Add more data sources and mine the graph to find correlations between vulnerabilities

By, Ziad Hany

Project: VulnerableCode

Organization - AboutCode

Project Idea

There is a large number of pending tickets for data sources. We want to search for more vulnerability data sources and consume them . So I will resolve this issues :

• Add OSV importer #608 ( add support for more data source like OSS-Fuzz ,… )

• Add support for CWE #651

• Collect UVI database #588

• Collect CMU CERT #588

• Add Fireeye disclosures #487

Tasks Accomplished

• add a OSV importer

• Refactor Git-importer using fetchcode

• Import data from Fireeye

• Add support for CWE

• Import data from GSD

• Migrate ruby to new importers

Links

• Official GSoC project page

• GSoC Proposal

• Project Idea

Post GSoC - Future Plans

• add support for Cargo version and Version range

• add support for Git Version and Version range , …

I had a wonderful time during the Gsoc, I learned a lot of things during this time and I would like to thanks @TG1999 @pombredanne I learnt a lot from you guys

You can connect with me here

https://github.com/ziadhany

https://www.linkedin.com/in/ziadhany