返回
Optimising source code vulnerability detection using deep learning and deep graph network
DOI:10.1080/09540091.2024.2447373.png)
摘要
En 中文
To enhance the effectiveness of vulnerability detection in software developed using C and C++ programming languages, our study introduces a novel correlation calculation method for analyzing and evaluating Code Property Graphs (CPG). The intelligent computation method proposed in this study comprises three key stages. In the first stage, we present a method for extracting features from the CPG source code. To accomplish this, we integrate three distinct data exploration methods: employing Graph Convolutional Neural (GCN) to extract node features from CPG, utilizing Convolutional Neural Network (CNN) to extract edge features from CPG, and finally employing the Doc2vec natural language processing algorithm to extract source code from CPG nodes. The second stage involves proposing a method for synthesizing CPG source code features. Building on the features acquired in the first stage, our paper introduces a synthesis and construction method to generate feature vectors for the source code. The final stage, stage three, executes the detection of source code vulnerabilities. The experimental results demonstrate that our proposed model in this study achieves higher efficiency compared to other studies, with an improvement ranging from 3% to 4%.
Keyword:
Source code vulnerability detection
code Property graph
node feature
edge feature
feature profile
deep learning graph network
期刊
IF:
3.4
论文数:
854
被引数:
1.5K
机构
暂无机构信息
引用论文
Context-Aware Software Vulnerability Classification Using Machine Learning基于机器学习的上下文感知软件漏洞分类
IEEE ACCESS
IF3.6
AI and Blockchain-based source code vulnerability detection and prevention system for multiparty software development基于AI和区块链的多方软件开发源代码漏洞检测与防范系统
SedSVD: Statement-level software vulnerability detection based on Relational Graph Convolutional Network with subgraph embeddingSedSVD: 基于带子图嵌入的关系图卷积网络的语句级软件漏洞检测
Evaluation of the Performance Characteristics of the North American Lightning Detection Network Based on Tall-Structure Lightning基于高耸结构雷电的北美雷电探测网络性能特征评估
BovdGFE: buffer overflow vulnerability detection based on graph feature extraction
APPLIED INTELLIGENCE
IF3.5

