Contextual Transformer-based Node Embedding for Vulnerability Detection using Graph Learning

No Thumbnail Available
File version
Author(s)
Gear, J
Xu, Y
Foo, E
Gauravaram, P
Jadidi, Z
Simpson, L
Griffith University Author(s)
Primary Supervisor
Other Supervisors
Editor(s)
Date
2024
Size
File type(s)
Location

Sanya, China

License
Abstract

Automated source code vulnerability detection using code graphs has seen major improvements in recent years, however one critical, but oft-overlooked, element of this problem is producing embeddings for graph nodes. Before graph-based classifiers can be used for vulnerability detection, the nodes in the graph must first be given vector representations. Graphlearning models propagate information from these embeddings through the graph before classification, and so the initial states of these embeddings are vital for all subsequent learning. While a variety of solutions to this problem have been proposed in existing literature, this is typically not the focus of these works. We propose a novel node embedding strategy for graph-based vulnerability discovery, which takes advantage of richly-learned information about the code contained in each node. We also implement and test several existing node embedding strategies, comparing them to each other and our new strategy under a standard graph-learning architecture. We find that our strategy outperforms existing methods by 10.47-50.70%.

Journal Title
Conference Title

2024 IEEE 23rd International Conference on Trust, Security and Privacy in Computing and Communications (TrustCom)

Book Title
Edition
Volume
Issue
Thesis Type
Degree Program
School
Publisher link
Patent number
Funder(s)
Grant identifier(s)
Rights Statement
Rights Statement
Item Access Status
Note
Access the data
Related item(s)
Subject

Data management and data science

Data security and protection

Persistent link to this record
Citation

Gear, J; Xu, Y; Foo, E; Gauravaram, P; Jadidi, Z; Simpson, L, Contextual Transformer-based Node Embedding for Vulnerability Detection using Graph Learning, 2024 IEEE 23rd International Conference on Trust, Security and Privacy in Computing and Communications (TrustCom), 2024, pp. 2031-2038