...
To calculate CVE match, a model was trained on code samples containing CVEs. For the java model, over 400 CVEs 500 CVEs are covered representing 88 125 different CWEs including, but not limited to, the 18 most common CWEs:
| Section |
|---|
| Column |
|---|
| - CWE-20
- CWE-22
- CWE-74
- CWE-79
- CWE-89
- CWE-94
|
|
...
...
- 284
- CWE-287
- CWE-352
- CWE-400
- CWE-
|
|
...
...
...
- 668
- CWE-770
- CWE-862
- CWE-863
- CWE-918
|
|
For the C model, nearly 3,000 CVEs are covered, representing 172 different CWEs including, but not limited to, the 28 most common CWEs:
| Section |
|---|
| Column |
|---|
| - CWE-20
- CWE-22
- CWE-59
- CWE-119
- CWE-120
- CWE-121
- CWE-122
|
| Column |
|---|
| - CWE-125
- CWE-189
- CWE-190
- CWE-191
- CWE-200
- CWE-264
- CWE-287
|
| Column |
|---|
| - CWE-295
- CWE-369
- CWE-399
- CWE-400
- CWE-401
- CWE-415
- CWE-416
|
| Column |
|---|
| - CWE-476
- CWE-617
- CWE-770
- CWE-772
- CWE-787
- CWE-835
- CWE-908
|
|
The diagram below illustrates how DTP, the CVE Match model, and OpenAI embeddings API work together.
...