We present the VulDetect, a source code vulnerability detection system. This system uses deep learning methods to organizate rules for deciding whether a code fragment is vulnerable. This approach is an improvement of the approach proposed in VulDeePecker. The model uses the AST representation of the source code. We compared vulnerability detection results of both systems on the Bitcoin Core project.

Recently, adversarial attacks have drawn the community’s attention as an effective tool to degrade the accuracy of neural networks. However, their actual usage in the world is limited. The main reason is that real-world machine learning systems, such as content filters or face detectors, often consist of multiple neural networks, each performing an individual task. To attack such a system, adversarial example has to pass through many distinct networks at once, which is the major challenge addressed by this paper. In this paper, we investigate multitask adversarial attacks as a threat for real-world machine learning solutions. We provide a novel black-box adversarial attack, which significantly outperforms the current state-of-the-art methods, such as Fast Gradient Sign Attack (FGSM) and Basic Iterative Method (BIM, also known as Iterative-FGSM) in the multitask setting.

No abstract