返回
Automatic Feature Learning for Predicting Vulnerable Software Components
DOI:10.1109/TSE.2018.2881961.png)
摘要
En 中文
Code flaws or vulnerabilities are prevalent in software systems and can potentially cause a variety of problems including deadlock, hacking, information loss and system failure. A variety of approaches have been developed to try and detect the most likely locations of such code vulnerabilities in large code bases. Most of them rely on manually designing code features (e.g., complexity metrics or frequencies of code tokens) that represent the characteristics of the potentially problematic code to locate. However, all suffer from challenges in sufficiently capturing both semantic and syntactic representation of source code, an important capability for building accurate prediction models. In this paper, we describe a new approach, built upon the powerful deep learning Long Short Term Memory model, to automatically learn both semantic and syntactic features of code. Our evaluation on 18 Android applications and the Firefox application demonstrates that the prediction power obtained from our learned features is better than what is achieved by state of the art vulnerability prediction models, for both within-project prediction and cross-project prediction.
Keyword:
Software vulnerability prediction
mining software engineering repositories
empirical software engineering
AI总结
对已上传原文的论文进行重点信息的提取,主要内容包括:简要概述、研究摘要、背景介绍、关键亮点、图文解析、展望与总结。
期刊
IF:
5.6
论文数:
2.8K
被引数:
1.1W
机构
引用论文
A Systematic Literature Review on Fault Prediction Performance in Software Engineering软件工程中故障预测性能的系统文献综述
Noisy time series prediction using recurrent neural networks and grammatical inference基于递归神经网络和语法推理的噪声时间序列预测
MACHINE LEARNING
IF2.9

