An Information-Theoretic and Contrastive Learning-based Approach for Identifying Code Statements Causing Software Vulnerability. (arXiv:2209.10414v1 [cs.CR])

Software vulnerabilities existing in a program or function of computer
systems are a serious and crucial concern. Typically, in a program or function
consisting of hundreds or thousands of source code statements, there are only
few statements causing the corresponding vulnerabilities. Vulnerability
labeling is currently done on a function or program level by experts with the
assistance of machine learning tools. Extending this approach to the code
statement level is much more costly and time-consuming and remains an open
problem. …

code information software software vulnerability vulnerability