Abstract:Program classification can be regarded as a high-level abstraction of code, laying a foundation for various tasks related to source code comprehension, and has a very wide range of applications in the field of software engineering, such as code clone detection, code smell classification, defects classification, etc. The cross-language program classification can realize code transfer in different programming languages, and can also promote cross-language code reuse, thereby helping developers to write code quickly and reduce the development time of code transfer. Most of the existing studies focus on the semantic learning of the code, whilst few studies are devoted to cross-language tasks. The main challenge of cross-language program classification is how to extract semantic features of different programming languages. In order to cope with this difficulty, we propose a Unified Abstract Syntax Tree (namely UAST in this paper) neural network. In detail, the core idea of UAST consists of two unified mechanisms. First, UAST learns an AST representation by unifying the AST traversal sequence and graph-like AST structure for capturing semantic code features. Second, we construct a mechanism called unified vocabulary, which can reduce the feature gap between different programming languages, so it can achieve the role of cross-language program classification. Besides, we collect a dataset containing 20,000 files of five programming languages, which can be used as a benchmark dataset for the cross-language program classification task. We have done experiments on two datasets, and the results show that our proposed approach outperforms the state-of-the-art baselines in terms of four evaluation metrics (Precision, Recall, F1-score, and Accuracy).

Multi-language Webshell Detection Based on Abstract Syntax Tree and TreeLSTM

AST-DF: A New Webshell Detection Method Based on Abstract Syntax Tree and Deep Forest

Webshell Detection Technology Based on Deep Learning

BERT-Embedding-Based JSP Webshell Detection on Bytecode Level Using XGBoost

GlareShell: Graph learning-based PHP webshell detection for web server of industrial internet

Research and application of artificial intelligence based webshell detection model: A literature review

Deep Learning-based approaches for automatic detection of shell nouns and evaluation on WikiText-2

Large Language Models are Few-shot Generators: Proposing Hybrid Prompt Algorithm To Generate Webshell Escape Samples

ShellCore: Automating Malicious IoT Software Detection Using Shell Commands Representation

ShellCore: Automating Malicious IoT Software Detection by Using Shell Commands Representation

JStrong: Malicious JavaScript detection based on code semantic representation and graph neural network

AST-Based Deep Learning for Detecting Malicious PowerShell

Unified Abstract Syntax Tree Representation Learning for Cross-Language Program Classification

Modular Tree Network for Source Code Representation Learning

Defense Against Syntactic Textual Backdoor Attacks with Token Substitution

Multi-modal Learning for WebAssembly Reverse Engineering

Detecting Semantic Attack in SCADA System: A Behavioral Model Based on Secondary Labeling of States-Duration Evolution Graph

JACLNet:Application of adaptive code length network in JavaScript malicious code detection

Can we generate shellcodes via natural language? An empirical study

A deep learning approach for detecting malicious JavaScript code

Dynamic Emulation Based Modeling and Detection of Polymorphic Shellcode at the Network Level.