Cyber Code Intelligence

This repository provides papers, code and tools that a beginner needs to start exploring the field of Cyber Code Intelligence (CyberCI).

Content

• Introduction
• Technical Papers
• Surveys
• Tools
• Data
• Contact

Introduction

The CyberCI is data-driven code analysis using pattern recognition and machine learning (ML), which provides alternative solutions for automated, potentially more intelligent and efficient code analysis and processing. Particularly, The booming of the open source software community has made vast amounts of software code available, which allows machine learning and data mining techniques to exploit abundant patterns within software code. This repository lists the technical papers, developed tools and surveys of the CyberCI Research from the NSCLab, Swinburne University of Technology, Australia, for newbies who are interested in applying the state-of-the-art ML techniques for code analysis and processing.

Fig. 1: The Cyber Code Intelligence (CyberCI)

Technical Papers

• POSTER:Vulnerability discovery with function representation learning from unlabeled projects (CCS-2017)
  [Paper] [Python Code]
• Cross-project transfer representation learning for vulnerable function discovery (TII-2018)
  [Paper] [Python Code]
• Deep Learning-Based Vulnerable Function Detection-A Benchmark (ICICS-2019)
  [Paper] [Python Code]
• Cyber Vulnerability Intelligence for Internet of Things Binary (TII-2019)
  [Paper] [Python Code] [Video]
• Software Vulnerability Discovery via Learning Multi-domain Knowledge Bases (TDSC-2020)
  [Paper] [Python Code]
• DeepBalance- Deep-Learning and Fuzzy Oversampling for Vulnerability Detection (TFS-2020)
  [Paper] [Code]
• CD-VulD-Cross-Domain Vulnerability Discovery based on Deep Domain Adaptation (TDSC-2020)
  [Paper] [Matlab Code]

Surveys

• Code analysis for intelligent cyber systems: A data-driven approach (Information Science-2019)
  [Paper]
• Software Vulnerability Detection Using Deep Neural Networks: A Survey (Proceedings of the IEEE-2020)
  [Paper]

Tools

• Function-level vulnerability detection benchmark framework
  [Python Code]

Fig. 2: The deep-learning-based function-level vulnerability detection framework.

Data

• The function-level vulnerability dataset (labeled from C open-source projects) [Link1] & [Link2]

• The synthetic C/C++ vulnerability dataset (provided by the SARD project)
  [[Vulnerable functions]] [Link1] & [Link2] [[Non-vulnerable functions]] [Link1] & [Link2]

• Cross-Domain Vulnerability Discovery
  [Link1] & [Link2]
• Cyber Vulnerability Intelligence for IoT (binary data) [Link1] & [Link2] & [Link3]

Contact

We welcome researchers to use our code/data. Please kindly cite the paper listed if you use the code/data in your work. Any bug report or improvement suggestions regarding the code and data in this repository will be appreciated. For acquiring more information, inquiries and bug report please contact: junzhang@swin.edu.au.

Thanks!