Empirical Study of Reopened Security Bugs on Mozilla

Kai ZHANG,Xiao-bing SUN,Xin PENG,Wen-yun ZHAO
DOI: https://doi.org/10.11896/j.issn.1002-137X.2017.11.007
2017-01-01
Computer Science
Abstract:Compared to other types of bugs,security bug reopens more often,moreover,they need more development re sources to fix it,which adds an extra cost to fix them.Hence,the empirical study of reopened security bugs is important.Our study collected the reopened security bugs from the Mozilla project,and analyzed them from the times of their reopening and commits,files which were modified to fix them,lines of added and deleted code,and comparison of the original fixing and reopened fixing.The empirical results show that security bug reopening often happen and it relates to the complexity of recognizing the reason that a security bug happens and fixing bugs.In addition,the locality of the files and code in the original security bug fixing is one of the causes to influence its re-fixing for bug reopens,and using more complex and effective fixing process can help reduce the security bug reopens.Finally,we summarized several causes for security bug reopens to help developers more easily identify the reopens of different types of security bugs.
What problem does this paper attempt to address?