Automated Software Vulnerability Detection via Curriculum Learning

被引:0
|
作者
Du, Qianjin [1 ]
Kun, Wei [2 ]
Kuang, Xiaohui [2 ]
Li, Xiang [2 ]
Zhao, Gang [2 ]
机构
[1] Tsinghua Univ, Dept Comp Sci & Technol, Beijing, Peoples R China
[2] Natl Key Lab Sci & Technol Informat Syst Secur, Beijing, Peoples R China
关键词
Software Vulnerability; Curriculum Learning; Deep Learning;
D O I
10.1109/ICME55011.2023.00485
中图分类号
TP18 [人工智能理论];
学科分类号
081104 ; 0812 ; 0835 ; 1405 ;
摘要
With the development of deep learning, software vulnerability detection methods based on deep learning have achieved great success, which outperform traditional methods in efficiency and precision. At the training stage, all training samples are treated equally and presented in random order. However, in software vulnerability detection tasks, the detection difficulties of different samples vary greatly. Similar to the human learning mechanism following an easy-to-difficult curriculum learning procedure, vulnerability detection models can also benefit from the easy-to-hard curriculums. Motivated by this observation, we introduce curriculum learning for automated software vulnerability detection, which is capable of arranging easy-to-difficult training samples to learn better detection models without any human intervention. Experimental results show that our method achieves obvious performance improvements compared to baseline models.
引用
收藏
页码:2855 / 2860
页数:6
相关论文
共 50 条
  • [31] DOS attack using automated vulnerability scanning software
    Manolache, Florin B.
    Rusu, Octavian
    Subredu, Manuel
    Education Training and Information Communication Technologies RoEduNet' 05: Proceedings of the 4th International Conference RoEduNet Romania, 2005, : 261 - 267
  • [32] A Survey of Automated Root Cause Analysis of Software Vulnerability
    Jurn, JeeSoo
    Kim, Taeeun
    Kim, Hwankuk
    INNOVATIVE MOBILE AND INTERNET SERVICES IN UBIQUITOUS COMPUTING, IMIS-2018, 2019, 773 : 756 - 761
  • [33] Towards Automated Security Vulnerability and Software Defect Localization
    Visalli, Nicholas
    Deng, Lin
    Al-Suwaida, Amro
    Brown, Zachary
    Joshi, Manish
    Wei, Bingyang
    2019 IEEE/ACIS 17TH INTERNATIONAL CONFERENCE ON SOFTWARE ENGINEERING RESEARCH, MANAGEMENT AND APPLICATIONS (SERA), 2019, : 90 - 93
  • [34] Vulnerability Detection for Smart Contract via Backward Bayesian Active Learning
    Zhang, Jiale
    Tu, Liangqiong
    Cai, Jie
    Su, Xiaobing
    Li, Bin
    Chen, Weitong
    Wang, Yu
    APPLIED CRYPTOGRAPHY AND NETWORK SECURITY WORKSHOPS, ACNS 2022, 2022, 13285 : 66 - 83
  • [35] Code Clone Detection via Software Visualization Representation Learning
    Qiu, Shaojian
    Wang, Shaosheng
    Liang, Yujun
    Jiang, Wenchao
    Zhang, Fanlong
    Proceedings of the International Conference on Software Engineering and Knowledge Engineering, SEKE, 2023, 2023-July : 268 - 273
  • [36] Combining Graph-Based Learning with Automated Data Collection for Code Vulnerability Detection
    Wang, Huanting
    Ye, Guixin
    Tang, Zhanyong
    Tan, Shin Hwei
    Huang, Songfang
    Fang, Dingyi
    Feng, Yansong
    Bian, Lizhong
    Wang, Zheng
    IEEE Transactions on Information Forensics and Security, 2021, 16 : 1943 - 1958
  • [37] Combining Graph-Based Learning With Automated Data Collection for Code Vulnerability Detection
    Wang, Huanting
    Ye, Guixin
    Tang, Zhanyong
    Tan, Shin Hwei
    Huang, Songfang
    Fang, Dingyi
    Feng, Yansong
    Bian, Lizhong
    Wang, Zheng
    IEEE TRANSACTIONS ON INFORMATION FORENSICS AND SECURITY, 2021, 16 : 1943 - 1958
  • [38] A deep learning-based approach for software vulnerability detection using code metrics
    Subhan, Fazli
    Wu, Xiaoxue
    Bo, Lili
    Sun, Xiaobing
    Rahman, Muhammad
    IET SOFTWARE, 2022, 16 (05) : 516 - 526
  • [39] Software Vulnerability Detection and Analysis Technology Integrating Static Taint Analysis and Deep Learning
    Luo, Li
    Zhu, Honghua
    International Journal of Network Security, 2024, 26 (05) : 776 - 785
  • [40] Toward More Effective Deep Learning-based Automated Software Vulnerability Prediction, Classification, and Repair
    Fu, Michael
    2023 IEEE/ACM 45TH INTERNATIONAL CONFERENCE ON SOFTWARE ENGINEERING: COMPANION PROCEEDINGS, ICSE-COMPANION, 2023, : 208 - 212