skip to main content

IRC-CLVul: Cross-Programming-Language Vulnerability Detection with Intermediate Representations and Combined Features

Lei, Tianwei ; Xue, Jingfeng ; Wang, Yong ; Liu, Zhenyan

Electronics (Basel), 2023-07, Vol.12 (14), p.3067 [Periódico revisado por pares]

Basel: MDPI AG

Texto completo disponível

Citações Citado por
  • Título:
    IRC-CLVul: Cross-Programming-Language Vulnerability Detection with Intermediate Representations and Combined Features
  • Autor: Lei, Tianwei ; Xue, Jingfeng ; Wang, Yong ; Liu, Zhenyan
  • Assuntos: Accuracy ; Algorithms ; Analysis ; Classification ; Cloning ; Computer programming ; Deep learning ; Feature extraction ; Flow graphs ; Natural language processing ; Neural networks ; Program errors ; Programming languages ; Representations ; Semantics ; Software testing ; Syntax
  • É parte de: Electronics (Basel), 2023-07, Vol.12 (14), p.3067
  • Descrição: The most severe problem in cross-programming languages is feature extraction due to different tokens in different programming languages. To solve this problem, we propose a cross-programming-language vulnerability detection method in this paper, IRC-CLVul, based on intermediate representation and combined features. Specifically, we first converted programs in different programming languages into a unified LLVM intermediate representation (LLVM-IR) to provide a classification basis for different programming languages. Afterwards, we extracted the code sequences and control flow graphs of the samples, used the semantic model to extract the program semantic information and graph structure information, and concatenated them into semantic vectors. Finally, we used Random Forest to learn the concatenated semantic vectors and obtained the classification results. We conducted experiments on 85,811 samples from the Juliet test suite in C, C++, and Java. The results show that our method improved the accuracy by 7% compared with the two baseline algorithms, and the F1 score showed a 12% increase.
  • Editor: Basel: MDPI AG
  • Idioma: Inglês

Buscando em bases de dados remotas. Favor aguardar.