.png){kind=icon}
返回
SySeVR: A Framework for Using Deep Learning to Detect Software Vulnerabilities
.png){kind=icon}
OA
AI
DOI：10.1109/TDSC.2021.3051525.png)
.png){kind=icon}
.png){kind=icon}
分享.png){kind=icon}
收藏
摘要
En 中文
The detection of software vulnerabilities (or vulnerabilities for short) is an important problem that has yet to be tackled, as manifested by the many vulnerabilities reported on a daily basis. This calls for machine learning methods for vulnerability detection. Deep learning is attractive for this purpose because it alleviates the requirement to manually define features. Despite the tremendous success of deep learning in other application domains, its applicability to vulnerability detection is not systematically understood. In order to fill this void, we propose the first systematic framework for using deep learning to detect vulnerabilities in C/C++ programs with source code. The framework, dubbed Syntax-based, Semantics-based, and Vector Representations (SySeVR), focuses on obtaining program representations that can accommodate syntax and semantic information pertinent to vulnerabilities. Our experiments with four software products demonstrate the usefulness of the framework: we detect 15 vulnerabilities that are not reported in the National Vulnerability Database. Among these 15 vulnerabilities, seven are unknown and have been reported to the vendors, and the other eight have been silently patched by the vendors when releasing newer versions of the pertinent software products.
Keyword:
Deep learning
Syntactics
Software
Semantics
Proposals
Image processing
Big Data
Vulnerability detection
security
deep learning
program analysis
program representation
AI总结
对已上传原文的论文进行重点信息的提取，主要内容包括：简要概述、研究摘要、背景介绍、关键亮点、图文解析、展望与总结。
期刊
IF:
7.5
论文数:
2.6K
被引数:
9.6K
机构
引用论文
Convolutional neural networks for expert recommendation in community question answering卷积神经网络在社区问答专家推荐中的应用
.png){kind=icon}
PREAI
分享收藏分享收藏SBA-15:TiO2 nanocomposites: II. Direct and post-synthesis using acetylacetoneSBA-15:TiO2纳米复合材料: II。使用乙酰丙酮的直接和后合成
PREAI
分享收藏
查看更多内容