Topic model-based software defect detection method and system

Abstract

The invention provides a topic model-based software defect detection method and system. The topic model-based software defect detection method comprises the steps: enabling a static source code to generate a corresponding abstract syntax tree in space construction, enabling the abstract syntax tree to be mapped to a digitalized feature vector space, and constructing an original matrix; in semanticanalysis, constructing a defect mode library, carrying out singular matrix decomposition dimensionality reduction on the defect mode library to form a reconstructed matrix, carrying out cosine similarity calculation on the reconstructed matrix, and obtaining a defect detection result; and adding a machine learning algorithm for processing a natural language into software defect detection, and detecting hidden defects from semantic-level detection codes, so that the means of high-security software code defect detection is enriched, and whether a given code has defects similar to known defectsin a defect mode library or not is automatically detected, and the quality of software is further improved.

Description

technical field [0001] The invention relates to the technical field of security detection, in particular to a method and system for software defect detection based on a topic model. Background technique [0002] At present, the core idea of ​​the mainstream static source code defect detection method is to search and match, whether it is lexical, grammatical or semantic level, it is a matching process at different levels, so that it is impossible to make similar but not identical defects was detected. It has become a new idea to use machine learning methods in static source code defect detection. Due to the innate intelligence factors of the topic model algorithm in machine learning, it has the potential semantic understanding ability, so it has good development potential from semantics. [0003] The prior art related to this application is the patent document CN 105204997B, which discloses a software defect detection method and device. Based on the specified error type, a ...

AI Technical Summary

Problems solved by technology

[0002] At present, the core idea of ​​the mainstream static source code defect detection method is to search and match, whether it is lexical, grammatical or semantic level, it is a matching process at different levels, so that it is impossible to make similar but not identical defects was detected

Images