返回
Software Vulnerability Detection Using Informed Code Graph Pruning
DOI:10.1109/ACCESS.2023.3338162.png)
摘要
En 中文
pruning methods that can be used to reduce graph size to manageable levels by removing information irrelevant to vulnerabilities, while preserving relevant information. We present Semantic-enhanced Code Embedding for Vulnerability Detection (SCEVD), a deep learning model for vulnerability detection that seeks to fill these gaps by using more detailed information about code semantics to select vulnerability-relevant features from code graphs. We propose several heuristic-based pruning methods, implement them as part of SCEVD, and conduct experiments to verify their effectiveness. Our heuristic-based pruning improves on vulnerability detection results by up to 12% over the baseline pruning method.
Keyword:
Code representation
deep learning
source code semantics
vulnerability detection
期刊
IF:
3.6
论文数:
9.8W
被引数:
29.4W
机构
引用论文
VulDeeLocator: A Deep Learning-Based Fine-Grained Vulnerability DetectorVulDeeLocator: 一种基于深度学习的细粒度漏洞检测器
SySeVR: A Framework for Using Deep Learning to Detect Software VulnerabilitiesSySeVR: 使用深度学习检测软件漏洞的框架
The Everglades vulnerability analysis—Integrating ecological models and addressing uncertainty
Fact Sheet
IF0

