BHMVD: Binary Code-based Hybrid Neural Network for Multiclass Vulnerability Detection
Author
Abstract

Network Coding - Precise binary code vulnerability detection is a significant research topic in software security. Currently, the majority of software is released in binary form, and the corresponding vulnerability detection approaches for binary code are desired. Existing deep learning-based detection techniques can only detect binary code vulnerabilities but cannot precisely identify the types of vulnerabilities. This paper proposes a Binary code-based Hybrid neural network for Multiclass Vulnerability Detection, dubbed BHMVD. BHMVD generates binary slices according to the control dependence and data dependence of library/API function calls, and then extracts syntax features from binary slices to generate type slices, which can help identify vulnerability types. This paper uses a hybrid neural network of CNN-BLSTM to extract vulnerability features from binary and type slices. The former extracts local features, while the latter extracts global features. Experiment results on 19 types of vulnerabilities show that BHMVD is effective for binary code-based multiclass vulnerability detection, and using a hybrid neural network can improve detection ability.

Year of Publication
2022
Date Published
dec
Publisher
IEEE
Conference Location
Melbourne, Australia
ISBN Number
978-1-66546-497-0
URL
https://ieeexplore.ieee.org/document/10070729/
DOI
10.1109/ISPA-BDCloud-SocialCom-SustainCom57177.2022.00037
Google Scholar | BibTeX | DOI