结合CNN和文本语义的漏洞自动分类方法

Automatic Classification of Vulnerabilities Based on CNN and Text Semantics

  • 摘要: 为解决大规模漏洞分类问题,提出一种基于卷积神经网络(convolutional neural network,CNN)的漏洞自动分类方法,借鉴深度学习的技术思想自动获取漏洞描述的相关局部特征,通过batchnorm规范化数据解决文本训练不稳定问题,进而实现漏洞类型的有效划分.实验表明,与传统方法相比,该方法在漏洞自动分类效率上能够得到显著的提高.

     

    Abstract: Vulnerability classification technology is an important basis in information security vulnerability research, and is also an important means for effective management and control of vulnerability resources. In order to solve the problem of large-scale classification of vulnerabilities, an automatic vulnerability classification method was proposed based on convolutional neural network. Referring to the thought of deep learning, relevant local features of vulnerability description were acquired automatically, and the unstable problem of text training was solved through batchnorm normalized data, so as to realize the effective classification of vulnerabilities. Experiments show that compared with the traditional method, the efficiency of automatic classification of vulnerabilities can be improved to a certain degree with the proposed method.

     

/

返回文章
返回