arrow
返回

Automatic Feature Learning for Predicting Vulnerable Software Components

delete2021-01-01
delete113
PRE
AI
H
Hoa Khanh Dam *
T
Truyen Tran
T
Trang Pham
S
Shien Wee Ng
J
John Grundy
A
Aditya Ghose
DOI:10.1109/TSE.2018.2881961delete
delete原文链接
delete原文求助
delete分享
delete收藏
摘要

摘要

En 中文
Code flaws or vulnerabilities are prevalent in software systems and can potentially cause a variety of problems including deadlock, hacking, information loss and system failure. A variety of approaches have been developed to try and detect the most likely locations of such code vulnerabilities in large code bases. Most of them rely on manually designing code features (e.g., complexity metrics or frequencies of code tokens) that represent the characteristics of the potentially problematic code to locate. However, all suffer from challenges in sufficiently capturing both semantic and syntactic representation of source code, an important capability for building accurate prediction models. In this paper, we describe a new approach, built upon the powerful deep learning Long Short Term Memory model, to automatically learn both semantic and syntactic features of code. Our evaluation on 18 Android applications and the Firefox application demonstrates that the prediction power obtained from our learned features is better than what is achieved by state of the art vulnerability prediction models, for both within-project prediction and cross-project prediction.
Keyword:
Software vulnerability prediction
mining software engineering repositories
empirical software engineering
AI总结

AI总结

对已上传原文的论文进行重点信息的提取,主要内容包括:简要概述、研究摘要、背景介绍、关键亮点、图文解析、展望与总结。

期刊

IEEE Transactions on Software Engineering 封面图
IEEE Transactions on Software Engineering
IF:
5.6
论文数:
2.8K
被引数:
1.1W

机构

M
Monash University
学者数:
5.4W
论文数: 5.4W
被引数: 79
U
University of Wollongong
学者数:
1.3W
论文数: 1.6W
被引数: 2.8W
D
Deakin University
学者数:
2.0W
论文数: 2.1W
被引数: 2.8W
学者 查看更多机构
引用论文

引用论文

err分享
err收藏
Strong-coupling Bose polarons in a Bose-Einstein condensate
err2017-07-06
err0
errOAAI
errF. Grusdt; R. Schmidt; Y. E. Shchadilova; E. Demler
err分享
err收藏
err分享
err收藏
学者 查看更多内容