Abstract:In the software engineering (SE) community, deep learning (DL) has recently been applied to many source code processing tasks, achieving state-of-the-art results. Due to the poor interpretability of DL models, their security vulnerabilities require scrutiny. Recently, researchers have identified an emergent security threat to DL models, namely poison attacks . The attackers aim to inject insidious backdoors into DL models by poisoning the training data with poison samples. The backdoors mean that poisoned models work normally with clean inputs but produce targeted erroneous results with inputs embedded with specific triggers. By using triggers to activate backdoors, attackers can manipulate poisoned models in security-related scenarios ( e.g., defect detection) and lead to severe consequences. To verify the vulnerability of deep source code processing models to poison attacks, we present a poison attack approach for source code named CodePoisoner as a strong imaginary enemy. CodePoisoner can produce compilable and functionality-preserving poison samples and effectively attack deep source code processing models by poisoning the training data with poison samples. To defend against poison attacks, we further propose an effective poison detection approach named CodeDetector . CodeDetector can automatically identify poison samples in the training data. We apply CodePoisoner and CodeDetector to six deep source code processing models, including defect detection, clone detection, and code repair models. The results show that 1 CodePoisoner conducts successful poison attacks with a high attack success rate (avg: 98.3%, max: 100%). It validates that existing deep source code processing models have a strong vulnerability to poison attacks. 2 CodeDetector effectively defends against multiple poison attack approaches by detecting (max: 100%) poison samples in the training data. We hope this work can help SE researchers and practitioners notice poison attacks and inspire the design of more advanced defense techniques.

AI Data poisoning attack: Manipulating game AI of Go

Data Poisoning Attacks in Internet-of-Vehicle Networks: Taxonomy, State-of-The-Art, and Future Directions.

Indiscriminate Data Poisoning Attacks on Neural Networks

Poisoning Programs by Un-Repairing Code: Security Concerns of AI-generated Code

Poison Attack and Defense on Deep Source Code Processing Models

Vulnerabilities in AI Code Generators: Exploring Targeted Data Poisoning Attacks

Online data poisoning attack against edge AI paradigm for IoT-enabled smart city

Invisible Poisoning: Highly Stealthy Targeted Poisoning Attack

Assessing Vulnerabilities of Adversarial Learning Algorithm through Poisoning Attacks

Targeted Backdoor Attacks on Deep Learning Systems Using Data Poisoning

Poisoning Web-Scale Training Datasets is Practical

MetaPoison: Practical General-purpose Clean-label Data Poisoning

Poisoning Attack on Deep Generative Models in Autonomous Driving

Trojan Attack On Deep Generative Models In Autonomous Driving

Poison Attack and Poison Detection on Deep Source Code Processing Models

Poisoning attacks and countermeasures in intelligent networks: Status quo and prospects

From Adversarial Examples to Data Poisoning Instances: Utilizing an Adversarial Attack Method to Poison a Transfer Learning Model

Data Poisoning and Backdoor Attacks on Audio Intelligence Systems

Model Poisoning Attack Against Neural Network Interpreters in IoT Devices

Poisoned ChatGPT Finds Work for Idle Hands: Exploring Developers' Coding Practices with Insecure Suggestions from Poisoned AI Models

Adversarial Policies Beat Superhuman Go AIs