arrow
返回

Combining Graph-Based Learning With Automated Data Collection for Code Vulnerability Detection

delete2021-01-01
delete166
delete
OA
AI
H
Huanting Wang
G
Guixin Ye
Z
Zhanyong Tang *
S
Shin Hwei Tan
黄
黄松芳 (Songfang Huang)
D
Dingyi Fang
L
Lizhong Bian
Z
Zheng Wang *
DOI:10.1109/TIFS.2020.3044773delete
delete原文链接
delete分享
delete收藏
查看原文
摘要

摘要

En 中文
This paper presents FUNDED (Flow-sensitive vUl-Nerability coDE Detection), a novel learning framework for building vulnerability detection models. Funded leverages the advances in graph neural networks (GNNs) to develop a novel graph-based learning method to capture and reason about the program's control, data, and call dependencies. Unlike prior work that treats the program as a sequential sequence or an untyped graph, Funded learns and operates on a graph representation of the program source code, in which individual statements are connected to other statements through relational edges. By capturing the program syntax, semantics and flows, Funded finds better code representation for the downstream software vulnerability detection task. To provide sufficient training data to build an effective deep learning model, we combine probabilistic learning and statistical assessments to automatically gather high-quality training samples from open-source projects. This provides many real-life vulnerable code training samples to complement the limited vulnerable code samples available in standard vulnerability databases. We apply Funded to identify software vulnerabilities at the function level from program source code. We evaluate Funded on large real-world datasets with programs written in C, Java, Swift and Php, and compare it against six state-of-the-art code vulnerability detection models. Experimental results show that Funded significantly outperforms alternative approaches across evaluation settings.
Keyword:
Software vulnerability
code vulnerability detection
deep learning
deep graph neural networks
AI总结

AI总结

对已上传原文的论文进行重点信息的提取,主要内容包括:简要概述、研究摘要、背景介绍、关键亮点、图文解析、展望与总结。

期刊

IEEE Transactions on Information Forensics and Security 封面图
IEEE Transactions on Information Forensics and Security
IF:
8
论文数:
5.3K
被引数:
2.3W

机构

N
northwest university xi'an
学者数:
1.8W
论文数: 1.2W
被引数: 22
U
university of leeds
学者数:
3.6W
论文数: 3.3W
被引数: 45
P
peking university
学者数:
11.9W
论文数: 8.7W
被引数: 146
学者 查看更多机构
引用论文

引用论文

Competitive redox-catalyzed migratory carbonyl insertion and .beta.-elimination in iron alkyl complexes
err2002-05-01
err0
PREAI
errRobert S. Bly; Gary S. Silverman; M. Mahmun Hossain; Ruta K. Bly
err分享
err收藏
Data-Driven Cybersecurity Incident Prediction: A Survey
err2019-01-01
err210
PREAI
errSun, Nan; Zhang, Jun; Rimba, Paul; Gao, Shang; Zhang, Leo Yu; Xiang, Yang
err分享
err收藏
Novel approaches to HIV therapy
err2017-05-31
err0
errOAAI
errEric S. Daar
err分享
err收藏
err分享
err收藏
Spiking Suppression Precedes Cued Attentional Enhancement of Neural Responses in Primary Visual Cortex
err2017-11-23
err0
errOAAI
errMichele A Cox; Kacie Dougherty; Geoffrey K Adams; Eric A Reavis; Jacob A Westerberg; Brandon S Moore; David A Leopold; Alexander Maier
err分享
err收藏
Long-Span Program Behavior Modeling and Attack Detection
err2017-09-20
err23
errOAAI
errShu, Xiaokui; Yao, Danfeng (Daphne); Ramakrishnan, Naren; Jaeger, Trent
err分享
err收藏
学者 查看更多内容