arXiv:2604.18862cs.SEcs.AI2026-04中稿 · TOSEM

人机协作提升漏洞报告识别效率,降低开发人员标注负担。

Human-Machine Co-Boosted Bug Report Identification with Mutualistic Neural Active Learning

论文配图:Human-Machine Co-Boosted Bug Report Identification with Mutualistic Neural Active Learning
图 1 · 摘自论文原文
  • 构建神经主动学习框架,通过人机互惠机制优化标注流程。
  • 相比传统方法,可减少95.8%可读性负担和196.0%识别难度。
  • 适配多种模型,适合需高效处理海量漏洞报告的团队使用。

漏洞报告涵盖多种类型,对保障软件质量至关重要。但其数量和复杂度上升使人工识别与分配面临巨大挑战,耗时且资源密集。本文提出跨项目框架互惠神经主动学习(MNAL),通过神经语言模型跨项目学习并结合主动学习,实现基于人机协作的自动化漏洞报告识别。其核心是机器与开发者之间的互惠关系:高信息量的人工标注报告及其伪标签用于模型更新,而待标注报告则更易读、易识别,从而提升协同效率。在大规模数据集上评估显示,MNAL在人工标注过程中分别实现95.8%的可读性降低和196.0%的识别难度降低,同时提升识别性能。该方法具备模型无关性,可适配多种神经语言模型。10名参与者参与的定性研究证实,MNAL显著节省时间与成本,被评价为更高效。

原文摘要 · Abstract (English)

Bug reports, encompassing a wide range of bug types, are crucial for maintaining software quality. However, the increasing complexity and volume of bug reports pose a significant challenge in sole manual identification and assignment to the appropriate teams for resolution, as dealing with all the reports is time-consuming and resource-intensive. In this paper, we introduce a cross-project framework, dubbed Mutualistic Neural Active Learning (MNAL), designed for automated and more effective identification of bug reports from GitHub repositories boosted by human-machine collaboration. MNAL utilizes a neural language model that learns and generalizes reports across different projects, coupled with active learning to form neural active learning. A distinctive feature of MNAL is the purposely crafted mutualistic relation between the machine learners (neural language model) and human labelers (developers) when enriching the knowledge learned. That is, the most informative human-labeled reports and their corresponding pseudo-labeled ones are used to update the model while those reports that need to be labeled by developers are more readable and identifiable, thereby enhancing the human-machine teaming therein. We evaluate MNAL using a large scale dataset against the SOTA approaches, baselines, and different variants. The results indicate that MNAL achieves up to 95.8% and 196.0% effort reduction in terms of readability and identifiability during human labeling, respectively, while resulting in a better performance in bug report identification. Additionally, our MNAL is model-agnostic since it is capable of improving the model performance with various underlying neural language models. To further verify the efficacy of our approach, we conducted a qualitative case study involving 10 human participants, who rate MNAL as being more effective while saving more time and monetary resources.

漏洞检测主动学习人机协作代码分析

Thank you to arXiv for use of its open access interoperability. PaperDance 不是 arXiv 官方产品;中文卡片由大模型生成,请以原文为准。