paper-with-me

Papers

Stack-based Buffer Overflow Detection using Recurrent Neural Networks

2020-12-30 · William Arild Dahl, Laszlo Erdodi, Fabio Massimo Zennaro

Detecting vulnerabilities in software is a critical challenge in the development and deployment of applications. One of the most known and dangerous vulnerabilities is stack-based buffer overflows, which may allow potential attackers to execute malicious code. In this paper we consider the use of modern machine learning models, specifically recurrent neural networks, to detect stack-based buffer overflow vulnerabilities in the assembly code of a program. Since assembly code is a generic and common representation, focusing on this language allows us to potentially consider programs written in several different programming languages. Moreover, we subscribe to the hypothesis that code may be treated as natural language, and thus we process assembly code using standard architectures commonly employed in natural language processing. We perform a set of experiments aimed at confirming the validity of the natural language hypothesis and the feasibility of using recurrent neural networks for detecting vulnerabilities. Our results show that our architecture is able to capture subtle stack-based buffer overflow vulnerabilities that strongly depend on the context, thus suggesting that this approach may be extended to real-world setting, as well as to other forms of vulnerability detection.

📄 PDF Abstract BibTeX arXiv:2012.15116

Code (1)

williamadahl/RNN-for-Vulnerability-Detection 공식 구현

Tasks

Vulnerability Detection

Similar Papers 제목 키워드 기반

MQDD: Pre-training of Multimodal Question Duplicity Detection for Software Engineering Domain

2022-03-26 · Jan Pašek, Jakub Sido, Miloslav Konopík, Ondřej Pražák

This work proposes a new pipeline for leveraging data collected on the Stack Overflow website for pre-training a multimodal model for searching duplicates on question answering websites. Our multimodal model is trained o…

Question Answering

Code Vulnerability Repair with Large Language Model using Context-Aware Prompt Tuning

2024-09-27 · Arshiya Khan, Guannan Liu, Xing Gao

Large Language Models (LLMs) have shown significant challenges in detecting and repairing vulnerable code, particularly when dealing with vulnerabilities involving multiple aspects, such as variables, code flows, and cod…

Language ModelingLanguage ModellingLarge Language ModelVulnerability Detection

Is Stack Overflow Overflowing With Questions and Tags

2015-08-14 · Ranjitha R. K., Sanjay Singh

Programming question and answer (Q & A) websites, such as Quora, Stack Overflow, and Yahoo! Answer etc. helps us to understand the programming concepts easily and quickly in a way that has been tested and applied by many…

A New Era in Software Security: Towards Self-Healing Software via Large Language Models and Formal Verification

2023-05-24 · Norbert Tihanyi, Ridhi Jain, Yiannis Charalambous, Mohamed Amine Ferrag 외

This paper introduces an innovative approach that combines Large Language Models (LLMs) with Formal Verification strategies for automatic software vulnerability repair. Initially, we employ Bounded Model Checking (BMC) t…

C++ codeMathematical Proofs

Attention-based model for predicting question relatedness on Stack Overflow

2021-03-19 · Jiayan Pei, Yimin wu, Zishan Qin, Yao Cong 외

Stack Overflow is one of the most popular Programming Community-based Question Answering (PCQA) websites that has attracted more and more users in recent years. When users raise or inquire questions in Stack Overflow, pr…

Question AnsweringSentenceWord Embeddings