sunlab-gmu / pysecdb

The official repository of ICSME'23 paper "Exploring Security Commits in Python"

PySecDB: security commit dataset in Python

Description

To foster large-scale research on vulnerability mitigation and to enable a comparison of different detection approaches, we make our dataset PySecDB from our ICSME23 paper publicly available.

PySecDB is a real-world Python security commit dataset that contains around 1.2K security commits and 2.8K non-security commits. You can find more details on the dataset in the paper "Exploring Security Commits in Python".

Download Policy

We are delighted to share PySecDB and hope you can find our dataset useful in your research. However, in order to prevent any misuse, we kindly ask you to fill out a request form to state your identity and research scope. We will verify them and then send you the download link of PySecDB dataset.

Request Steps:

1. Please open the online request form in a browser.
   PySecDB Request Form: https://forms.gle/Uu441xPQ4dqnVGV39.
   (If you are unable to access the page, please contact SunLab by email.)

2. Sign in to your Google account.
   Since our request form and download link are facilitated by Google, please use your Gmail as the valid email to receive the form response.

3. In the request form, please include your name, affiliation, work email, homepage, and the purpose of using PySecDB.
   The information is needed for verification. Note that your request may be ignored if we are not able to determine your identity or affiliation. We do not share your personal information with any third parties.

4. Acknowledge all the information you provided is correct.

5. Read and acknowledge the Disclaimer & Download Agreement for PySecDB.

6. Submit the request form.
   A request receipt will be emailed to the email address you provided. Once we verify your information, we will email the download link to you as soon as possible.

If you are using PySecDB for work that will result in a publication (thesis, dissertation, paper, article), please use the following citation:

Disclaimer & Download Agreement

To download the PySecDB dataset, you must agree with the succeeding Disclaimer & Download Agreement items. You should carefully read the following terms before submitting the PySecDB request form.

• PySecDB is constructed and cross-checked by 3 experts that work in security patch research. Due to the potential misclassification led by subjective factors, the Sun Security Laboratory (SunLab) cannot guarantee 100% accuracy for samples in the dataset.

• The copyright of the PySecDB dataset is owned by SunLab.

• The purpose of using PySecDB should be non-commercial research and/or personal use. The dataset should not be used for commercial use or any profitable purpose.

• The PySecDB dataset should not be re-sell or redistributed. Anyone who has obtained PySecDB should not share the dataset with others without permission from SunLab.

Team

The PySecDB dataset is built by Sun Security Laboratory (SunLab) at George Mason University, Fairfax, VA.

---

Last Updated Date: July, 2023