Software Vulnerability Prediction Knowledge Transferring Between Programming Languages

Khadija Hanifi, Ramin F Fouladi, Basak Gencer Unsalver, Goksu Karadag
3/10/2023
cs.SEcs.AIcs.LG

No confident code implementation found for this paper. 2 possible matches can be shown below.

Abstract

Developing automated and smart software vulnerability detection models has been receiving great attention from both research and development communities. One of the biggest challenges in this area is the lack of code samples for all different programming languages. In this study, we address this issue by proposing a transfer learning technique to leverage available datasets and generate a model to detect common vulnerabilities in different programming languages. We use C source code samples to train a Convolutional Neural Network (CNN) model, then, we use Java source code samples to adopt and evaluate the learned model. We use code samples from two benchmark datasets: NIST Software Assurance Reference Dataset (SARD) and Draper VDISC dataset. The results show that proposed model detects vulnerabilities in both C and Java codes with average recall of 72\%. Additionally, we employ explainable AI to investigate how much each feature contributes to the knowledge transfer mechanisms between C and Java in the proposed model.

View on arXivView PDF

Code Implementations

No confident code match yet

We couldn't find an author-owned or strongly-evidenced community implementation for this paper. 2 weaker matches are hidden by default — verify before relying on them.

No code implementations found yet.

Know of an implementation? Let us know in the comments below!

Similar Papers

MulVuln: Enhancing Pre-trained LMs with Shared and Language-Specific Knowledge for Multilingual Vulnerability Detection

86% match2025

Vulnerability Detection in C/C++ Code with Deep Learning

86% match2024

Harnessing the Power of LLMs in Source Code Vulnerability Detection

85% match2024

Machine Learning Techniques for Python Source Code Vulnerability Detection

84% match1 repo102024

Automated Vulnerability Detection in Source Code Using Deep Representation Learning

84% match1 repo2026

Explaining the Contributing Factors for Vulnerability Detection in Machine Learning

84% match2024

Cite this paper

@article{hanifi2023software,
  title  = {Software Vulnerability Prediction Knowledge Transferring Between Programming Languages},
  author = {Khadija Hanifi and Ramin F Fouladi and Basak Gencer Unsalver and Goksu Karadag},
  year   = {2023},
  eprint = {2303.06177},
  archivePrefix = {arXiv},
  url    = {http://arxiv.org/abs/2303.06177v1}
}

Add a badge to your README

Shows whether official code is linked for this paper.

Code of Paper badge
[![Code of Paper](https://codeofpaper.com/badge/2303.06177.svg)](https://codeofpaper.com/paper/2303.06177)

Discussion