Authors | A. Grishina |
Title | Enabling Automatic Repair of Source Code Vulnerabilities Using Data-Driven Methods |
Afilliation | Software Engineering |
Project(s) | Data-Driven Software Engineering Department |
Status | Published |
Publication Type | Technical reports |
Year of Publication | 2022 |
Pagination | 3 pages |
Date Published | 02/2022 |
Publisher | arXiv |
Keywords | automatic program repair, graph-based machine learning, ml4code, natural language processing, software security, static analysis |
Abstract | Users around the world rely on software-intensive systems in their day-to-day activities. These systems regularly contain bugs and security vulnerabilities. To facilitate bug fixing, data-driven models of automatic program repair use pairs of buggy and fixed code to learn transformations that fix errors in code. However, automatic repair of security vulnerabilities remains under-explored. In this work, we propose ways to improve code representations for vulnerability repair from three perspectives: input data type, data-driven models, and downstream tasks. The expected results of this work are improved code representations for automatic program repair and, specifically, fixing security vulnerabilities. |
Notes | Accepted for the ICSE '22 Doctoral Symposium |
URL | http://arxiv.org/abs/2202.03055 |
Citation Key | grishina2022:ds-arxiv |