arrow
Return

Software Vulnerability Detection Using Informed Code Graph Pruning

delete2023-01-01
delete0
delete
OA
AI
J
Joseph Gear *
Y
Yue Xu
E
Ernest Foo
P
Praveen Gauravaram
Z
Zahra Jadidi
L
Leonie Simpson
DOI:10.1109/ACCESS.2023.3338162delete
deleteOriginal
deleteOriginal request for help
deleteShare
deleteSave
Abstract

Abstract

En 中文
pruning methods that can be used to reduce graph size to manageable levels by removing information irrelevant to vulnerabilities, while preserving relevant information. We present Semantic-enhanced Code Embedding for Vulnerability Detection (SCEVD), a deep learning model for vulnerability detection that seeks to fill these gaps by using more detailed information about code semantics to select vulnerability-relevant features from code graphs. We propose several heuristic-based pruning methods, implement them as part of SCEVD, and conduct experiments to verify their effectiveness. Our heuristic-based pruning improves on vulnerability detection results by up to 12% over the baseline pruning method.
Keywords:
Code representation
deep learning
source code semantics
vulnerability detection

Journal

IEEE Access cover
IEEE Access
IF:
3.6
Papers:
9.8W
Citations:
29.4W

Organization

G
Griffith University
Scholars:
1.5W
Papers: 1.6W
Citations: 2.5W