The thesis advances the field of software security by providing knowledge and automation support for software vulnerability assessment using data-driven approaches. Software vulnerability assessment provides important and multifaceted information to prevent and mitigate dangerous cyber-attacks in the wild. The key contributions include a systematisation of knowledge, along with a suite of novel data-driven techniques and practical recommendations for researchers and practitioners in the area. The thesis results help improve the understanding and inform the practice of assessing ever-increasing vulnerabilities in real-world software systems. This in turn enables more thorough and timely fixing prioritisation and planning of these critical security issues.

翻译：软件脆弱性评估提供了重要和多方面的信息,以防止和减轻野外危险的网络攻击; 关键贡献包括知识系统化,以及一系列新的数据驱动技术和对该地区研究人员和从业人员的实用建议; 论文结果有助于增进了解,为评估现实世界软件系统中日益增加的脆弱性的做法提供参考; 这又有助于更彻底和及时地确定这些关键安全问题的优先顺序和规划。