View in EDS HTML Full Text PDF Full Text

VulRep: vulnerability repair based on inducing commits and fixing commits.

Saved in:
Bibliographic Details
Title: VulRep: vulnerability repair based on inducing commits and fixing commits.
Authors: Wei, Ying1 (AUTHOR), Bo, Lili1,2 (AUTHOR) lilibo@yzu.edu.cn, Wu, Xiaoxue1 (AUTHOR), Li, Yue1 (AUTHOR), Ye, Zhenlei1 (AUTHOR), Sun, Xiaobing1,3 (AUTHOR), Li, Bin1 (AUTHOR)
Source: EURASIP Journal on Wireless Communications & Networking. 4/21/2023, Vol. 2023 Issue 1, p1-16. 16p.
Subjects: Repairing, Machine learning, Telecommunication systems, Information society, Wooden beams
Abstract: With the rapid development of the information age, software vulnerabilities have threatened the safety of communication and mobile network, and research on vulnerability repair is urgent. Different from the existing machine learning-based approaches, we propose VulRep, a vulnerability repair approach based on vulnerability introduction, which combines empirical research findings on vulnerability inducing and vulnerability fixing commit with machine learning approaches for vulnerability repair. Firstly, we construct the vulnerability introduction and repair dataset, and generate the AST tree for the code of inducing commit and fixing commit to form a sequence after abstraction processing, and input it into the Transformer model to generate a recommendation list through beam search. After filling in the abstracted code, it is combined with the rules defined by empirical research findings, and the final patch is obtained after verification. Experimental results show that VulRep can improve the performance of repairing vulnerabilities, which illustrates the effectiveness of combined empirical research findings. In addition, we found that our approach is more suitable for repairing type CWE-119 (Improper Restriction of Operations within the Bounds of a Memory Buffer) vulnerabilities and can perform vulnerability repair better. [ABSTRACT FROM AUTHOR]
Copyright of EURASIP Journal on Wireless Communications & Networking is the property of Springer Nature and its content may not be copied or emailed to multiple sites without the copyright holder's express written permission. Additionally, content may not be used with any artificial intelligence tools or machine learning technologies. However, users may print, download, or email articles for individual use. This abstract may be abridged. No warranty is given about the accuracy of the copy. Users should refer to the original published version of the material for the full abstract. (Copyright applies to all Abstracts.)
Database: Engineering Source
Full text is not displayed to guests.
FullText Links:
  – Type: pdflink
Text:
  Availability: 1
Header DbId: egs
DbLabel: Engineering Source
An: 163252273
AccessLevel: 6
PubType: Academic Journal
PubTypeId: academicJournal
PreciseRelevancyScore: 0
IllustrationInfo
Items – Name: Title
  Label: Title
  Group: Ti
  Data: VulRep: vulnerability repair based on inducing commits and fixing commits.
– Name: Author
  Label: Authors
  Group: Au
  Data: <searchLink fieldCode="AR" term="%22Wei%2C+Ying%22">Wei, Ying</searchLink><relatesTo>1</relatesTo> (AUTHOR)<br /><searchLink fieldCode="AR" term="%22Bo%2C+Lili%22">Bo, Lili</searchLink><relatesTo>1,2</relatesTo> (AUTHOR)<i> lilibo@yzu.edu.cn</i><br /><searchLink fieldCode="AR" term="%22Wu%2C+Xiaoxue%22">Wu, Xiaoxue</searchLink><relatesTo>1</relatesTo> (AUTHOR)<br /><searchLink fieldCode="AR" term="%22Li%2C+Yue%22">Li, Yue</searchLink><relatesTo>1</relatesTo> (AUTHOR)<br /><searchLink fieldCode="AR" term="%22Ye%2C+Zhenlei%22">Ye, Zhenlei</searchLink><relatesTo>1</relatesTo> (AUTHOR)<br /><searchLink fieldCode="AR" term="%22Sun%2C+Xiaobing%22">Sun, Xiaobing</searchLink><relatesTo>1,3</relatesTo> (AUTHOR)<br /><searchLink fieldCode="AR" term="%22Li%2C+Bin%22">Li, Bin</searchLink><relatesTo>1</relatesTo> (AUTHOR)
– Name: TitleSource
  Label: Source
  Group: Src
  Data: <searchLink fieldCode="JN" term="%22EURASIP+Journal+on+Wireless+Communications+%26+Networking%22">EURASIP Journal on Wireless Communications & Networking</searchLink>. 4/21/2023, Vol. 2023 Issue 1, p1-16. 16p.
– Name: Subject
  Label: Subjects
  Group: Su
  Data: <searchLink fieldCode="DE" term="%22Repairing%22">Repairing</searchLink><br /><searchLink fieldCode="DE" term="%22Machine+learning%22">Machine learning</searchLink><br /><searchLink fieldCode="DE" term="%22Telecommunication+systems%22">Telecommunication systems</searchLink><br /><searchLink fieldCode="DE" term="%22Information+society%22">Information society</searchLink><br /><searchLink fieldCode="DE" term="%22Wooden+beams%22">Wooden beams</searchLink>
– Name: Abstract
  Label: Abstract
  Group: Ab
  Data: With the rapid development of the information age, software vulnerabilities have threatened the safety of communication and mobile network, and research on vulnerability repair is urgent. Different from the existing machine learning-based approaches, we propose VulRep, a vulnerability repair approach based on vulnerability introduction, which combines empirical research findings on vulnerability inducing and vulnerability fixing commit with machine learning approaches for vulnerability repair. Firstly, we construct the vulnerability introduction and repair dataset, and generate the AST tree for the code of inducing commit and fixing commit to form a sequence after abstraction processing, and input it into the Transformer model to generate a recommendation list through beam search. After filling in the abstracted code, it is combined with the rules defined by empirical research findings, and the final patch is obtained after verification. Experimental results show that VulRep can improve the performance of repairing vulnerabilities, which illustrates the effectiveness of combined empirical research findings. In addition, we found that our approach is more suitable for repairing type CWE-119 (Improper Restriction of Operations within the Bounds of a Memory Buffer) vulnerabilities and can perform vulnerability repair better. [ABSTRACT FROM AUTHOR]
– Name: AbstractSuppliedCopyright
  Label:
  Group: Ab
  Data: <i>Copyright of EURASIP Journal on Wireless Communications & Networking is the property of Springer Nature and its content may not be copied or emailed to multiple sites without the copyright holder's express written permission. Additionally, content may not be used with any artificial intelligence tools or machine learning technologies. However, users may print, download, or email articles for individual use. This abstract may be abridged. No warranty is given about the accuracy of the copy. Users should refer to the original published version of the material for the full abstract.</i> (Copyright applies to all Abstracts.)
PLink https://search.ebscohost.com/login.aspx?direct=true&site=eds-live&db=egs&AN=163252273
RecordInfo BibRecord:
  BibEntity:
    Identifiers:
      – Type: doi
        Value: 10.1186/s13638-023-02242-7
    Languages:
      – Code: eng
        Text: English
    PhysicalDescription:
      Pagination:
        PageCount: 16
        StartPage: 1
    Subjects:
      – SubjectFull: Repairing
        Type: general
      – SubjectFull: Machine learning
        Type: general
      – SubjectFull: Telecommunication systems
        Type: general
      – SubjectFull: Information society
        Type: general
      – SubjectFull: Wooden beams
        Type: general
    Titles:
      – TitleFull: VulRep: vulnerability repair based on inducing commits and fixing commits.
        Type: main
  BibRelationships:
    HasContributorRelationships:
      – PersonEntity:
          Name:
            NameFull: Wei, Ying
      – PersonEntity:
          Name:
            NameFull: Bo, Lili
      – PersonEntity:
          Name:
            NameFull: Wu, Xiaoxue
      – PersonEntity:
          Name:
            NameFull: Li, Yue
      – PersonEntity:
          Name:
            NameFull: Ye, Zhenlei
      – PersonEntity:
          Name:
            NameFull: Sun, Xiaobing
      – PersonEntity:
          Name:
            NameFull: Li, Bin
    IsPartOfRelationships:
      – BibEntity:
          Dates:
            – D: 21
              M: 04
              Text: 4/21/2023
              Type: published
              Y: 2023
          Identifiers:
            – Type: issn-print
              Value: 16871472
          Numbering:
            – Type: volume
              Value: 2023
            – Type: issue
              Value: 1
          Titles:
            – TitleFull: EURASIP Journal on Wireless Communications & Networking
              Type: main
ResultId 1