Search

Security vulnerabilities are among the major concerns of modern software engineering. Successful results of machine learning techniques in various challenging applications have led to an emerging field of research to investigate the effectiveness of machine learning, and more recently, deep learning techniques, for the problem of software vulnerability analysis and discovery. In this paper, we explore the utilization of Graph Neural Networks as the latest trend and progress in the field of artificial neural networks. To this end, we propose an original neural vulnerability analysis approach, using customized intermediate graph representations of programs to train graph neural network models. Experimental results on a public suite of vulnerable programs show that the proposed approach is effective at the task of software vulnerability analysis. Additional empirical experiments answer complementary research questions about the proposed approach. In particular, we present experimental results for the challenging task of cross-project vulnerability analysis, with interesting insights on the capabilities of our novel approach. Furthermore, a software utility that was developed in the course of this study is also published as a further contribution to the research community. [ABSTRACT FROM AUTHOR]

Software systems tend to become larger and more complicated as the functional requirements increase gradually. Well-modularized software systems are widely believed to be understood, managed and evolved easily. Software module clustering problems (SMCPs) are significant and challenging problems in software engineering whose primary aim is to obtain perfect structures of software systems according to predefined rules. To solve SMCPs, it is important to design a measure which can appropriately evaluate the quality of the structures obtained. So far, the modularization quality (the basic MQ ) is widely used as the conventional measure. However, this measure does not consider global modules and edge directions between two modules. Therefore, in this paper, we design a new modularization quality measure based on the similarity, labeled as MS , to automatically guide optimization algorithms to find a good partition of software systems which considers both global modules and edge directions. To systematically validate the performance of MS , three optimization algorithms, namely hill-climbing algorithm (HC), genetic algorithm (GA), and multi-agent evolutionary algorithm (MAEA), are adopted to optimize MS on 17 real-world software systems with varying sizes. A thorough comparison shows that MS outperforms the basic MQ in guiding the optimization algorithms to find more meaningful module clusters for software systems. [ABSTRACT FROM AUTHOR]

Abstract: It is well known that data structures are essential in obtaining efficient algorithms, having a major importance in the software development process. A proper instantiation of a data structure can greatly impact the performance and the efficiency of the software system. In this paper we are focusing on the problem of customizing data structures instances during the execution of software systems using a supervised learning approach. In order to customize a data structure instance according to the software system’s current execution context, a neural network will be used. We experimentally evaluated our technique on a case study, emphasizing the advantages of the proposed approach. The obtained experimental results highlight the potential of our proposal in using a supervised learning based approach for dynamically configuring data structures instances. [Copyright &y& Elsevier]