删除或更新信息,请邮件至freekaoyan#163.com(#换成@)

深度学习源代码缺陷检测方法

本站小编 Free考研考试/2021-12-21

本文二维码信息
二维码(扫一下试试看!)
深度学习源代码缺陷检测方法
Source Code Defect Detection Based on Deep Learning
投稿时间:2018-10-16
DOI:10.15918/j.tbit1001-0645.2018.396
中文关键词:缺陷检测深度学习静态分析语义特征语法特征
English Keywords:defect detectiondeep learningstatic analysissemantic featuresyntactic feature
基金项目:国家自然科学基金资助项目(U1636115,U1736209)
作者单位
王晓萌中国信息安全测评中心, 北京 100085
张涛中国信息安全测评中心, 北京 100085
辛伟中国信息安全测评中心, 北京 100085
侯长玉中国信息安全测评中心, 北京 100085
摘要点击次数:843
全文下载次数:351
中文摘要:
针对由于传统的源代码缺陷分析技术依赖于分析人员的对安全问题的认识以及长期经验积累造成的缺陷检测误报率、漏报率较高的问题,提出了一种深度学习算法源代码缺陷检测方法.该方法根据深度学习算法,利用程序源代码的抽象语法树、数据流特征,通过训练源代码缺陷分类器完成源代码缺陷检测工作.其依据的关键理论是应用深度学习算法及自然语言处理中的词嵌套算法学习源代码抽象语法树和数据流中蕴含的深层次语义特征和语法特征,提出了应用于源代码缺陷检测的深度学习一般框架.使用公开数据集SARD对提出的方法进行验证,研究结果表明该方法在代码缺陷检测的准确率、召回率、误报率和漏报率方面均优于现有的检测方法.
English Summary:
The development and progress of traditional source code defect analysis techniques rely mainly on analysts' understanding of safety issues and long-term experience. To improve the quality of source code defect detection and report, a source code defect detection method was proposed based on deep learning algorithm. Firstly, introducing an abstract syntactic tree of program source code and the data stream features, and training source code defect sorter, the method was arranged to achieve source code defect detection according to the deep learning algorithm. And then,analyzing the abstract syntactic tree of source code and the semantic and syntactic feature contained in the data stream, a general framework was proposed for deep learning based source code defect detection according to the key theories, deep learning algorithm and word nesting algorithm in nature language processing. Finally, an open data set SARD was used to validate the proposed method. The experimental results show that, the proposed method can learn semantic and syntactic features hidden in the source code and outperform the existing methods in terms of accuracy, recall rate, false positive rate, and false negative rate.
查看全文查看/发表评论下载PDF阅读器
相关话题/北京 语法 中文 技术 程序