVM 2026). doi: 10.1145/3786165.3788438

Shimmi, Samiha ; Synovic, Nicholas M. ; Rahimi, Mona et al. / Process-based Indicators of Vulnerability Re-Introducing Code Changes : An Exploratory Case Study. Proceedings 2026 IEEE/ACM 4th International Workshop on Software Vulnerability Management, SVM 2026. Association for Computing Machinery, Inc, 2026. pp. 9-16 (Proceedings 2026 IEEE/ACM 4th International Workshop on Software Vulnerability Management, SVM 2026).

@inproceedings{0e68cd937ac24dbc91ba7bc090a66e4e,

title = "Process-based Indicators of Vulnerability Re-Introducing Code Changes: An Exploratory Case Study",

keywords = "Longitudinal metrics, Mining software repositories, Risky fixes, Scientific software, Software process metrics, Software security, Vulnerability prediction, Vulnerability reintroduction",

author = "Samiha Shimmi and Synovic, \{Nicholas M.\} and Mona Rahimi and Thiruvathukal, \{George K.\}",

note = "Publisher Copyright: {\textcopyright} 2026 Copyright held by the owner/author(s).; IEEE/ACM 4th International Workshop on Software Vulnerability Management, SVM 2026 ; Conference date: 12-04-2026 Through 18-04-2026",

year = "2026",

month = may,

day = "13",

doi = "10.1145/3786165.3788438",

language = "English",

series = "Proceedings 2026 IEEE/ACM 4th International Workshop on Software Vulnerability Management, SVM 2026",

publisher = "Association for Computing Machinery, Inc",

pages = "9--16",

booktitle = "Proceedings 2026 IEEE/ACM 4th International Workshop on Software Vulnerability Management, SVM 2026",

}

TY - GEN

T1 - Process-based Indicators of Vulnerability Re-Introducing Code Changes

T2 - IEEE/ACM 4th International Workshop on Software Vulnerability Management, SVM 2026

AU - Shimmi, Samiha

AU - Synovic, Nicholas M.

AU - Rahimi, Mona

AU - Thiruvathukal, George K.

PY - 2026/5/13

Y1 - 2026/5/13

KW - Longitudinal metrics

KW - Mining software repositories

KW - Risky fixes

KW - Scientific software

KW - Software process metrics

KW - Software security

KW - Vulnerability prediction

KW - Vulnerability reintroduction

UR - https://www.scopus.com/pages/publications/105040578918

UR - https://www.scopus.com/pages/publications/105040578918#tab=citedBy

U2 - 10.1145/3786165.3788438

DO - 10.1145/3786165.3788438

M3 - Conference contribution

AN - SCOPUS:105040578918

T3 - Proceedings 2026 IEEE/ACM 4th International Workshop on Software Vulnerability Management, SVM 2026

SP - 9

EP - 16

BT - Proceedings 2026 IEEE/ACM 4th International Workshop on Software Vulnerability Management, SVM 2026

PB - Association for Computing Machinery, Inc

Y2 - 12 April 2026 through 18 April 2026

ER -

Process-based Indicators of Vulnerability Re-Introducing Code Changes: An Exploratory Case Study

Publication series

Conference

ASJC Scopus Subject Areas

Keywords

Access to Document

Other files and links

Cite this