Abstract:Hidden code clones negatively impact software maintenance, but manually detecting them in large codebases is impractical. Additionally, automated approaches find detection of syntactically‐divergent clones very challenging. While recent deep neural networks (for example BERT‐based artificial neural networks) seem more effective in detecting such clones, their pairwise comparison of every code pair in the target system(s) is inefficient and scales poorly on large codebases. We present SSCD, a BERT‐based clone detection approach that targets high recall of Type 3 and Type 4 clones at a very large scale (in line with our industrial partner's requirements). It computes a representative embedding for each code fragment and finds similar fragments using a nearest neighbor search. Thus, SSCD avoids the pairwise‐comparison bottleneck of other neural network approaches, while also using a parallel, GPU‐accelerated search to tackle scalability. This article describes the approach, proposing and evaluating several refinements to improve Type 3/4 clone detection at scale. It provides a substantial empirical evaluation of the technique, including a speed/efficacy comparison of the approach against SourcererCC and Oreo, the only other neural‐network approach currently capable of scaling to hundreds of millions of LOC. It also includes a large in‐situ evaluation on our industrial collaborator's code base that assesses the original technique, the impact of the proposed refinements and illustrates the impact of incremental, active learning on its efficacy. We find that SSCD is significantly faster and more accurate than SourcererCC and Oreo. SAGA, a GPU‐accelerated traditional clone detection approach, is a little better than SSCD for T1/T2 clones, but substantially worse for T3/T4 clones. Thus, SSCD is both scalable to industrial code sizes, and comparatively more accurate than existing approaches for difficult T3/T4 clone searching. In‐situ evaluation on company datasets shows that SSCD outperforms the baseline approach (CCFinderX) for T3/T4 clones. Whitespace removal and active learning further improve SSCD effectiveness.

Oreo: Scaling Clone Detection Beyond Near-Miss Clones

Nearest‐neighbor, BERT‐based, scalable clone detection: A practical approach for large‐scale industrial code bases

Using a Nearest-Neighbour, BERT-Based Approach for Scalable Clone Detection

Code Clone Detection: A Literature Review

Clone Detection on Large Scala Codebases

A Machine Learning Based Framework for Code Clone Validation

DCCD: an Efficient and Scalable Distributed Code Clone Detection Technique for Big Code

Are our clone detectors good enough? An empirical study of code effects by obfuscation

DroidCC: A Scalable Clone Detection Approach for Android Applications to Detect Similarity at Source Code Level.

Clone-Seeker: Effective Code Clone Search Using Annotations

Go-clone: Graph-Embedding Based Clone Detector for Golang

A novel code representation for detecting Java code clones using high-level and abstract compiled code representations

SAGA: Efficient and Large-Scale Detection of Near-Miss Clones with GPU Acceleration.

Detecting Differences Across Multiple Instances of Code Clones

Neural Detection of Semantic Code Clones Via Tree-Based Convolution

Challenging Machine Learning-based Clone Detectors via Semantic-preserving Code Transformations

IBFET: Index‐based Features Extraction Technique for Scalable Code Clone Detection at File Level Granularity

Code Clone Detection Method for Large-Scale Source Code

An ensemble learning approach for software semantic clone detection

CC2Vec: Combining Typed Tokens with Contrastive Learning for Effective Code Clone Detection

AYAT: A Lightweight and Efficient Code Clone Detection Technique