Visible to the public An Empirical Study on Vulnerability Detection for Source Code Software based on Deep Learning

TitleAn Empirical Study on Vulnerability Detection for Source Code Software based on Deep Learning
Publication TypeConference Paper
Year of Publication2021
AuthorsLin, Wei, Cai, Saihua
Conference Name2021 IEEE 21st International Conference on Software Quality, Reliability and Security Companion (QRS-C)
Date Publisheddec
Keywordscodes, compositionality, Conferences, Deep Learning, Human Behavior, Logic gates, Manuals, Metrics, Neural Network, pubcrawl, Recurrent neural networks, Resiliency, software quality, vulnerability detection
AbstractIn recent years, the complexity of software vulnera-bilities has continued to increase. Manual vulnerability detection methods alone no longer meet the demand. With the rapid development of the deep learning, many neural network models have been widely applied to source code vulnerability detection. The variant of recurrent neural network (RNN), bidirectional Long Short-Term Memory (BiLSTM), has been a popular choice in vulnerability detection. However, is BiLSTM the most suitable choice? To answer this question, we conducted a series of experiments to investigate the effectiveness of different neural network models for source code vulnerability detection. The results shows that the variants of RNN, gated recurrent unit (GRU) and bidirectional GRU, are more capable of detecting source code fragments with mixed vulnerability types. And the concatenated convolutional neural network is more capable of detecting source code fragments of single vulnerability types.
DOI10.1109/QRS-C55045.2021.00173
Citation Keylin_empirical_2021