دورية أكاديمية

Software Vulnerability Detection Using Informed Code Graph Pruning

التفاصيل البيبلوغرافية
العنوان: Software Vulnerability Detection Using Informed Code Graph Pruning
المؤلفون: Joseph Gear, Yue Xu, Ernest Foo, Praveen Gauravaram, Zahra Jadidi, Leonie Simpson
المصدر: IEEE Access, Vol 11, Pp 135626-135644 (2023)
بيانات النشر: IEEE, 2023.
سنة النشر: 2023
المجموعة: LCC:Electrical engineering. Electronics. Nuclear engineering
مصطلحات موضوعية: Code representation, deep learning, source code semantics, vulnerability detection, Electrical engineering. Electronics. Nuclear engineering, TK1-9971
الوصف: pruning methods that can be used to reduce graph size to manageable levels by removing information irrelevant to vulnerabilities, while preserving relevant information. We present “Semantic-enhanced Code Embedding for Vulnerability Detection” (SCEVD), a deep learning model for vulnerability detection that seeks to fill these gaps by using more detailed information about code semantics to select vulnerability-relevant features from code graphs. We propose several heuristic-based pruning methods, implement them as part of SCEVD, and conduct experiments to verify their effectiveness. Our heuristic-based pruning improves on vulnerability detection results by up to 12% over the baseline pruning method.
نوع الوثيقة: article
وصف الملف: electronic resource
اللغة: English
تدمد: 2169-3536
Relation: https://ieeexplore.ieee.org/document/10339268/; https://doaj.org/toc/2169-3536
DOI: 10.1109/ACCESS.2023.3338162
URL الوصول: https://doaj.org/article/493f1c88231e488d975af41595a1cda4
رقم الأكسشن: edsdoj.493f1c88231e488d975af41595a1cda4
قاعدة البيانات: Directory of Open Access Journals
الوصف
تدمد:21693536
DOI:10.1109/ACCESS.2023.3338162