Abstract:Improving and enhancing the effectiveness of software vulnerability detection methods is urgently needed today. In this study, we propose a new source code vulnerability detection method based on intelligent and advanced computational algorithms. It's a combination of four main processing techniques including (i) Source Embedding, (ii) Feature Learning, (iii) Resampling Data, and (iv) Classification. The Source Embedding method will perform the task of analyzing and standardizing the source code based on the Joern tool and the data mining algorithm. The Feature Learning model has the function of aggregating and extracting source code attribute based on node using machine learning and deep learning methods. The Resampling Data technique will perform equalization of the experimental dataset. Finally, the Classification model has the function of detecting source code vulnerabilities. The novelty and uniqueness of the new intelligent cognitive computing method is the combination and synchronous use of many different data extracting techniques to compute, represent, and extract the properties of the source code. With this new calculation method, many significant unusual properties and features of the vulnerability have been synthesized and extracted. To prove the superiority of the proposed method, we experiment to detect source code vulnerabilities based on the Verum dataset, details of this part are presented in the experimental section. The experimental results show that the method proposed in the paper has brought good results on all measures. These results have shown to be the best research results for the source code vulnerability detection task using the Verum dataset according to our survey to date. With such results, the proposal in this study is not only meaningful in terms of science but also in practical terms when the method of using intelligent cognitive computing techniques to analyze and evaluate source code has helped to improve the efficiency of the source code analysis and vulnerability detection process.

An Open Source Software Defect Detection Technique Based on Homology Detection and Pre-identification Vulnerabilitys

Patchmatch: A Tool for Locating Patches of Open Source Project Vulnerabilities

A Method for Mining XML Data Describing Open-Source and Proprietary Software Vulnerabilities.

SQVDT: A Scalable Quantitative Vulnerability Detection Technique for Source Code Security Assessment.

A novel approach for software vulnerability detection based on intelligent cognitive computing

Software vulnerability prediction using text analysis techniques

HGVul: A Code Vulnerability Detection Method Based on Heterogeneous Source-Level Intermediate Representation

Automated software vulnerability detection with machine learning

Method for Automated Detection of Suspicious Vulnerability Related to Numerical Stability

Software Vulnerability Code Clone Detection Method Based on Characteristic Metrics

DeepVulSeeker: A novel vulnerability identification framework via code graph structure and pre-training mechanism

A Mining Approach to Obtain the Software Vulnerability Characteristics

Survey of Source Code Vulnerability Analysis Based on Deep Learning

A Survey of Automatic Software Vulnerability Detection, Program Repair, and Defect Prediction Techniques

On the Code Vulnerability Detection Based on Deep Learning: A Comparative Study

Software vulnerable functions discovery based on code composite feature

Software Vulnerability Mining and Analysis Based on Deep Learning

Towards Practical Binary Code Similarity Detection: Vulnerability Verification via Patch Semantic Analysis

Open Source Software Vulnerability Propagation Analysis Algorithm Based on Knowledge Graph.

Vulnerability discovery based on source code patch commit mining: a systematic literature review