基于词向量模型的漏洞检测方法  

Vulnerability Detection Method Based on Word Vector Model

作　　者：肖巍[1] 胡景浩 侯正章 王涛[1] 潘超[1] XIAO Wei;HU Jinghao;HOU Zhengzhang;WANG Tao;PAN Chao(School of Computer Science and Engineering,Changchun University of Technology,Changchun 130012,China;College of Software,Jilin University,Changchun 130012,China)

机构地区：[1]长春工业大学计算机科学与工程学院,长春130012 [2]吉林大学软件学院,长春130012

出　　处：《吉林大学学报（理学版）》2023年第6期1358-1366,共9页Journal of Jilin University:Science Edition

基　　金：吉林省教育厅科学技术研究项目(批准号:JJKH20220691KJ)。

摘　　要：针对漏洞检测领域面临的实验平台不统一、数据集异构等问题,研究词向量模型在C/C++函数漏洞检测方面的应用.用5种词向量模型对源代码生成的抽象语法树结构进行知识表示,用6种神经网络模型进行漏洞检测,实验结果表明,函数级代码具有浅层的语义关系,代码块内部联系紧密.Aiming at the problems of non-uniform experimental platforms and heterogeneous datasets faced in the field of vulnerability detection,we studied the application of word vector models in C/C++function vulnerability detection.Five word vector models were used for the knowledge representation of the abstract syntax tree structure generated by the source code,and six neural network models were used for vulnerability detection.The experimental results show that function-level code has shallow semantic relationships and tight connections within code blocks.

关 键 词：词向量模型 漏洞检测 抽象语法树 代码表征 神经网络 

分 类 号：TP311[自动化与计算机技术—计算机软件与理论]