English

Enabling Automatic Repair of Source Code Vulnerabilities Using Data-Driven Methods

Software Engineering 2022-02-08 v1 Cryptography and Security Machine Learning

Abstract

Users around the world rely on software-intensive systems in their day-to-day activities. These systems regularly contain bugs and security vulnerabilities. To facilitate bug fixing, data-driven models of automatic program repair use pairs of buggy and fixed code to learn transformations that fix errors in code. However, automatic repair of security vulnerabilities remains under-explored. In this work, we propose ways to improve code representations for vulnerability repair from three perspectives: input data type, data-driven models, and downstream tasks. The expected results of this work are improved code representations for automatic program repair and, specifically, fixing security vulnerabilities.

Keywords

Cite

@article{arxiv.2202.03055,
  title  = {Enabling Automatic Repair of Source Code Vulnerabilities Using Data-Driven Methods},
  author = {Anastasiia Grishina},
  journal= {arXiv preprint arXiv:2202.03055},
  year   = {2022}
}

Comments

Accepted for the ICSE '22 Doctoral Symposium