Learning to Pinpoint Emerging Software Vulnerabilities

学习查明新兴软件漏洞

• 批准号: DP210101348
• 负责人: A/Prof Yulei Sui
• 金额: $ 21.11万
• 依托单位: The University of New South Wales
• 依托单位国家: 澳大利亚
• 项目类别: Discovery Projects
• 财政年份: 2021
• 资助国家: 澳大利亚
• 起止时间: 2021-01-01 至 2024-12-31
• 项目状态: 已结题
• 来源: https://dataportal.arc.gov.au/RGS/Web/Grants/DP210101348
• 关键词: Learning; Pinpoint; Emerging; Software; Vulnerabilities

This project aims to develop learning-based software vulnerability detection techniques to improve the reliability and security of modern software systems. The existing techniques relying on conventional yet rigid software analysis and testing techniques are ineffective and/or inefficient when detecting a wide variety of emerging software vulnerabilities. The outcomes of this project will be a deep-learning-based detection approach and an open-source tool that can capture precision correlations between deep code features and diverse vulnerabilities to pinpoint emerging vulnerabilities without the need for bug specifications. Significant benefits include greatly improved quality, reliability and security for modern software systems.

该项目旨在开发基于学习的软件漏洞检测技术，以提高现代软件系统的可靠性和安全性。在检测各种新兴软件漏洞时，依赖于常规但僵化的软件分析和测试技术的现有技术无效和/或效率低下。 该项目的结果将是一种基于学习的检测方法和一种开源工具，可以捕获深层代码特征和各种漏洞之间的精确相关性，以查明新兴漏洞而无需错误规格。 重大好处包括对现代软件系统的质量，可靠性和安全性有很大提高。