Abstract:Improving and enhancing the effectiveness of software vulnerability detection methods is urgently needed today. In this study, we propose a new source code vulnerability detection method based on intelligent and advanced computational algorithms. It's a combination of four main processing techniques including (i) Source Embedding, (ii) Feature Learning, (iii) Resampling Data, and (iv) Classification. The Source Embedding method will perform the task of analyzing and standardizing the source code based on the Joern tool and the data mining algorithm. The Feature Learning model has the function of aggregating and extracting source code attribute based on node using machine learning and deep learning methods. The Resampling Data technique will perform equalization of the experimental dataset. Finally, the Classification model has the function of detecting source code vulnerabilities. The novelty and uniqueness of the new intelligent cognitive computing method is the combination and synchronous use of many different data extracting techniques to compute, represent, and extract the properties of the source code. With this new calculation method, many significant unusual properties and features of the vulnerability have been synthesized and extracted. To prove the superiority of the proposed method, we experiment to detect source code vulnerabilities based on the Verum dataset, details of this part are presented in the experimental section. The experimental results show that the method proposed in the paper has brought good results on all measures. These results have shown to be the best research results for the source code vulnerability detection task using the Verum dataset according to our survey to date. With such results, the proposal in this study is not only meaningful in terms of science but also in practical terms when the method of using intelligent cognitive computing techniques to analyze and evaluate source code has helped to improve the efficiency of the source code analysis and vulnerability detection process.

Software vulnerability prediction using text analysis techniques

Combining Software Metrics and Text Features for Vulnerable File Prediction

Categorizing and Predicting Invalid Vulnerabilities on Common Vulnerabilities and Exposures

Automated Configuration Bug Report Prediction Using Text Mining.

Predicting Vulnerable Components via Text Mining or Software Metrics? An Effort-Aware Perspective

Predicting Exploitation of Disclosed Software Vulnerabilities Using Open-source Data

Automated software vulnerability detection with machine learning

An empirical study of text-based machine learning models for vulnerability detection

A multi-target approach to estimate software vulnerability characteristics and severity scores

Common Vulnerability Scoring System Prediction based on Open Source Intelligence Information Sources

Early and Realistic Exploitability Prediction of Just-Disclosed Software Vulnerabilities: How Reliable Can It Be?

Vulnerability Detection for Source Code Using Contextual LSTM

A Method for Mining XML Data Describing Open-Source and Proprietary Software Vulnerabilities.

Predicting Vulnerability In Large Codebases With Deep Code Representation

Software vulnerable functions discovery based on code composite feature

Survey of Source Code Vulnerability Analysis Based on Deep Learning

A Multiclass Approach to Estimating Software Vulnerability Severity Rating with Statistical and Word Embedding Methods

An Open Source Software Defect Detection Technique Based on Homology Detection and Pre-identification Vulnerabilitys

On the Use of Fine-grained Vulnerable Code Statements for Software Vulnerability Assessment Models

A novel approach for software vulnerability detection based on intelligent cognitive computing

Vulnerability Severity Prediction Model for Software Based on Markov Chain.