arrow
Return

Deep Learning for Software Vulnerabilities Detection Using Code Metrics

delete2020-01-01
delete31
delete
OA
AI
M
Mohammed Zagane *
M
Mustapha Kamel Abdi
M
Mamdouh Alenezi
DOI:10.1109/ACCESS.2020.2988557delete
deleteOriginal
deleteOriginal request for help
deleteShare
deleteSave
Abstract

Abstract

En 中文
Software vulnerability can cause disastrous consequences for information security. Earlier detection of vulnerabilities minimizes these consequences. Manual detection of vulnerable code is very difficult and very costly in terms of time and budget. Therefore, developers must use automatic vulnerabilities prediction (AVP) tools to minimize costs. Recent works on AVP begin to use techniques of deep learning (DL). All the proposed approaches are based on techniques of feature extraction inspired by previous applications of DL such as automatic language processing. Code metrics were widely used as features to build AVP models based on classic machine learning. This study bridges the gap between deep learning and machine learning features and discusses a deep-learning-based approach to finding vulnerabilities in code using code metrics. Obtained results show that code metrics are very good but not the better to use as features in DL-based AVP.
Keywords:
Automatic vulnerability prediction
code metrics
deep neural networks

Journal

IEEE Access cover
IEEE Access
IF:
3.6
Papers:
9.8W
Citations:
29.4W

Organization

P
Prince Sultan University
Scholars:
1.9K
Papers: 2.3K
Citations: 2.3K