arrow
Return

Vulnerability Detection Based on Enhanced Graph Representation Learning

delete2024-01-01
delete3
PRE
AI
Q
Qibin Xiao
X
Xusheng Zhang
Y
Yumei Wu *
F
Fengyu Yang
DOI:10.1109/TIFS.2024.3392536delete
deleteOriginal
deleteOriginal request for help
deleteShare
deleteSave
Abstract

Abstract

En 中文
The detection of program vulnerabilities remains a challenging task in software security. The existing vulnerability detection methods rarely consider the multidimensional feature space complementarity of program graph structures, which easily overlooks contextual environment features and syntax structure features. This disadvantage leads to insufficient performance in capturing complex structural features, which hinders the improvement in detection accuracy. To address this issue, this paper introduces a novel vulnerability detection method, EnGS2F, which adopts the representation learning of an enhanced graph structure to improve the efficiency of capturing vulnerability information. On the dimension of the graph structure, a context relationship graph (CRG) is integrated on the basis of a program dependency graph (PDG) to enrich the global structural context representation. On the dimension of graph nodes, abstract syntax tree (AST) embedding and paragraph embedding are integrated to solve the problem of insufficient feature space complementarity. Moreover, the combination of a gated graph neural network (GGNN) with a graph attention mechanism further improves the learning performance of the enhanced graph structure. EnGS2F has been rigorously evaluated on program slices from open-source vulnerability datasets, demonstrating significant improvements over current competitive methods in detecting program vulnerabilities. Specifically, EnGS2F achieved a significant increase in the F1 score, outperforming existing technologies by 6%.
Keywords:
Vulnerability detection
graph representation learning
enhanced graph structure
AST embedding
feature space complementarity

Journal

IEEE Transactions on Information Forensics and Security cover
IEEE Transactions on Information Forensics and Security
IF:
8
Papers:
5.3K
Citations:
2.3W

Organization

B
Beihang University
Scholars:
5.2W
Papers: 4.1W
Citations: 37
N
Nanchang Hangkong University
Scholars:
7.4K
Papers: 4.0K
Citations: 81
Cited Papers

Cited Papers

A prospective study of surgical margin status in oral squamous cell carcinoma: A preliminary report
err2008-12-12
err0
PREAI
errRan Yahalom; Alex Dobriyan; Marilena Vered; Yoav P. Talmi; Shlomo Teicher; Lev Bedrin
errShare
errSave
Data-Driven Cybersecurity Incident Prediction: A Survey
err2019-01-01
err210
PREAI
errSun, Nan; Zhang, Jun; Rimba, Paul; Gao, Shang; Zhang, Leo Yu; Xiang, Yang
errShare
errSave
SySeVR: A Framework for Using Deep Learning to Detect Software Vulnerabilities
err2022-07-01
err261
errOAAI
errLi, Zhen; Zou, Deqing; Xu, Shouhuai; Jin, Hai; Zhu, Yawei; Chen, Zhaoxuan
errShare
errSave
Bacopa monniera stabilized gold nanoparticles (BmGNPs) alleviated the oxidative stress induced by aluminum in albino mice
err2013-06-01
err0
PREAI
errMahitha Bommavaram; Mallikarjuna Korivi; Deva Prasad Raju Borelli; Jacob Doss Pabbadhi; John Sushma Nannepaga
errShare
errSave
errShare
errSave
errShare
errSave
researcher View more