E-GVD: Efficient Software Vulnerability Detection Techniques Based on Graph Neural Network

被引:0
|
作者
Wang, Haiye [2 ]
Qu, Zhiguo [1 ,2 ]
Sun, Le [1 ,2 ]
机构
[1] Nanjing Univ Informat Sci & Technol, Engn Res Ctr Digital Forens, Minist Educ, Nanjing 210044, Jiangsu, Peoples R China
[2] Nanjing Univ Informat Sci & Technol, Sch Comp Sci, Nanjing 210044, Jiangsu, Peoples R China
来源
EAI ENDORSED TRANSACTIONS ON SCALABLE INFORMATION SYSTEMS | 2024年 / 11卷 / 06期
基金
中国国家自然科学基金;
关键词
vulnerability detection; graph neural network; pre-trained model; interpretable machine learning;
D O I
10.4108/eetsis.5056
中图分类号
TP [自动化技术、计算机技术];
学科分类号
0812 ;
摘要
INTRODUCTION: Vulnerability detection is crucial for preventing severe security incidents like hacker attacks, data breaches, and network paralysis. Traditional methods, however, face challenges such as low efficiency and insufficient detail in identifying code vulnerabilities. OBJECTIVES: This paper introduces E-GVD, an advanced method for source code vulnerability detection, aiming to address the limitations of existing methods. The objective is to enhance the accuracy of functionlevel vulnerability detection and provide detailed, understandable insights into the vulnerabilities. METHODS: E-GVD combines Graph Neural Networks (GNNs), which are adept at handling graph-structured data, with residual connections and advanced Programming Language (PL) pre-trained models. RESULTS: Experiments conducted on the real-world vulnerability dataset CodeXGLUE show that E-GVD significantly outperforms existing baseline methods in detecting vulnerabilities. It achieves a maximum accuracy gain of 4.98%, indicating its effectiveness over traditional methods. CONCLUSION: E-GVD not only improves the accuracy of vulnerability detection but also contributes by providing fine-grained explanations. These explanations are made possible through an interpretable Machine Learning (ML) model, which aids developers in quickly and efficiently repairing vulnerabilities, thereby enhancing overall software security.
引用
收藏
页码:1 / 9
页数:9
相关论文
共 50 条
  • [1] Vulnerability Identification and Detection of Different Software Codes with a Graph Neural Network
    Zhang, Lei
    Liu, Zehui
    International Journal of Network Security, 2023, 25 (04) : 571 - 575
  • [2] A comparative study of neural network techniques for automatic software vulnerability detection
    Tang, Gaigai
    Meng, Lianxiao
    Wang, Huiqiang
    Ren, Shuangyin
    Wang, Qiang
    Yang, Lin
    Cao, Weipeng
    2020 INTERNATIONAL SYMPOSIUM ON THEORETICAL ASPECTS OF SOFTWARE ENGINEERING (TASE 2020), 2020, : 1 - 8
  • [3] Automated Software Vulnerability Detection Based on Hybrid Neural Network
    Li, Xin
    Wang, Lu
    Xin, Yang
    Yang, Yixian
    Tang, Qifeng
    Chen, Yuling
    APPLIED SCIENCES-BASEL, 2021, 11 (07):
  • [4] Efficient Vulnerability Detection for Smart Contracts Using Gated Graph Neural Network
    Zhai, Yiwen
    Yang, Jia
    Zhang, Mingwu
    INFORMATION SECURITY AND PRIVACY, PT III, ACISP 2024, 2024, 14897 : 44 - 63
  • [5] Convolutional Neural Network for Software Vulnerability Detection
    Yang, Kaixi
    Miller, Paul
    Martinez-del-Rincon, Jesus
    2022 CYBER RESEARCH CONFERENCE - IRELAND (CYBER-RCI), 2022, : 83 - 86
  • [6] ACGVD: Vulnerability Detection Based on Comprehensive Graph via Graph Neural Network with Attention
    Li, Min
    Li, Chunfang
    Li, Shuailou
    Wu, Yanna
    Zhang, Boyang
    Wen, Yu
    INFORMATION AND COMMUNICATIONS SECURITY (ICICS 2021), PT I, 2021, 12918 : 243 - 259
  • [7] A new method of software vulnerability detection based on a quantum neural network
    Zhou, Xin
    Pang, Jianmin
    Yue, Feng
    Liu, Fudong
    Guo, Jiayu
    Liu, Wenfu
    Song, Zhihui
    Shu, Guoqiang
    Xia, Bing
    Shan, Zheng
    SCIENTIFIC REPORTS, 2022, 12 (01)
  • [8] A new method of software vulnerability detection based on a quantum neural network
    Xin Zhou
    Jianmin Pang
    Feng Yue
    Fudong Liu
    Jiayu Guo
    Wenfu Liu
    Zhihui Song
    Guoqiang Shu
    Bing Xia
    Zheng Shan
    Scientific Reports, 12
  • [9] TACSan: Enhancing Vulnerability Detection with Graph Neural Network
    Zeng, Qingyao
    Xiong, Dapeng
    Wu, Zhongwang
    Qian, Kechang
    Wang, Yu
    Su, Yinghao
    ELECTRONICS, 2024, 13 (19)
  • [10] iGnnVD: A novel software vulnerability detection model based on integrated graph neural networks
    Chen, Jinfu
    Yin, Yemin
    Cai, Saihua
    Wang, Weijia
    Wang, Shengran
    Chen, Jiming
    SCIENCE OF COMPUTER PROGRAMMING, 2024, 238