.png){kind=icon}
返回
CSGVD: A deep learning approach combining sequence and graph embedding for source code vulnerability detection
.png){kind=icon}
PRE
AI
DOI：10.1016/j.jss.2023.111623.png)
.png){kind=icon}
原文求助.png){kind=icon}
分享.png){kind=icon}
收藏
摘要
En 中文
In order to secure software, it is critical to detect potential vulnerabilities. The performance of traditional static vulnerability detection methods is limited by predefined rules, which rely heavily on the expertise of developers. Existing deep learning-based vulnerability detection models usu-ally use only a single sequence or graph embedding approach to extract vulnerability features. Sequence embedding-based models ignore the structured information inherent in the code, and graph embedding-based models lack effective node and graph embedding methods. As a result, we propose a novel deep learning-based approach, CSGVD (Combining Sequence and Graph embedding for Vulnerability Detection), which considers function-level vulnerability detection as a graph binary classification task. Firstly, we propose a PE-BL module, which inherits and enhances the knowledge from the pre-trained language model. It extracts the code's local semantic features as node embedding in the control flow graph by using sequence embedding. Secondly, CSGVD uses graph neural networks to extract the structured information of the graph. Finally, we propose a mean biaffine attention pool-ing, M-BFA, to better aggregate node information as a graph's feature representation. The experimental results show that CSGVD outperforms the existing state-of-the-art models and obtains 64.46% accuracy on the real-world benchmark dataset from CodeXGLUE for vulnerability detection.(c) 2023 Elsevier Inc. All rights reserved.
Keyword:
Graph neural networks
Vulnerability detection
Sequence embedding
Graph embedding
Pre -trained language model
Attention pooling
期刊
IF:
4.1
论文数:
5.5K
被引数:
8.4K
机构
引用论文
Arsenic removal from aqueous solutions by adsorption using novel MIL-53(Fe) as a highly efficient adsorbent使用新型MIL-53(Fe) 作为高效吸附剂通过吸附从水溶液中去除砷.png)
RSC Advances
RSC AdvancesIF0
PREAI
分享收藏What are the most important factors determining different vegetation types in the Chapada Diamantina, Brazil?决定巴西Chapada Diamantina不同植被类型的最重要因素是什么？
OAAI
OAAI分享收藏Software Vulnerability Detection Using Deep Neural Networks: A SurveyPROCEEDINGS OF THE IEEE
PROCEEDINGS OF THE IEEEIF25.9
PREAI
分享收藏 没有更多内容
没有更多内容