Learning to Pinpoint Emerging Software Vulnerabilities

本项目旨在开发基于学习的软件漏洞检测技术，以提高现代软件系统的可靠性和安全性。现有的技术依赖于传统的但严格的软件分析和测试技术，在检测各种各样的新出现的软件漏洞时是无效的和/或低效的。该项目的成果将是一种基于深度学习的检测方法和一个开源工具，可以捕获深度代码特征和各种漏洞之间的精确相关性，从而在不需要bug规范的情况下查明新出现的漏洞。显著的好处包括大大提高了现代软件系统的质量、可靠性和安全性。

This project aims to develop learning-based software vulnerability detection techniques to improve the reliability and security of modern software systems. The existing techniques relying on conventional yet rigid software analysis and testing techniques are ineffective and/or inefficient when detecting a wide variety of emerging software vulnerabilities. The outcomes of this project will be a deep-learning-based detection approach and an open-source tool that can capture precision correlations between deep code features and diverse vulnerabilities to pinpoint emerging vulnerabilities without the need for bug specifications. Significant benefits include greatly improved quality, reliability and security for modern software systems.