Journal Article

An Improved Software Source Code Vulnerability Detection Method: Combination of Multi-Feature Screening and Integrated Sampling Model

Han, Daoqi, He, Xin, Fu, Xueliang, Zhou, Shuncheng, Li, Honghui, Asiya

2025

نظرة عامة

Vulnerability detection in software source code is crucial in ensuring software security. Existing models face challenges with dataset class imbalance and long training times. To address these issues, this paper introduces a multi-feature screening and integrated sampling model (MFISM) to enhance vulnerability detection efficiency and accuracy. The key innovations include (i) utilizing abstract syntax tree (AST) representation of source code to extract potential vulnerability-related features through multiple feature screening techniques; (ii) conducting analysis of variance (ANOVA) and evaluating feature selection techniques to identify representative and discriminative features; (iii) addressing class imbalance by applying an integrated over-sampling strategy to create synthetic samples from vulnerable code to expand the minority class sample size; (iv) employing outlier detection technology to filter out abnormal synthetic samples, ensuring high-quality synthesized samples. The model employs a bidirectional long short-term memory network (Bi-LSTM) to accurately identify vulnerabilities in the source code. Experimental results demonstrate that MFISM improves the F1 score performance by approximately 10% compared to existing DeepBalance methods and reduces the training time to 2–3 h. These results confirm the effectiveness and superiority of MFISM in source code vulnerability detection tasks.

• الناشر: MDPI AG,MDPI
• موضوع: abstract syntax tree (AST) / Accuracy / Bi-LSTM / Computational linguistics / Datasets / Deep learning / Efficiency / Feature selection / Graphs / Innovations / integrated oversampling / Language processing / Machine learning / Malware / Methods / multi-feature screening / Natural language interfaces / Neural networks / Security management / Semantics / Software / source code vulnerability detection / Variance analysis