基于异构图表征的源代码漏洞检测方法

张学军,梁书滨,白万荣,张奉鹤,黄海燕,郭梅凤,陈卓

Source code vulnerability detection method based on heterogeneous graph representation

Xuejun ZHANG,Shubin LIANG,Wanrong BAI,Fenghe ZHANG,Haiyan HUANG,Meifeng GUO,Zhuo CHEN

表 3 对CWE-399和CWE-119的检测性能对比

Tab.3 Comparison of detection for CWE-399 and CWE-119

模型 CWE-399 CWE-119 Acc/% P/% F1/% DT/s Acc/% P/% F1/% DT/s VulDeePecker 71.29 75.18 71.31 0.885 73.06 76.24 73.31 0.891 SySeVR 75.94 80.56 78.24 1.092 79.80 84.62 79.20 1.105 mVulSniffer 92.73 86.35 85.90 1.380 95.32 93.09 88.36 1.378 FUNDED 93.28 93.70 93.41 2.156 93.80 94.40 94.38 2.108 VDoTR 94.12 94.27 94.25 2.361 94.75 96.81 95.65 2.258 VulHetG 94.05 94.16 94.62 2.173 96.01 96.13 95.87 2.112