Improving and enhancing the efectiveness of software vulnerability detection methods is urgently needed today. In this study, we propose a new source code vulnerability detection method based on intelligent and advanced computational algorithms. It’s a combination of four main processing techniques including (i) Source Embedding, (ii) Feature Learning, (iii) Resampling Data, and (iv) Classifcation. The Source Embedding method will perform the task of analyzing and standardizing the source code based on the Joern tool and the data mining algorithm. The Feature Learning model has the function of aggregating and extracting source code attribute based on node using machine learning and deep learning methods. The Resampling Data technique will perform equalization of the experimental dataset. Finally, the Classifcation model has the function of detecting source code vulnerabilities. The novelty and uniqueness of the new intelligent cognitive computing method is the combination and synchronous use of many diferent data extracting techniques to compute, represent, and extract the properties of the source code. With this new calculation method, many signifcant unusual properties and features of the vulnerability have been synthesized and extracted. To prove the superiority of the proposed method, we experiment to detect source code vulnerabilities based on the Verum dataset, details of this part are presented in the experimental section. The experimental results show that the method proposed in the paper has brought good results on all measures. These results have shown to be the best research results for the source code vulnerability detection task using the Verum dataset according to our survey to date. With such results, the proposal in this study is not only meaningful in terms of science but also in practical terms when the method of using intelligent cognitive computing techniques to analyze and evaluate source code has helped to improve the efciency of the source code analysis and vulnerability detection process
Bài báo quốc tế
Kho tri thức
/
Bài báo quốc tế
/
A novel approach for software vulnerability detection based on intelligent cognitive computing
A novel approach for software vulnerability detection based on intelligent cognitive computing
Bui Van Cong, Ma Công Thanh, Dao Hoang Mai, Đỗ Xuân Chợ
Xuất bản trên:
Ngày đăng:
2023
Nhà xuất bản:
Springer
Địa điểm:
Từ khoá:
Source code vulnerability, Source code vulnerability detection, Code property graph, Source embedding, Data rebalancing, Feature learning, Classifcation
Bài báo liên quan
A Study on Heuristic Algorithms Combined With LR on a DNN-Based IDS Model to Detect IoT Attacks
Hoàng Trọng Minh, Lương Đức Thuận, Nguyễn Hồng Đức, Trần Thị Thanh ThủyA Novel Distributed Machine Learning Model to Detect Attacks on Edge Computing Network
Lê Thị Trang Linh, Nguyễn Minh Quý, Hoàng Trọng MinhA new framework for APT attack detection based on network traffic
Nguyễn Đình Hóa, Đỗ Xuân Chợ, Nguyễn Hoa Cương, Nguyễn Thành LongA new approach for detecting credit card fraud transaction
Đỗ Xuân Chợ, Nguyễn Duy Phương, Đào Ngọc PhongA Lightweight Method for Detecting Cyber Attacks in High-traffic Large Networks based on Clustering Techniques
Hà Thanh Dũng, Nguyễn Hồng SơnTowards an efficient approach using graph-based evolutionary algorithm for iot botnet detection
Nguyễn Huy Trung, Ngô Quốc Dũng