{"about":{"site":"https://codewithpapers.app","non_affiliation":"Code with Papers and Syntology are not affiliated with, endorsed by, or sponsored by Papers with Code, Meta, or the pwc-archive mirror.","licence":"CC BY-SA 4.0","licence_url":"https://creativecommons.org/licenses/by-sa/4.0/legalcode","attribution":"https://codewithpapers.app/attribution","modified":"archive material modified by Syntology; see the attribution page"},"url":"/paper/sysevr-a-framework-for-using-deep-learning-to","title":"SySeVR: A Framework for Using Deep Learning to Detect Software Vulnerabilities","arxiv_id":"1807.06756","date":"2018-07-18","proceeding":null,"authors":["Zhen Li","Deqing Zou","Shouhuai Xu","Hai Jin","Yawei Zhu","Zhaoxuan Chen"],"abstract":"The detection of software vulnerabilities (or vulnerabilities for short) is an important problem that has yet to be tackled, as manifested by the many vulnerabilities reported on a daily basis. This calls for machine learning methods for vulnerability detection. Deep learning is attractive for this purpose because it alleviates the requirement to manually define features. Despite the tremendous success of deep learning in other application domains, its applicability to vulnerability detection is not systematically understood. In order to fill this void, we propose the first systematic framework for using deep learning to detect vulnerabilities in C/C++ programs with source code. The framework, dubbed Syntax-based, Semantics-based, and Vector Representations (SySeVR), focuses on obtaining program representations that can accommodate syntax and semantic information pertinent to vulnerabilities. Our experiments with 4 software products demonstrate the usefulness of the framework: we detect 15 vulnerabilities that are not reported in the National Vulnerability Database. Among these 15 vulnerabilities, 7 are unknown and have been reported to the vendors, and the other 8 have been \"silently\" patched by the vendors when releasing newer versions of the pertinent software products.","url_abs":"https://arxiv.org/abs/1807.06756v3","url_pdf":"https://arxiv.org/pdf/1807.06756v3.pdf","source":{"archive":"pwc-archive (Hugging Face), CC BY-SA 4.0","snapshot":"2025-07-28","licence_url":"https://creativecommons.org/licenses/by-sa/4.0/legalcode","row_kind":"abstracts"},"code_links":[{"paper_slug":"sysevr-a-framework-for-using-deep-learning-to","repo_url":"https://github.com/SySeVR/SySeVR","is_official":1,"mentioned_in_paper":1,"mentioned_in_github":1,"framework":"none","reach":null},{"paper_slug":"sysevr-a-framework-for-using-deep-learning-to","repo_url":"https://github.com/CGCL-codes/VulDeePecker","is_official":0,"mentioned_in_paper":0,"mentioned_in_github":1,"framework":"none","reach":{"status":"ok","spdx":"Apache-2.0"}},{"paper_slug":"sysevr-a-framework-for-using-deep-learning-to","repo_url":"https://github.com/NIPC-DL/covec","is_official":0,"mentioned_in_paper":0,"mentioned_in_github":1,"framework":"pytorch","reach":{"status":"ok","spdx":"MIT"}},{"paper_slug":"sysevr-a-framework-for-using-deep-learning-to","repo_url":"https://github.com/NIPC-DL/torchplp","is_official":0,"mentioned_in_paper":0,"mentioned_in_github":1,"framework":"pytorch","reach":{"status":"ok","spdx":"MIT"}}],"tasks":[{"task_slug":"deep-learning","task_name":"Deep Learning"},{"task_slug":"vulnerability-detection","task_name":"Vulnerability Detection"}],"methods":[],"datasets_introduced":[],"methods_introduced":[],"results":[],"syntology":{"atlas_url":"https://app.syntology.ai/?focus=1807.06756","mcp":{"get_harvested_code_for_paper":{"arxiv_id":"1807.06756"}},"developers":"https://syntology.ai/developers","read_at":"2026-09-24T18:15:14+00:00","read_at_is":"when the build read Syntology's graph, not when any sample ran","claim":"Per-sample execution status on synthesized fixtures; not a correctness claim about the paper. Samples come from repositories linked to the paper, official or community; repo_kind says which.","repos":[{"provenance":"external:paperswithcode_snapshot_2025-07-28","url":"https://github.com/NIPC-DL/torchplp","reach":{"status":"ok","spdx":"MIT"}},{"provenance":"external:paperswithcode_snapshot_2025-07-28","url":"https://github.com/CGCL-codes/VulDeePecker","reach":{"status":"ok","spdx":"Apache-2.0"}},{"provenance":"external:paperswithcode_snapshot_2025-07-28","url":"https://github.com/NIPC-DL/covec","reach":{"status":"ok","spdx":"MIT"}},{"provenance":"external:paperswithcode_snapshot_2025-07-28","url":"https://github.com/SySeVR/SySeVR","reach":null}],"summary":{"ran_violates":1,"unverified":7},"by_repo_kind":{"official":{"samples":2,"ran":0,"repositories":1},"listed":{"samples":5,"ran":0,"repositories":1}},"repo_kind_vocabulary":{"official":"The archive marks this repository official for the paper","named_in_paper":"The archive records that the paper mentions this repository; it is not marked official","listed":"In the archive's code links for this paper, not marked official and not recorded as mentioned in the paper","found_in_text":"Syntology found this repository in the paper's own text; whether it is the authors' implementation is not asserted","community":"Not in the archive's code links for this paper; a community repository Syntology harvested"},"n_pointer_only_for_licence":1,"samples":[{"code_sha256_prefix":"0fe9cf6c00ef56ea","entry":"is_number","repo":null,"repo_kind":null,"path":null,"file_url":null,"link_basis":"identical_code_first_harvested_elsewhere","language":"python","status":"ran_violates","verification_level":2,"contract_check":"VIOLATES","metamorphic_tier":"deterministic","behaviour_fingerprint":false,"licence":null,"inline_ok":false,"mcp_get_code":{"code_sha256":"0fe9cf6c00ef56ea"}},{"code_sha256_prefix":"2bbacb87c24f2c33","entry":"code_split","repo":"NIPC-DL/covec","repo_kind":"listed","path":"torchplp/processor/textmodel.py","file_url":"https://github.com/NIPC-DL/covec/blob/HEAD/torchplp/processor/textmodel.py","link_basis":"harvester_set","language":"python","status":"unverified","verification_level":0,"contract_check":null,"metamorphic_tier":null,"behaviour_fingerprint":false,"licence":"MIT","inline_ok":true,"mcp_get_code":{"code_sha256":"2bbacb87c24f2c33"}},{"code_sha256_prefix":"208a5dff58ff3b6c","entry":"l2o","repo":"NIPC-DL/covec","repo_kind":"listed","path":"torchplp/datasets/models.py","file_url":"https://github.com/NIPC-DL/covec/blob/HEAD/torchplp/datasets/models.py","link_basis":"harvester_set","language":"python","status":"unverified","verification_level":0,"contract_check":null,"metamorphic_tier":null,"behaviour_fingerprint":false,"licence":"MIT","inline_ok":true,"mcp_get_code":{"code_sha256":"208a5dff58ff3b6c"}},{"code_sha256_prefix":"421eed064e01b9e4","entry":"model_from_config","repo":"SySeVR/SySeVR","repo_kind":"official","path":"Implementation/model/keras/models.py","file_url":"https://github.com/SySeVR/SySeVR/blob/HEAD/Implementation/model/keras/models.py","link_basis":"first_harvest_node","language":"python","status":"unverified","verification_level":0,"contract_check":null,"metamorphic_tier":null,"behaviour_fingerprint":false,"licence":"Apache-2.0","inline_ok":true,"mcp_get_code":{"code_sha256":"421eed064e01b9e4"}},{"code_sha256_prefix":"757b53c434bfd276","entry":"save_model","repo":"SySeVR/SySeVR","repo_kind":"official","path":"Implementation/model/keras/models.py","file_url":"https://github.com/SySeVR/SySeVR/blob/HEAD/Implementation/model/keras/models.py","link_basis":"first_harvest_node","language":"python","status":"unverified","verification_level":0,"contract_check":null,"metamorphic_tier":null,"behaviour_fingerprint":false,"licence":"Apache-2.0","inline_ok":true,"mcp_get_code":{"code_sha256":"757b53c434bfd276"}},{"code_sha256_prefix":"6e760cff468b1a28","entry":"standardize","repo":"NIPC-DL/covec","repo_kind":"listed","path":"torchplp/processor/treemodel.py","file_url":"https://github.com/NIPC-DL/covec/blob/HEAD/torchplp/processor/treemodel.py","link_basis":"harvester_set","language":"python","status":"unverified","verification_level":0,"contract_check":null,"metamorphic_tier":null,"behaviour_fingerprint":false,"licence":"MIT","inline_ok":true,"mcp_get_code":{"code_sha256":"6e760cff468b1a28"}},{"code_sha256_prefix":"477594548fdbff4e","entry":"vectorlize","repo":"NIPC-DL/covec","repo_kind":"listed","path":"torchplp/processor/textmodel.py","file_url":"https://github.com/NIPC-DL/covec/blob/HEAD/torchplp/processor/textmodel.py","link_basis":"harvester_set","language":"python","status":"unverified","verification_level":0,"contract_check":null,"metamorphic_tier":null,"behaviour_fingerprint":false,"licence":"MIT","inline_ok":true,"mcp_get_code":{"code_sha256":"477594548fdbff4e"}},{"code_sha256_prefix":"4039685e38853fdd","entry":"vectorlize","repo":"NIPC-DL/covec","repo_kind":"listed","path":"torchplp/processor/treemodel.py","file_url":"https://github.com/NIPC-DL/covec/blob/HEAD/torchplp/processor/treemodel.py","link_basis":"harvester_set","language":"python","status":"unverified","verification_level":0,"contract_check":null,"metamorphic_tier":null,"behaviour_fingerprint":false,"licence":"MIT","inline_ok":true,"mcp_get_code":{"code_sha256":"4039685e38853fdd"}}]},"arxiv_metadata":null,"syntology_extracted_results":null}