.png){kind=icon}
返回
Python source code vulnerability detection with named entity recognition
.png){kind=icon}
PRE
AI
DOI：10.1016/j.cose.2024.103802.png)
.png){kind=icon}
原文求助.png){kind=icon}
分享.png){kind=icon}
收藏
摘要
En 中文
Vulnerabilities within source code have grown over the last 20 years to become a common threat to systems and networks. As the implementation of open -source software continues to develop, more unknown vulnerabilities will exist throughout system networks. This research proposes an enhanced vulnerability detection method specific to Python source code that utilizes pre-trained, BERT -based transformer models to apply tokenization, embedding, and named entity recognition (a natural language processing technique). The use of named entity recognition not only allows for the detection of potential vulnerabilities, but also for the classification of different vulnerability types. This research uses the publicly available CodeBERT, RoBERTa, and DistilBERT models to fine -tune for the downstream task of token classification for six different common weakness enumeration specifications. The results achieved in this research outperform previous Python-based vulnerability detection methods and demonstrate the effectiveness of applying named entity recognition to enhance the overall research into Python source code vulnerabilities.
Keyword:
Vulnerability detection
Natural language processing
Machine learning
Named entity recognition
Transformer
Python
BERT
Programming language
Common weakness enumeration
CWE
期刊
C
IF:
5.4
论文数:
4.6K
被引数:
1.4W
机构
引用论文
Vulnerability detection through cross-modal feature enhancement and fusion.png)
COMPUTERS & SECURITY
COMPUTERS & SECURITYIF5.4
PREAI
分享收藏分享收藏Software vulnerabilities in TensorFlow-based deep learning applications基于TensorFlow的深度学习应用中的软件漏洞COMPUTERS & SECURITY
OAAI
COMPUTERS & SECURITYIF5.4
OAAI分享收藏AutoVAS: An automated vulnerability analysis system with a deep learning approachCOMPUTERS & SECURITY
COMPUTERS & SECURITYIF5.4
PREAI
分享收藏
查看更多内容