Enabling Automatic Repair of Source Code Vulnerabilities Using Data-Driven Methods
arXiv:2202.03055 · doi:10.1145/3510454.3517063
Abstract
Users around the world rely on software-intensive systems in their day-to-day activities. These systems regularly contain bugs and security vulnerabilities. To facilitate bug fixing, data-driven models of automatic program repair use pairs of buggy and fixed code to learn transformations that fix errors in code. However, automatic repair of security vulnerabilities remains under-explored. In this work, we propose ways to improve code representations for vulnerability repair from three perspectives: input data type, data-driven models, and downstream tasks. The expected results of this work are improved code representations for automatic program repair and, specifically, fixing security vulnerabilities.
Accepted for the ICSE '22 Doctoral Symposium
References in corpus (5)
- Sequence to Sequence Learning with Neural Networks
- Evaluating Large Language Models Trained on Code
- CodeXGLUE: A Machine Learning Benchmark Dataset for Code Understanding and Generation
- CodeBLEU: a Method for Automatic Evaluation of Code Synthesis
- Repairing Deep Neural Networks: Fix Patterns and Challenges