ReGVD: Revisiting Graph Neural Networks for Vulnerability Detection
Identifying vulnerabilities in the source code is essential to protect the software systems from cyber security attacks. It, however, is also a challenging step that requires specialized expertise in security and code representation. To this end, we aim to develop a general, practical, and programming language-independent model capable of running on various source codes and libraries without difficulty. Therefore, we consider vulnerability detection as an inductive text classification problem and propose ReGVD, a simple yet effective graph neural network-based model for the problem. In particular, ReGVD views a given source code as a flat sequence of tokens and utilizes two construction methods to build a graph, wherein node features are initialized only by the embedding layer of a pre-trained programming language (PL) model. ReGVD then leverages residual connection among GNN layers and examines a mixture of graph-level sum and max poolings to return a graph embedding for the given source code. Experimental results demonstrate that ReGVD outperforms the existing state-of-the-art models and obtains the highest accuracy on the real-world benchmark dataset from CodeXGLUE for vulnerability detection.
Tue 10 MayDisplayed time zone: Eastern Time (US & Canada) change
04:00 - 05:00 | |||
04:00 15mDemonstration | GIFdroid: An Automated Light-weight Tool for Replaying Visual Bug Reports DEMO - Demonstrations DOI Pre-print Media Attached | ||
04:15 15mDemonstration | TauLiM: Test Data Augmentation of LiDAR Point Cloud by Metamorphic Relation DEMO - Demonstrations Ju Lin Nanjing University, Jiawei Liu Nanjing University, Quanjun Zhang Nanjing University, Xufan Zhang Nanjing University, Chunrong Fang Nanjing University | ||
04:30 15mDemonstration | ReGVD: Revisiting Graph Neural Networks for Vulnerability Detection DEMO - Demonstrations Van-Anh Nguyen VNU - University of Science, Vietnam, Dai Quoc Nguyen Oracle Labs, Australia, Van Nguyen Monash University, Australia, Trung Le Monash University, Australia, Quan Hung Tran Adobe Research, San Jose, CA, USA, Dinh Phung Monash University, Australia Pre-print Media Attached | ||
04:45 15mDemonstration | META: Multidimensional Evaluation of Testing Ability DEMO - Demonstrations Tianqi Zhou Nanjing University, Jiawei Liu Nanjing University, Yifan Wang Shenzhen Research Institute of Nanjing University, Zhenyu Chen Nanjing University |