Cổng tri thức PTIT

Bài báo quốc tế

Kho tri thức

/

/

A novel approach for software vulnerability detection based on intelligent cognitive computing

A novel approach for software vulnerability detection based on intelligent cognitive computing

Bui Van Cong, Ma Công Thanh, Dao Hoang Mai, Đỗ Xuân Chợ

Improving and enhancing the efectiveness of software vulnerability detection methods is urgently needed today. In this study, we propose a new source code vulnerability detection method based on intelligent and advanced computational algorithms. It’s a combination of four main processing techniques including (i) Source Embedding, (ii) Feature Learning, (iii) Resampling Data, and (iv) Classifcation. The Source Embedding method will perform the task of analyzing and standardizing the source code based on the Joern tool and the data mining algorithm. The Feature Learning model has the function of aggregating and extracting source code attribute based on node using machine learning and deep learning methods. The Resampling Data technique will perform equalization of the experimental dataset. Finally, the Classifcation model has the function of detecting source code vulnerabilities. The novelty and uniqueness of the new intelligent cognitive computing method is the combination and synchronous use of many diferent data extracting techniques to compute, represent, and extract the properties of the source code. With this new calculation method, many signifcant unusual properties and features of the vulnerability have been synthesized and extracted. To prove the superiority of the proposed method, we experiment to detect source code vulnerabilities based on the Verum dataset, details of this part are presented in the experimental section. The experimental results show that the method proposed in the paper has brought good results on all measures. These results have shown to be the best research results for the source code vulnerability detection task using the Verum dataset according to our survey to date. With such results, the proposal in this study is not only meaningful in terms of science but also in practical terms when the method of using intelligent cognitive computing techniques to analyze and evaluate source code has helped to improve the efciency of the source code analysis and vulnerability detection process

Xuất bản trên:

The Journal of Supercomputing


Nhà xuất bản:

Springer

Địa điểm:


Từ khoá:

Source code vulnerability, Source code vulnerability detection, Code property graph, Source embedding, Data rebalancing, Feature learning, Classifcation

Bài báo liên quan

Hoàng Trọng Minh, Lương Đức Thuận, Nguyễn Hồng Đức, Trần Thị Thanh Thủy
Lê Thị Trang Linh, Nguyễn Minh Quý, Hoàng Trọng Minh
Nguyễn Đình Hóa, Đỗ Xuân Chợ, Nguyễn Hoa Cương, Nguyễn Thành Long
Đỗ Xuân Chợ, Nguyễn Duy Phương, Đào Ngọc Phong