Neural software vulnerability analysis using rich intermediate graph representations of programs

DOI10.1016/J.INS.2020.11.053MaRDI QIDQ2123552zbMATH OpenOpenAlexWikidataFDO

Authors Seyed Mohammad Ghaffarian, Hamid Reza Shahriari

Publication date 14 April 2022

Published in Information Sciences (Search for Journal in Brave)

Full work available at URL https://doi.org/10.1016/j.ins.2020.11.053

zbMATH Keywords

artificial neural networksmachine learninggraph neural networksautomated vulnerability analysissoftware security vulnerability

Mathematics Subject Classification ID

Learning and adaptive systems in artificial intelligence (68T05) Graph theory (including graph drawing) in computer science (68R10) Mathematical aspects of software engineering (specification, verification, metrics, requirements, etc.) (68N30)

Recommendations

• Pattern-based vulnerability discovery
• The flowing nature matters: feature learning from the control flow graph of source code for bug localization
• \textsc{SparrowHawk}: memory safety flaw detection via data-driven source code annotation
• Machine learning for black-box fuzzing of network protocols
• Survey of software vulnerability taxonomies

Cites work

• scientific article; zbMATH DE number 5344975 (Why is no real title available?)
• scientific article; zbMATH DE number 1324833 (Why is no real title available?)
• Introduction to Information Retrieval
• Pattern-based vulnerability discovery
• The graph matching problem

Cited in

(5)

• Meta-heuristic-based hybrid deep learning model for vulnerability detection and prevention in software system
• Machine learning for black-box fuzzing of network protocols
• Pattern-based vulnerability discovery
• The flowing nature matters: feature learning from the control flow graph of source code for bug localization
• A memory-related vulnerability detection approach based on vulnerability model with Petri Net

Describes a project that uses

Uses Software

• word2vec
• ImageNet
• DeepFace
• VulDeePecker
• AlexNet
• DeepBugs

This page was built for publication: Neural software vulnerability analysis using rich intermediate graph representations of programs

Report a bug (only for logged in users!)Click here to report a bug for this page (MaRDI item Q2123552)