Can I read Enhancing vulnerability detection via AST decomposition and neural sub-tree encoding on EtoBox?

Enhancing vulnerability detection via AST decomposition and neural sub-tree encoding by Zhenzhou Tian; Binhui Tian; Jiajun Lv; Yanping Chen; Lingwei Chen is a Computer Science article available to read on EtoBox.

What is Enhancing vulnerability detection via AST decomposition and neural sub-tree encoding about?

The explosive growth of software vulnerabilities poses a serious threat to the system security and has become one of the urgent problems of the day. However, existing vulnerability detection methods are still faced with limitations in reaching the balance between detection accuracy, efficiency and applicability. Following a divide-and-conquer strategy, this paper proposes TrVD (abstract syntax Tree decomposition based Vulnerability Detector) to disclose the indicative semantics implied in the source code fragments for accurate and efficient vulnerability detection. To facilitate the capture of subtle semantic features, TrVD converts the AST of a code fragment into an ordered set of sub-trees of restricted sizes and depths with a novel decomposition algorithm. The semantics of each sub-tree can thus be effectively collected with a carefully designed tree-structured neural network. Finally, a Transformer-style encoder is utilized to aggregate the long-range contextual semantics of all sub-trees into a vulnerability-specific vector to represent the target code fragment. The extensive experiments conducted on five large datasets consisting of diverse real-world and synthetic vulnerable

Who reads Enhancing vulnerability detection via AST decomposition and neural sub-tree encoding?

Author

Zhenzhou Tian; Binhui Tian; Jiajun Lv; Yanping Chen; Lingwei Chen

Publisher

Elsevier BV

Published

2024

Language

EN

Field

Computer Science (Physical Sciences)