Detecting source code vulnerabilities is an essential issue today. In this paper, to improve the efficiency of detecting vulnerabilities in software written in C/C++, we propose to use a combination of Deep Graph Convolutional Neural Network (DGCNN) and code property graph (CPG). Specifically, 3 main proposed phases in the research method include: phase 1: building feature profiles of source code. At this step, we suggest using analysis techniques such as Word2vec, one hot encoding to standardize and analyze the source code; phase 2: extracting features of source code based on feature profiles. Accordingly, at this phase, we propose to use Deep Graph Convolutional Neural Network (DGCNN) model to analyze and extract features of the source code; phase 3: classifying source code based on the features extracted in phase 2 to find normal source code and source code containing security vulnerabilities. Some scenarios for comparing and evaluating the proposed method in this study compared with other approaches we have taken show the superior effectiveness of our approach. Besides, this result proves that our method in this paper is not only correct and reasonable, but it also opens up a new approach to the task of detecting source code vulnerabilities.
Bài báo quốc tế
Kho tri thức
/
Bài báo quốc tế
/
A new approach to software vulnerability detection based on CPG analysis
A new approach to software vulnerability detection based on CPG analysis
Đỗ Xuân Chợ
Xuất bản trên:
Ngày đăng:
2023
Nhà xuất bản:
Taylor & Francis Ltd.
Địa điểm:
Từ khoá:
source code vulnerabilities; source code vulnerability detection; source code features; feature profile; Deep Graph Convolutional Neural Network
Bài báo liên quan
A Study on Heuristic Algorithms Combined With LR on a DNN-Based IDS Model to Detect IoT Attacks
Hoàng Trọng Minh, Lương Đức Thuận, Nguyễn Hồng Đức, Trần Thị Thanh ThủyA Novel Distributed Machine Learning Model to Detect Attacks on Edge Computing Network
Lê Thị Trang Linh, Nguyễn Minh Quý, Hoàng Trọng MinhA novel approach for software vulnerability detection based on intelligent cognitive computing
Bui Van Cong, Ma Công Thanh, Dao Hoang Mai, Đỗ Xuân ChợA new framework for APT attack detection based on network traffic
Nguyễn Đình Hóa, Đỗ Xuân Chợ, Nguyễn Hoa Cương, Nguyễn Thành LongA new approach for detecting credit card fraud transaction
Đỗ Xuân Chợ, Nguyễn Duy Phương, Đào Ngọc PhongA Lightweight Method for Detecting Cyber Attacks in High-traffic Large Networks based on Clustering Techniques
Hà Thanh Dũng, Nguyễn Hồng SơnTowards an efficient approach using graph-based evolutionary algorithm for iot botnet detection
Nguyễn Huy Trung, Ngô Quốc Dũng