arrow
返回

Static vulnerability detection based on class separation☆

delete2023-12-01
delete1
PRE
AI
C
Chunyong Zhang
Y
Yang Xin *
DOI:10.1016/j.jss.2023.111832delete
delete原文链接
delete原文求助
delete分享
delete收藏
摘要

摘要

En 中文
Software vulnerability detection is a key step to prevent the system from being attacked. However, tens of thousands of codes have brought great challenges to engineers, so we urgently need an automatic and intelligent vulnerability detection method. The existing vulnerability detection model based on deep learning has the problem that it is difficult to separate the features of vulnerable and neutral code. Based on the code data drive, this paper proposes a static vulnerability detection method SDV(Statically Detecting Vulnerability) for C\C++ programs. SDV is a function-level vulnerability code detection method. This paper uses a code property graph to represent the code and decouples the feature extractor and the classifier. In the graph feature extraction stage, we use Jump Graph Attention Network layers and convolutional pooling layers. Their combination can not only prevent the over-smoothing problem but also separate the sample classes deeply. Finally, on the chrdeb dataset, SDV outperforms state-of-the-art function-level vulnerability detection methods by 52.3%, 15.9%, and 39.6% in Precision, Recall, and F1-Score, respectively. On the real project sard, the number of vulnerabilities detected by SDV is 10.7 times more than Reveal. (c) 2023 Elsevier Inc. All rights reserved.
Keyword:
Vulnerability detection
Code property graph
Jump structure
Graph attention network
Class separation

期刊

Journal of Systems and Software 封面图
Journal of Systems and Software
IF:
4.1
论文数:
5.5K
被引数:
8.4K

机构

B
beijing university of posts & telecommunications
学者数:
1.4W
论文数: 1.2W
被引数: 9
引用论文

引用论文

Long noncoding RNA hypoxia-inducible factor 1 alpha-antisense RNA 1 promotes tumor necrosis factor-α-induced apoptosis through caspase 3 in Kupffer cells
err2018-01-01
err0
errOAAI
errYanghe Wu; Jiguang Ding; Qingfeng Sun; Ke Zhou; Weiwei Zhang; Qingwei Du; Tingyan Xu; Wangwang Xu
err分享
err收藏
err分享
err收藏
CrossTalk opposing view: Which technique for controlling resistant hypertension? Carotid chemoreceptor denervation/modulation
err2014-09-15
err0
errOAAI
errL. E. K. Ratcliffe; W. Pijacka; F. D. McBryde; A. P. Abdala; D. J. Moraes; P. A. Sobotka; E. C. Hart; K. Narkiewicz; A. K. Nightingale; J. F. R. Paton
err分享
err收藏
Arsenic removal from aqueous solutions by adsorption using novel MIL-53(Fe) as a highly efficient adsorbent使用新型MIL-53(Fe) 作为高效吸附剂通过吸附从水溶液中去除砷
err2015-01-01
err0
PREAI
errTuan. A. Vu; Giang. H. Le; Canh. D. Dao; Lan. Q. Dang; Kien. T. Nguyen; Quang. K. Nguyen; Phuong. T. Dang; Hoa. T. K. Tran; Quang. T. Duong; Tuyen. V. Nguyen; Gun. D. Lee
err分享
err收藏
err分享
err收藏
err分享
err收藏
err分享
err收藏
学者 查看更多内容