Literature survey of deep learning-based vulnerability analysis on source code

被引:15
|
作者
Semasaba, Abubakar Omari Abdallah [1 ]
Zheng, Wei [1 ]
Wu, Xiaoxue [2 ]
Agyemang, Samuel Akwasi [1 ]
机构
[1] Northwestern Polytech Univ, Sch Software, Xian, Shaanxi, Peoples R China
[2] Northwestern Polytech Univ, Sch Cyberspace Secur, Xian, Shaanxi, Peoples R China
关键词
security of data; learning (artificial intelligence); neural nets; source code (software); auditing; software engineering; deep learning-based vulnerability analysis; software source code; software code auditing; software vulnerability analysis; vulnerability analysis aspect; NEURAL-NETWORKS; SOFTWARE; SYSTEM; CHURN;
D O I
10.1049/iet-sen.2020.0084
中图分类号
TP31 [计算机软件];
学科分类号
081202 ; 0835 ;
摘要
Vulnerabilities in software source code are one of the critical issues in the realm of software code auditing. Due to their high impact, several approaches have been studied in the past few years to mitigate the damages from such vulnerabilities. Among the approaches, deep learning has gained popularity throughout the years to address such issues. In this literature survey, the authors provide an extensive review of the many works in the field software vulnerability analysis that utilise deep learning-based techniques. The reviewed works are systemised according to their objectives (i.e. the type of vulnerability analysis aspect), the area of focus (i.e. the focus area of the analysis), what information about source code is used (i.e. the features), and what deep learning techniques they employ (i.e. what algorithm is used to process the input and produce the output). They also study the limitations of the papers and topical trends concerning vulnerability analysis.
引用
收藏
页码:654 / 664
页数:11
相关论文
共 50 条
  • [1] Survey of source code vulnerability analysis based on deep learning
    Liang, Chen
    Wei, Qiang
    Du, Jiang
    Wang, Yisen
    Jiang, Zirui
    COMPUTERS & SECURITY, 2025, 148
  • [2] A Survey on Deep Learning-Based Source Code Defect Analysis
    Guan, Zhibin
    Wang, Xiaomeng
    Xin, Wei
    Wang, Jiajie
    Zhang, Li
    2020 5TH INTERNATIONAL CONFERENCE ON COMPUTER AND COMMUNICATION SYSTEMS (ICCCS 2020), 2020, : 167 - 171
  • [3] Research and Progress on Learning-Based Source Code Vulnerability Detection
    Su X.-H.
    Zheng W.-N.
    Jiang Y.
    Wei H.-W.
    Wan J.-Y.
    Wei Z.-Y.
    Jisuanji Xuebao/Chinese Journal of Computers, 2024, 47 (02): : 337 - 374
  • [4] An empirical evaluation of deep learning-based source code vulnerability detection: Representation versus models
    Semasaba, Abubakar Omari Abdallah
    Zheng, Wei
    Wu, Xiaoxue
    Agyemang, Samuel Akwasi
    Liu, Tao
    Ge, Yuan
    JOURNAL OF SOFTWARE-EVOLUTION AND PROCESS, 2023, 35 (11)
  • [5] A Survey of Deep Learning-Based Source Image Forensics
    Yang, Pengpeng
    Baracchi, Daniele
    Ni, Rongrong
    Zhao, Yao
    Argenti, Fabrizio
    Piva, Alessandro
    JOURNAL OF IMAGING, 2020, 6 (03)
  • [6] DeKeDVer: A deep learning-based multi-type software vulnerability classification framework using vulnerability description and source code
    Dong, Yukun
    Tang, Yeer
    Cheng, Xiaotong
    Yang, Yufei
    INFORMATION AND SOFTWARE TECHNOLOGY, 2023, 163
  • [7] Survey of Source Code Bug Detection Based on Deep Learning
    Deng X.
    Ye W.
    Xie R.
    Zhang S.-K.
    Ruan Jian Xue Bao/Journal of Software, 2023, 34 (02): : 625 - 654
  • [8] A deep learning-based approach for software vulnerability detection using code metrics
    Subhan, Fazli
    Wu, Xiaoxue
    Bo, Lili
    Sun, Xiaobing
    Rahman, Muhammad
    IET SOFTWARE, 2022, 16 (05) : 516 - 526
  • [9] An Empirical Study on Vulnerability Detection for Source Code Software based on Deep Learning
    Lin, Wei
    Cai, Saihua
    2021 21ST INTERNATIONAL CONFERENCE ON SOFTWARE QUALITY, RELIABILITY AND SECURITY COMPANION (QRS-C 2021), 2021, : 1159 - 1160
  • [10] Interpretation of Learning-Based Automatic Source Code Vulnerability Detection Model Using LIME
    Tang, Gaigai
    Zhang, Long
    Yang, Feng
    Meng, Lianxiao
    Cao, Weipeng
    Qiu, Meikang
    Ren, Shuangyin
    Yang, Lin
    Wang, Huiqiang
    KNOWLEDGE SCIENCE, ENGINEERING AND MANAGEMENT, PT III, 2021, 12817 : 275 - 286