arrow
Return

Vulnerability detection in Java source code using a quantum convolutional neural network with self-attentive pooling, deep sequence, and graph-based hybrid feature extraction

delete2024-03-28
delete3
delete
OA
AI
S
Shumaila Hussain *
M
Muhammad Nadeem
J
Junaid Baber
M
Mohammed Hamdi
A
Adel Rajab
M
Mana Saleh Al Reshan
A
Asadullah Shaikh
DOI:10.1038/s41598-024-56871-zdelete
deleteOriginal
deleteShare
deleteSave
View PDF
Abstract

Abstract

En 中文
Software vulnerabilities pose a significant threat to system security, necessitating effective automatic detection methods. Current techniques face challenges such as dependency issues, language bias, and coarse detection granularity. This study presents a novel deep learning-based vulnerability detection system for Java code. Leveraging hybrid feature extraction through graph and sequence-based techniques enhances semantic and syntactic understanding. The system utilizes control flow graphs (CFG), abstract syntax trees (AST), program dependencies (PD), and greedy longest-match first vectorization for graph representation. A hybrid neural network (GCN-RFEMLP) and the pre-trained CodeBERT model extract features, feeding them into a quantum convolutional neural network with self-attentive pooling. The system addresses issues like long-term information dependency and coarse detection granularity, employing intermediate code representation and inter-procedural slice code. To mitigate language bias, a benchmark software assurance reference dataset is employed. Evaluations demonstrate the system's superiority, achieving 99.2% accuracy in detecting vulnerabilities, outperforming benchmark methods. The proposed approach comprehensively addresses vulnerabilities, including improper input validation, missing authorizations, buffer overflow, cross-site scripting, and SQL injection attacks listed by common weakness enumeration (CWE).
Keywords:
Vulnerability detection
Self-attentive QCNN
Feature extraction
Hybrid GCN
Software security
CodeBERT
AI Summary

AI Summary

Key information extracted from the uploaded paper, including a brief overview, abstract, background, key highlights, visual analysis, and future outlook.

Journal

Scientific Reports cover
Scientific Reports
IF:
3.9
Papers:
27.1W
Citations:
83.5W

Organization

U
universite grenoble alpes (uga)
Scholars:
2.1W
Papers: 1.5W
Citations: 23
U
University of Balochistan
Scholars:
534
Papers: 364
Citations: 462
C
centre national de la recherche scientifique (cnrs)
Scholars:
24.5W
Papers: 18.2W
Citations: 279
C
communaute universite grenoble alpes
Scholars:
3.5W
Papers: 2.7W
Citations: 29
H
higher colleges of technology - united arab emirates
Scholars:
541
Papers: 450
Citations: 0
researcher View more organizations