arrow
Return

Survey of source code vulnerability analysis based on deep learning

delete2025-01-01
delete0
delete
OA
AI
L
Liang Chen
Q
Qiang Wei
J
Jiang Du
Y
Yisen Wang *
Z
Zirui Jiang
DOI:10.1016/j.cose.2024.104098delete
deleteOriginal
deleteShare
deleteSave
View PDF
Abstract

Abstract

En 中文
Amidst the rapid development of the software industry and the burgeoning open-source culture, vulnerability detection within the software security domain has emerged as an ever-expanding area of focus. In recent years, the rapid advancement of artificial intelligence, particularly the notable progress in deep learning for pattern recognition and natural language processing, has catalyzed a surge in research endeavors exploring the integration of deep learning for the enhancement of vulnerability detection techniques. In this paper, we investigate contemporary deep learning-based source code analysis methods, with a concentrated emphasis on those pertaining to static code vulnerability detection. We categorize these methods based on various representations of source code employed during the preprocessing stage, including token-based and graph- based representations of source code, and further subdivided based on the types of deep learning algorithms or graph representations employed. We summarize the basic processes of model training and vulnerability detection under these different representation formats. Furthermore, we explore the limitations inherent in current approaches and provide insights into future trends and challenges for research in this field.
Keywords:
Vulnerability detection
Deep Learning
Similarity analysis
Code representation
Cyber security
AI Summary

AI Summary

Key information extracted from the uploaded paper, including a brief overview, abstract, background, key highlights, visual analysis, and future outlook.

Journal

C
Computers and Security
IF:
5.4
Papers:
4.6K
Citations:
1.4W

Organization

P
pla information engineering university
Scholars:
2.8K
Papers: 1.6K
Citations: 2
Cited Papers

Cited Papers

Learning from what we know: How to perform vulnerability prediction using noisy historical data
err2022-09-20
err14
errOAAI
errGarg, Aayush; Degiovanni, Renzo; Jimenez, Matthieu; Cordy, Maxime; Papadakis, Mike; Le Traon, Yves
errShare
errSave
errShare
errSave
A Deep Learning Approach to Discover Router Firmware Vulnerabilities
err2024-01-01
err1
PREAI
errAbu-Mahfouz, Amjad; Alrabaee, Saed; Khasawneh, Mahmoud; Gergely, Marton; Choo, Kim-Kwang Raymond
errShare
errSave
VulDeeLocator: A Deep Learning-Based Fine-Grained Vulnerability Detector
err2022-07-01
err87
errOAAI
errLi, Zhen; Zou, Deqing; Xu, Shouhuai; Chen, Zhaoxuan; Zhu, Yawei; Jin, Hai
errShare
errSave
SySeVR: A Framework for Using Deep Learning to Detect Software Vulnerabilities
err2022-07-01
err261
errOAAI
errLi, Zhen; Zou, Deqing; Xu, Shouhuai; Jin, Hai; Zhu, Yawei; Chen, Zhaoxuan
errShare
errSave
A Lightweight Assisted Vulnerability Discovery Method Using Deep Neural Networks
err2019-01-01
err21
errOAAI
errLi, Runhao; Feng, Chao; Zhang, Xing; Tang, Chaojing
errShare
errSave
VUDENC: Vulnerability Detection with Deep Learning on a Natural Codebase for Python
err2022-04-01
err57
errOAAI
errWartschinski, Laura; Noller, Yannic; Vogel, Thomas; Kehrer, Timo; Grunske, Lars
errShare
errSave
Software Vulnerability Discovery via Learning Multi-Domain Knowledge Bases
err2021-09-01
err80
PREAI
errLin, Guanjun; Zhang, Jun; Luo, Wei; Pan, Lei; De Vel, Olivier; Montague, Paul; Xiang, Yang
errShare
errSave
errShare
errSave
researcher View more