title: ÐÐ¾Ð¸ÑÐº ÑÑÐ·Ð²Ð¸Ð¼Ð¾ÑÑÐµÐ¹ Ð² Ð¸ÑÑ Ð¾Ð´Ð½Ð¾Ð¼ ÐºÐ¾Ð´Ðµ Ð½Ð° ÑÐ·ÑÐºÐµ Ð¡/Ð¡++ Ñ Ð¸ÑÐ¿Ð¾Ð»ÑÐ·Ð¾Ð²Ð°Ð½Ð¸ÐµÐ¼ Ð¸ÑÐºÑÑÑÑÐ²ÐµÐ½Ð½ÑÑ Ð½ÐµÐ¹ÑÐ¾Ð½Ð½ÑÑ ÑÐµÑÐµÐ¹
title: Ð²ÑÐ¿ÑÑÐºÐ½Ð°Ñ ÐºÐ²Ð°Ð»Ð¸ÑÐ¸ÐºÐ°ÑÐ¸Ð¾Ð½Ð½Ð°Ñ ÑÐ°Ð±Ð¾ÑÐ° Ð¼Ð°Ð³Ð¸ÑÑÑÐ°
titleType: Subtitle
title: Searching for vulnerabilities in the C/C++ source code using artificial neural networks
Creators: name: Ð¨Ð¸ÑÐ³Ð°Ð·Ð¸Ð½, Ð ÑÑÐ»Ð°Ð½
Publisher: name: Ð¡Ð°Ð½ÐºÑ-ÐÐµÑÐµÑÐ±ÑÑÐ³ÑÐºÐ¸Ð¹ Ð¿Ð¾Ð»Ð¸ÑÐµÑÐ½Ð¸ÑÐµÑÐºÐ¸Ð¹ ÑÐ½Ð¸Ð²ÐµÑÑÐ¸ÑÐµÑ ÐÐµÑÑÐ° ÐÐµÐ»Ð¸ÐºÐ¾Ð³Ð¾
Year: 2022
Subjects: ÐÐµÐ¹ÑÐ¾Ð½Ð½ÑÐµ ÑÐµÑÐ¸
ÐÑÐ¾Ð³ÑÐ°Ð¼Ð¼Ð¸ÑÐ¾Ð²Ð°Ð½Ð¸Ñ ÑÐ·ÑÐºÐ¸
Ð¿Ð¾Ð¸ÑÐº ÑÑÐ·Ð²Ð¸Ð¼Ð¾ÑÑÐµÐ¹
Ð²ÑÑÑÐ°Ð¸Ð²Ð°Ð½Ð¸Ðµ ÑÐ»Ð¾Ð²
ÑÑÐµÐ¹Ð¼Ð²Ð¾ÑÐº
vulnerability search
word embedding
framework

description: Ð¢ÐµÐ¼Ð° Ð²ÑÐ¿ÑÑÐºÐ½Ð¾Ð¹ ÐºÐ²Ð°Ð»Ð¸ÑÐ¸ÑÐ¾Ð²Ð°Ð½Ð½Ð¾Ð¹ ÑÐ°Ð±Ð¾ÑÑ: Â«ÐÐ¾Ð¸ÑÐº ÑÑÐ·Ð²Ð¸Ð¼Ð¾ÑÑÐµÐ¹ Ð² Ð¸ÑÑÐ¾Ð´Ð½Ð¾Ð¼ ÐºÐ¾Ð´Ðµ Ð½Ð° ÑÐ·ÑÐºÐµ C/C++ Ñ Ð¸ÑÐ¿Ð¾Ð»ÑÐ·Ð¾Ð²Ð°Ð½Ð¸ÐµÐ¼ Ð¸ÑÐºÑÑÑÑÐ²ÐµÐ½Ð½ÑÑ Ð½ÐµÐ¹ÑÐ¾Ð½Ð½ÑÑ ÑÐµÑÐµÐ¹Â». Ð¦ÐµÐ»ÑÑ ÑÐ°Ð±Ð¾ÑÑ ÑÐ²Ð»ÑÐµÑÑÑ Ð²ÑÑÐ²Ð»ÐµÐ½Ð¸Ðµ ÑÑÐ·Ð²Ð¸Ð¼ÑÑ ÑÑÐ°ÑÑÐºÐ¾Ð² Ð½Ð° Ð¾ÑÐ½Ð¾Ð²Ðµ ÑÐµÑÐ½Ð¾Ð»Ð¾Ð³Ð¸Ð¸ Ð¸ÑÐºÑÑÑÑÐ²ÐµÐ½Ð½ÑÑ Ð½ÐµÐ¹ÑÐ¾Ð½Ð½ÑÑ ÑÐµÑÐµÐ¹. ÐÑÐµÐ´Ð¼ÐµÑÐ¾Ð¼ Ð¸ÑÑÐ»ÐµÐ´Ð¾Ð²Ð°Ð½Ð¸Ñ ÑÐ²Ð»ÑÑÑÑÑ ÑÐ¾Ð²ÑÐµÐ¼ÐµÐ½Ð½ÑÐµ Ð¼ÐµÑÐ¾Ð´Ñ Ð¿Ð¾Ð¸ÑÐºÐ° ÑÑÐ·Ð²Ð¸Ð¼Ð¾ÑÑÐµÐ¹ Ð¸ÑÑÐ¾Ð´Ð½Ð¾Ð³Ð¾ ÐºÐ¾Ð´Ð°. ÐÐ°Ð´Ð°ÑÐ¸, ÑÐµÑÐ°ÐµÐ¼ÑÐµ Ð² ÑÐ¾Ð´Ðµ Ð¸ÑÑÐ»ÐµÐ´Ð¾Ð²Ð°Ð½Ð¸Ñ: ÐÐ½Ð°Ð»Ð¸Ð· ÑÐ¾Ð²ÑÐµÐ¼ÐµÐ½Ð½ÑÑ Ð¸ÑÑÐ»ÐµÐ´Ð¾Ð²Ð°Ð½Ð¸Ð¹ Ð² Ð¾Ð±Ð»Ð°ÑÑÐ¸ Ð¿Ð¾Ð¸ÑÐºÐ° ÑÑÐ·Ð²Ð¸Ð¼Ð¾ÑÑÐµÐ¹ Ð² Ð¸ÑÑÐ¾Ð´Ð½Ð¾Ð¼ ÐºÐ¾Ð´Ðµ Ñ Ð¿Ð¾Ð¼Ð¾ÑÑÑ Ð¸ÑÐºÑÑÑÑÐ²ÐµÐ½Ð½ÑÑ Ð½ÐµÐ¹ÑÐ¾Ð½Ð½ÑÑ ÑÐµÑÐµÐ¹. ÐÐ»Ð°ÑÑÐ¸ÑÐ¸ÐºÐ°ÑÐ¸Ñ Ð¼ÐµÑÐ¾Ð´Ð¾Ð² Ð¿Ð¾Ð¸ÑÐºÐ° ÑÑÐ·Ð²Ð¸Ð¼Ð¾ÑÑÐµÐ¹ Ð² Ð¸ÑÑÐ¾Ð´Ð½Ð¾Ð¼ ÐºÐ¾Ð´Ðµ Ð² ÑÐ°ÑÑÐ¼Ð¾ÑÑÐµÐ½Ð½ÑÑ Ð¸ÑÑÐ»ÐµÐ´Ð¾Ð²Ð°Ð½Ð¸ÑÑ. Ð Ð°Ð·ÑÐ°Ð±Ð¾ÑÐºÐ° Ð¼ÐµÑÐ¾Ð´Ð° Ð¿Ð¾Ð¸ÑÐºÐ° ÑÑÐ·Ð²Ð¸Ð¼ÑÑ ÑÑÐ°ÑÑÐºÐ¾Ð² Ð¸ÑÑÐ¾Ð´Ð½Ð¾Ð³Ð¾ ÐºÐ¾Ð´Ð° Ð¿ÑÐ¾Ð³ÑÐ°Ð¼Ð¼Ñ Ð½Ð° Ð¾ÑÐ½Ð¾Ð²Ðµ Ð¸ÑÐºÑÑÑÑÐ²ÐµÐ½Ð½ÑÑ Ð½ÐµÐ¹ÑÐ¾Ð½Ð½ÑÑ ÑÐµÑÐµÐ¹. ÐÑÐ¾Ð³ÑÐ°Ð¼Ð¼Ð½Ð°Ñ ÑÐµÐ°Ð»Ð¸Ð·Ð°ÑÐ¸Ñ ÑÐ°Ð·ÑÐ°Ð±Ð¾ÑÐ°Ð½Ð½Ð¾Ð³Ð¾ Ð¼ÐµÑÐ¾Ð´Ð°. ÐÑÐµÐ½ÐºÐ° ÑÐ¾ÑÐ½Ð¾ÑÑÐ¸ Ð¸ÑÐºÑÑÑÑÐ²ÐµÐ½Ð½ÑÑ Ð½ÐµÐ¹ÑÐ¾Ð½Ð½ÑÑ ÑÐµÑÐµÐ¹ Ð¿ÑÐ¸ Ð¿Ð¾Ð¸ÑÐºÐµ ÑÑÐ·Ð²Ð¸Ð¼Ð¾ÑÑÐµÐ¹ Ð² Ð¸ÑÑÐ¾Ð´Ð½Ð¾Ð¼ ÐºÐ¾Ð´Ðµ Ð½Ð° ÑÐ·ÑÐºÐµ C/C++.Ð ÑÐµÐ·ÑÐ»ÑÑÐ°ÑÐµ ÑÐ°Ð±Ð¾ÑÑ Ð±ÑÐ»Ð¾ ÑÐ°Ð·ÑÐ°Ð±Ð¾ÑÐ°Ð½ ÑÑÐµÐ´ÑÑÐ²Ð¾ Ð¿Ð¾Ð¸ÑÐºÐ° ÑÑÐ·Ð²Ð¸Ð¼Ð¾ÑÑÐµÐ¹ Ð² Ð¸ÑÑÐ¾Ð´Ð½Ð¾Ð¼ ÐºÐ¾Ð´Ðµ Ð½Ð° ÑÐ·ÑÐºÐµ C/C++: ÑÑÐµÐ¹Ð¼Ð²Ð¾ÑÐº, Ð¾Ð±ÑÐµÐ´Ð¸Ð½ÑÑÑÐ¸Ð¹ Ð² ÑÐµÐ±Ðµ Ð½ÐµÑÐºÐ¾Ð»ÑÐºÐ¾ Ð½Ð°Ð±Ð¾ÑÐ¾Ð² Ð¼Ð¾Ð´ÐµÐ»ÐµÐ¹ Ð²ÑÑÑÐ°Ð¸Ð²Ð°Ð½Ð¸Ñ ÑÐ»Ð¾Ð² Ð¸ ÑÐµÑÐµÐ¹-ÐºÐ»Ð°ÑÑÐ¸ÑÐ¸ÐºÐ°ÑÐ¾ÑÐ¾Ð². ÐÑÐ»Ð° Ð¿ÑÐ¾Ð´ÐµÐ¼Ð¾Ð½ÑÑÑÐ¸ÑÐ¾Ð²Ð°Ð½Ð° ÑÑÑÐµÐºÑÐ¸Ð²Ð½Ð¾ÑÑÑ ÑÑÐµÐ´ÑÑÐ²Ð°. ÐÑÐ» ÑÐ´ÐµÐ»Ð°Ð½ Ð²ÑÐ²Ð¾Ð´, ÑÑÐ¾ Ð¿Ð¾Ð¸ÑÐº ÑÑÐ·Ð²Ð¸Ð¼Ð¾ÑÑÐµÐ¹ Ñ Ð¿Ð¾Ð¼Ð¾ÑÑÑ Ð¸ÑÐºÑÑÑÑÐ²ÐµÐ½Ð½ÑÑ Ð½ÐµÐ¹ÑÐ¾Ð½Ð½ÑÑ ÑÐµÑÐµÐ¹ Ð¸Ð¼ÐµÐµÑ Ð±Ð¾Ð»ÑÑÐ¾Ð¹ Ð¿Ð¾ÑÐµÐ½ÑÐ¸Ð°Ð» Ð´Ð»Ñ Ð´Ð°Ð»ÑÐ½ÐµÐ¹ÑÐµÐ³Ð¾ Ð¸Ð·ÑÑÐµÐ½Ð¸Ñ. ÐÐ¾Ð»ÑÑÐµÐ½Ð½ÑÐµ ÑÐµÐ·ÑÐ»ÑÑÐ°ÑÑ Ð¼Ð¾Ð³ÑÑ Ð±ÑÑÑ Ð¸ÑÐ¿Ð¾Ð»ÑÐ·Ð¾Ð²Ð°Ð½Ñ Ð² ÐºÐ°ÑÐµÑÑÐ²Ðµ Ð¸Ð½ÑÑÑÑÐ¼ÐµÐ½ÑÐ° Ð´Ð»Ñ Ð¿ÑÐ¾ÐµÐºÑÐ¸ÑÐ¾Ð²Ð°Ð½Ð¸Ñ DevSecOps Ð¿ÑÐ¾ÑÐµÑÑÐ¾Ð².
description: The topic of the graduate qualification work: "Searching for vulnerabilities in the C/C++ source code using artificial neural networks". The aim of the work is to analyze the source code and detect vulnerabilities based on the artificial neural network technology. The subject of the research is the modern methods of source code vulnerability analysis. The tasks solved in the course of the research: Analysis of current research in the field of finding vulnerabilities in the source code using artificial neural networks. Classification of methods of search of vulnerabilities in source code in the considered researches. Development of a method of search for vulnerable sections of the source code of the program based on artificial neural networks. Software implementation of the developed method. Evaluation of the accuracy of artificial neural networks when searching for vulnerabilities in C/C++ source code. As the result of the work, a tool for searching for vulnerabilities in C/C++ source code has been developed: a framework combining several sets of models of embedding words and classifier networks. The effectiveness of the tool has been demonstrated. It has been concluded that the search of vulnerabilities with the help of artificial neural networks has a great potential for further research. The results obtained can be used as a tool for designing DevSecOps processes.