LLM-Based Approach for Buffer Overflow Detection in Source Code
In today’s high-risk environments, software security is critical for companies, as vulnerabilities can expose sensitive information. Robust cybersecurity measures are essential to reducing the risk of unauthorized access. One major security issue is CWE-120, which deals with buffer overflow vulnerabilities. This paper explores the use of automated tools for detecting such vulnerabilities. Traditional detection tools, which often rely on conventional computational models, struggle to identify complex, context-dependent flaws in source code. In this study, we propose an LLM-based method for detecting CWE-120 vulnerabilities. By integrating techniques like dropout and dimensionality reduction, our model improves speed and efficiency. The proposed approach achieved an accuracy of 0.90 and a precision rate of 0.91, demonstrating strong potential for early detection of vulnerabilities, particularly those related to CWE-120, during the software development process.
Authors
- Mst Shapna Akter (ORCID: https://orcid.org/0000-0002-9859-6265)
- Alfredo Cuzzocrea (ORCID: https://orcid.org/0000-0002-7104-6415)
- Md. Shazzad Hossain Shaon (ORCID: https://orcid.org/0009-0008-2491-1622)
- Md. Fahim Sultan (ORCID: https://orcid.org/0009-0009-2550-257X)
- Tasmin Karim (ORCID: https://orcid.org/0009-0008-2042-2610)
- Emran Kaanan
Institutions
- Oakland University (US)
- University of Calabria (IT)
Publication Details
- Published
- 2024-12-20
- DOI
- https://doi.org/10.1109/iccit64611.2024.11021816
- Primary Topic
- Software Engineering Research
- Type
- article
- Field-Weighted Citation Impact
- 0.00