Rabheru, Rishi and Hanif, Hazim and Maffeis, Sergio (2022) A hybrid graph neural network approach for detecting PHP vulnerabilities. In: 5th IEEE Conference on Dependable and Secure Computing (IEEE DSC 2022), 22-24 June 2022, Edinburgh Napier Univ, Merchiston Campus, Edinburgh, Scotland.
Full text not available from this repository.Abstract
We validate our approach in the wild by discovering 4 novel vulnerabilities in established WordPress plugins. This paper presents DeepTective, a deep learning-based approach to detect vulnerabilities in PHP source code. Our approach implements a novel hybrid technique that combines Gated Recurrent Units and Graph Convolutional Networks to detect SQLi, XSS and OSCI vulnerabilities leveraging both syntactic and semantic information. We evaluate DeepTective and compare it to the state of the art on an established synthetic dataset and on a novel real-world dataset collected from GitHub. Experimental results show that DeepTective outperformed other solutions, including recent machine learning-based vulnerability detection approaches, on both datasets. The gap is noticeable on the synthetic dataset, where our approach achieves very high classification performance, but grows even wider on the realistic dataset, where most existing tools fail to transfer their detection ability, whereas DeepTective achieves an F1 score of 88.12%.
| Item Type: | Conference or Workshop Item (Paper) |
|---|---|
| Funders: | None |
| Additional Information: | 5th IEEE Conference on Dependable and Secure Computing (IEEE DSC), Edinburgh Napier Univ, Merchiston Campus, Edinburgh, SCOTLAND, JUN 22-24, 2022 |
| Uncontrolled Keywords: | Vulnerability detection; PHP vulnerabilities; Graph neural networks; Software security |
| Subjects: | Q Science > QA Mathematics > QA75 Electronic computers. Computer science |
| Divisions: | Faculty of Computer Science & Information Technology |
| Depositing User: | Ms. Juhaida Abd Rahim |
| Date Deposited: | 03 Nov 2025 13:09 |
| Last Modified: | 03 Nov 2025 13:09 |
| URI: | http://eprints.um.edu.my/id/eprint/40483 |
Actions (login required)
 |
View Item |
