返回
A software vulnerability detection method based on deep learning with complex network analysis and subgraph partition
DOI:10.1016/j.infsof.2023.107328.png)
摘要
En 中文
The increasing size and complexity of software programs have made them an integral part of modern society's infrastructure, making software vulnerabilities a major threat to computer security. To address this issue, the use of deep learning-based software vulnerability detection methods has become increasingly popular. Although the effectiveness of the deep learning-based methods has been demonstrated, these methods have faced challenges in scalability and detection performance. To tackle this challenge, we propose a new vulnerability detection method based on deep learning with complex network analysis and subgraph partition that enhances detection accuracy while maintaining scalability. The method uses complex network analysis theory to convert the CPG into an image-like matrix, and then utilizes TextCNN for vulnerability detection. As a result, our method shows a 6% improvement in accuracy and a 10% reduction in false positive rates compared to stateof-the-art methods. In addition, our approach is able to detect some of the vulnerabilities recently released by CVE.
Keyword:
Vulnerability detection
Code representation
Complex network analysis
TextCNN
期刊
IF:
4.3
论文数:
3.8K
被引数:
7.7K
机构
引用论文
Long noncoding RNA hypoxia-inducible factor 1 alpha-antisense RNA 1 promotes tumor necrosis factor-α-induced apoptosis through caspase 3 in Kupffer cells
Medicine
IF0
SySeVR: A Framework for Using Deep Learning to Detect Software VulnerabilitiesSySeVR: 使用深度学习检测软件漏洞的框架

