一种融合双曲表示与欧几里得表示的源代码漏洞检测方法OA
A Source Code Vulnerability Detection Method Fusing Hyperbolic Representation and Euclidean Representation
随着软件系统的日益复杂,源代码漏洞检测成为维护软件安全的关键任务.虽然现在已有各种基于深度学习的漏洞检测方法,但这些方法主要依赖单一的欧氏空间视角提取代码表示结构中的语义特征与结构特征,这不利于检测隐藏在代码深处的漏洞.为了解决这一问题,提出一种融合双曲表示与欧几里得表示的源代码漏洞检测方法(source code vulnerability detection method fusing hyperbolic representation and Euclidean representation,VulDEH-GCN),在两种不同的空间对源代码进行嵌入处理,以不同视角挖掘源代码的漏洞特征,实现更准确的漏洞检测.实验结果表明,与现有的漏洞检测方法相比,VulDEHGCN 在准确率、精确率、召回率和 F1 得分等关键性能指标上均实现了显著提升,其中,准确率和 F1 分数分别达到 98.93%和 96.63%.消融实验还证实了融合不同视角的代码嵌入的检测性能更优.
With the increasing complexity of software systems,source code vulnerability detection has be-come a key task to maintain software security.Although various vulnerability detection methods based on deep learning were proposed,they mainly relied on a single Euclidean space perspective to extract the se-mantic features and structural features in the code representation structure,which limited their ability to detect vulnerabilities hidden deep in the code.In order to solve this limitation,VulDEHGCN,a source code vulnerability detection method fusing hyperbolic representation and euclidean representation was pro-posesed.It could embedd the source code from two different spaces,so as to mine the vulnerability char-acteristics of the source code from different perspectives,so as to achieve more accurate vulnerability de-tection.The experimental results showed that compared with the existing vulnerability detection methods,VulDEHGCN achieved significant improvement in key performance indicators such as accuracy,preci-sion,recall and F1 score.The accuracy and F1 score reached 98.93%and 96.63%respectively.Abla-tion studies also confirm the superiority of fusing code embeddings from different perspectives to further enhance vulnerability detection performance.
陈旭;陈子雄;景永俊;王叔洋;宋吉飞
北方民族大学 计算机科学与工程学院 宁夏 银川 750021北方民族大学 计算机科学与工程学院 宁夏 银川 750021北方民族大学 计算机科学与工程学院 宁夏 银川 750021北方民族大学 电气信息工程学院 宁夏 银川 750021国家(中卫)新型互联网交换中心 宁夏 中卫 755000
信息技术与安全科学
漏洞检测切片级别双曲空间欧氏空间融合表示
vulnerability detectionslice-levelhyperbolic spaceEuclidean spacefused representa-tion
《郑州大学学报(理学版)》 2026 (1)
19-26,8
北方民族大学中央高校基本科研业务费专项资金(2023ZRLG13)宁夏回族自治区重点研发项目(2023BDE02017)
评论