arrow
返回

Detecting vulnerability in source code using CNN and LSTM network

delete2021-07-03
delete7
PRE
AI
J
Junjun Guo *
Z
Zhengyuan Wang
H
Haonan Li
Y
Yang Xue
DOI:10.1007/s00500-021-05994-wdelete
delete原文链接
delete原文求助
delete分享
delete收藏
摘要

摘要

En 中文
Automated vulnerability detection has become a research hot spot because it is beneficial for improving software quality and security. The code metric (CM) is one class of important representations of vulnerability in source code. The implicit relationships among different metric attributes have not been sufficiently considered in traditional vulnerability detection based on CMs. In this paper, in view of the local perception capability of convolutional neural network (CNN) and the time-series prediction capability of long short-term memory (LSTM), we propose VulExplore, a compound neural network model for vulnerability detection that consists of a CNN for feature extraction and an LSTM network for deep representation. Moreover, to further indicate the vulnerability features in the source code, we reconstruct a CM dataset that includes two additional important attributes: maintainability index and average number of vulnerabilities committed per line. Our proposed numerical method can obtain both false-negative rate (FNR) and false-positive rate (FPR) under 20% and, meanwhile, achieve recall and precision over 80%, respectively.
Keyword:
Vulnerability detection
Code metrics (CMs)
Convolutional neural network (CNN)
Long short-term memory (LSTM)
Source code
AI总结

AI总结

对已上传原文的论文进行重点信息的提取,主要内容包括:简要概述、研究摘要、背景介绍、关键亮点、图文解析、展望与总结。

期刊

Soft Computing 封面图
Soft Computing
IF:
2.5
论文数:
1.0W
被引数:
2.1W

机构

暂无机构信息
引用论文

引用论文

Deep Learning for Software Vulnerabilities Detection Using Code Metrics
err2020-01-01
err31
errOAAI
errZagane, Mohammed; Abdi, Mustapha Kamel; Alenezi, Mamdouh
err分享
err收藏
err分享
err收藏
学者 查看更多内容