1576results about "Reverse engineering" patented technology

Methods, apparatuses, and products for providing a code analysis feedback loop for code created using generative AI, including: performing a code analysis on code generated by a generative AI model; determining, based on the code analysis, whether the code satisfies one or more conditions; responsive to the code failing to satisfy the one or more conditions, until the code satisfies the one or more conditions, repeatedly updating the code by receiving, from the generative AI model, updated code based on a previously performed code analysis; and providing the code generated by the generative AI model.

Some embodiments engineer a prompt for submission to a language model, such as a software development large language model. Some embodiments ascertain a relationship between code development information and potential context. Code development information includes static analysis results, project settings, development tool history or status data, and other software development data which augments training data previously embedded in the language model. Some embodiments compute a prompt inclusion score of the potential context, based on at least the relationship, and use the inclusion score to determine whether to include the potential context in the language model prompt. In some scenarios, an embodiment determines where to place the context in the prompt. Scoring is performed by a formula, statistical scoring model, or machine learning scoring model. Some embodiments reduce context inclusion false positives and false negatives that were based on the use of embedding similarity scores alone.

Disclosed herein are computer-implemented systems and methods for code value assessment. For example, in one aspect, the system comprises, an input module configured to receive program code submissions from developers, a processing unit equipped with Text-Based Models with Contextual Understanding (TBM-CUs) configured to evaluate the functional meaning, purpose, and value of submitted code segments and distinguish between code contributions from human programmers and machine learning systems, a visualization module configured to present the assessed value of the analyzed code over various time periods and dimensions, offering insights into trends, patterns, and comparative performance, a communication module configured to translate programming code meaning or function into plain language summaries for non-technical stakeholders, and an AI peer review module configured to automatically review, accept or reject code contributions.

Techniques and systems described herein relate to monitoring executions of computer instructions on computing devices based on learning and generating a control flow directed graph. The techniques and systems include determining a learned control flow directed graph for executable code of an application by observing executions of transitions during an observation period and determining destinations of indirect transfers based on the learned control flow directed graph. Next a disassembly of the executable code is determined based on the learned control flow directed graph, the destinations of the transfers, and the executable code.

Systems and methods described herein relate to automated troubleshooting for application development tools. First data comprise a plurality of delta objects and a user query. The plurality of delta objects identify design-time changes made to an application using a development tool. The user query is received via a user interface and relates to at least one of the design-time changes. The first data is preprocessed to obtain second data. The preprocessing of the first data includes modifying a subset of the first data and adding one or more predetermined instructions to the first data. The second data is provided to a machine learning model to obtain a response to the user query. Output indicative of the response is caused to be presented in the user interface.

The invention discloses an intelligent contract vulnerability detection and repair system based on a heterogeneous graph neural network, and belongs to the technical field of block chain security, and the system comprises a contract analysis module, a multilayer graph construction module, a heterogeneous graph neural network module, a vulnerability feature library, a vulnerability recognition engine, an automatic repair module and a visual interface. After the source code of the intelligent contract is input, code analysis and standardization are completed by a contract analysis module; the multi-layer graph construction module constructs a contract internal heterogeneous graph, an inter-contract interaction graph and an ecosystem relation graph based on a graph theory; the heterogeneous graph neural network module learns a vulnerability feature mode; the vulnerability recognition engine combines the vulnerability feature library to realize vulnerability classification and risk assessment; the automatic repairing module generates a repairing scheme; and the visual interface realizes detection progress monitoring, result display and encrypted report export. The intelligent contract vulnerability detection and restoration system based on the heterogeneous graph neural network provided by the invention provides technical support for block chain digital asset security and ecological stability.

The present application is directed towards systems and methods for cluster-based code analysis and transformation. Cluster-based analysis may group code objects based on their similarity across functional areas, such as where a code object is cloned in multiple areas (e.g. sort functions that are duplicated across areas, or reports or tables that are identical). In some implementations, objects may be grouped into clusters by type, or based on reading from or writing to a common table. In some implementations, clustering at different layers may be possible.

The systems and methods disclosed herein receives, from a computing device, operational data indicating software or hardware assets used on informational assets, and obtains set of alphanumeric characters defining operative boundaries for expected system assets, which include a set of common attributes. Using the set of attributes, a first set of AI models determines observed system assets from the operational data, each with specific features. A second set of AI models associates each information asset with the corresponding observed system assets. For each observed system asset, a third set of AI models identifies criteria within the alphanumeric characters, compares the criteria with the asset's features to identify gaps, and generates actions to ensure the observed system asset meets the identified criteria.

The invention provides a non-technician-oriented script intelligent adaptation and visual arrangement method and a non-technician-oriented script intelligent adaptation and visual arrangement system. The method comprises the following steps: acquiring a script file uploaded by a user, extracting a dependency library through an AST analysis technology, and constructing an isolation container environment; performing intelligent identification and conversion on a file path and database connection in the script to generate a standardized API call; carrying out input and output analysis on the basis of the converted script, and carrying out DAG workflow arrangement in a visual mode; performing function-level packaging and standardization processing on the script component in the workflow to realize component multiplexing and version management; and finally, configuring a scheduling strategy and carrying out automatic operation monitoring. According to the method, a script environment depends on automatic processing and intelligent path adaptation, and visual arrangement and modular multiplexing are combined, so that non-technical personnel can independently complete the whole process from AI script generation to a production-level automatic process, the problem of'last kilometer 'in script deployment is solved, and the working efficiency is improved.

The invention relates to the field of intelligent contract vulnerability detection, in particular to an intelligent contract vulnerability detection method based on code graph fusion analysis and a graph matching network. The method comprises the steps of constructing an intelligent contract source code data set; through static analysis, extracting three different code feature information including a control flow diagram, a data flow diagram and an abstract syntax tree from the source code of the smart contract; carrying out information integration on the three extracted code features, and constructing a code graph covering wider features; on the basis of the generated code graph, a GraphCodeBerT model is used for pre-training; vectorizing a code graph which is output by the pre-training model and contains structural and semantic features through a graph embedding network; and learning the feature representation of the contract pair by using a cross-graph attention mechanism of a graph matching network to realize specific vulnerability detection of the smart contract source code. According to the invention, potential vulnerabilities can be accurately identified.

Methods and systems for assessing a software bill of materials (SBOM) include extracting package names from code of an application to identify first dependencies of the application. Package names are extracted from accesses by the application to identify second dependencies of the application. A quality score is generated for an SBOM of the application based on a comparison of the contents of the SBOM to the first dependencies and the second dependencies. An action is performed responsive to the quality score.

The invention discloses a code reconstruction method, system and device based on function recognition and a medium, and the method specifically comprises the steps: scanning a project file topological structure, and constructing a knowledge graph based on a code import relation and a technology stack feature; performing context enhancement by analyzing the code function description and combining with the knowledge graph to generate a code modification instruction set; based on the code modification instruction set, in combination with data stream sensitivity marking and performance portrait analysis, evaluating the target code to obtain an evaluation result; based on an evaluation result, matching a historical optimal practice mode through a graph neural network, and generating an optimization scheme which retains an original design style; by comparing abstract syntax tree differences between original codes and verified optimization schemes, only functional logic nodes are replaced, and legal code style features are reserved. According to the method, the efficiency and quality of code reconstruction and optimization are improved, and a more convenient, efficient and intelligent code processing tool is provided for software developers.

Targeted dynamic analysis of code is provided by utilizing static analysis and dynamic analysis. A static code analysis system can operate to generate an initial analysis of code. The results of the initial analysis may be used to target a dynamic analysis system to analyze portions of code identified by the static analysis as potentially containing defects. In some cases, a preliminary dynamic analysis may be used to generate code inputs that may be utilized in future analyses to determine the inputs necessary to target particular code paths identified by a static analysis as potentially defective. Future updates to the code base may utilize the generated data to target analysis to code paths affected by the updates.

Systems are provided for implementing methods for generating and processing fix suggestions for alerts produced by code analysis tools. The methods involve receiving an alert, parsing the alert to identify relevant information, and assembling a prompt for a Large Language Model (LLM). The prompt includes a general description of the problem, a description of the alert message, a source-code location, and a request for a proposed fix to the alert. The prompt is sent to the LLM, and a response is obtained. The response includes a proposed fix comprising a set of edits to be applied to the source code and / or configuration files. The response is processed and validated, and a fix suggestion is assembled and provided based on the response. The fix suggestion includes a natural language explanation of the proposed fix, suggested source-code changes, and selectable options for accepting, rejecting, and editing the fix suggestion.

The invention provides a code generation and evaluation method and system based on RAG and a multilevel decision tree, and the method comprises the steps: integrating project related design documents, and constructing a knowledge base capable of semantic retrieval through a vectorization technology; associating business demand description with related documents in the knowledge base based on an RAG technology, and performing demand semantic enhancement to generate a technology demand cue word; receiving the technical requirement cue word by adopting a large language model so as to generate a complete code conforming to business logic; constructing a four-level decision tree evaluation system, and sequentially executing code quality scanning, deployability verification, dynamic test verification and demand satisfaction verification through an evaluation assembly line to generate an evaluation result; and generating an optimization suggestion according to the evaluation result so as to trigger an iteration generation process when the code does not pass the verification, thereby solving the problems of disjunction between code generation and business requirements, low verification efficiency and insufficient iteration optimization.

The invention provides a DDD architecture service code review and evaluation method based on a multi-expert LLM, and belongs to the technical field of industry intelligence and the field of software process quality assurance. Multi-expert large model cooperation, token polling transmission and specific scene domain drive design (DDD) architecture analysis are adopted; in the same submitted code group, different dominant large models can be tried to serve as dominant large models, and final code review is performed to optimize an access condition of a suggested number. And through a multi-expert large model cooperation mechanism, the environment problem easily generated by a single large model is avoided, and the review stability is improved. The cooperation efficiency between large models is improved through a token polling mechanism of a large model expert group, fair speaking of each large model is ensured, an online state detection mechanism of a subordinate large model can ensure that tokens are transmitted to currently available large models, the situation that the overall review process is affected by individual large models is avoided, and the review efficiency is improved. And the business code review efficiency of the system is effectively improved.

The invention discloses an intelligent Bug management method and platform based on an AI large model. The method comprises the steps that structured error codes, unstructured log texts and development communication records are collected; standardized Bug features are obtained after preprocessing; semantic matching is performed based on a CodeBERT large model to generate a historical similar Bug case set, and a problem code segment is analyzed and positioned in combination with an AST abstract syntax tree; according to the project technology stack features, the historical similar Bug case set and the problem code segment, generating a repair scheme including code modification suggestions, automatically generated repair code snippets and implementation risk assessment; constructing and optimizing a triple knowledge graph; and finally, associating the standardized Bug features, the problem code segment, the repair scheme and the knowledge graph to obtain a Bug diagnosis result, and outputting the Bug diagnosis result. According to the method, intelligent positioning and accurate repairing of the Bug are achieved, the average Bug solving time is remarkably shortened, and meanwhile automatic precipitation of development experience is achieved through the continuously optimized knowledge graph.

The invention relates to a code file rewriting method and device based on a large language model, and the method comprises the steps: analyzing a source code file, obtaining the structure of a source code, and enabling the structure of the source code to comprise the definition of each function and the position of each function code in the source code file; respectively inputting each function code into a large language model, and respectively processing according to each cue word to complete rewriting of each function code; and combining each rewritten function code corresponding to each position in the source code file to form a rewritten code file. According to the invention, a scheme for optimizing and rewriting the codes based on the large language model and the file level can be provided.

The invention discloses a code fingerprint-based open source component identification and vulnerability detection method, which comprises the following steps of: receiving a local or remote code, extracting a difference file, generating an AST and constructing a code attribute graph; sHA-256 Hash fingerprints and GNN semantic fingerprints are calculated for the function level sub-graphs to form mixed fingerprints, accurate matching is conducted through a Bloom filter, semantic matching is completed through nearest neighbor, and a component version is determined through a distribution difference algorithm. The method comprises the steps that firstly, a component identifier is mapped into a PURL or an SWID, an OSV / NVD library is inquired to obtain a CVE, comprehensive risks are calculated in combination with CVSS, EPSS and dependency depth, and an SBOM and a vulnerability report conforming to CycloneDX or SPDX are output. The method is high in speed and high in accuracy, and the open source risk can be automatically treated in continuous integration.

The invention provides a private intelligent code collaborative optimization method and system based on graph retrieval, and relates to the technical field of software engineering intelligent auxiliary tools, and the method comprises the steps: obtaining a source code file and operation log data of a private project; the method comprises the following steps: performing syntax tree analysis on a source code file through a Tree-siter analyzer to generate a corresponding abstract syntax tree; constructing a code knowledge graph by analyzing a function call relationship, an inheritance relationship and a module dependency relationship; monitoring the change of a project file in the code knowledge graph through a code change event processor, and updating the code knowledge graph in real time when the file is changed; establishing an association relationship between the running log data and a corresponding function node in the code knowledge graph; the method comprises the following steps: analyzing a natural language problem of a developer into a Cypher query statement through an intelligent Agent; obtaining a query result from the graph database; and formatting the query result to generate a final result.

The invention discloses a code generation method, which comprises the following steps that: a code development platform receives input information of a user in a first code file in a project, acquires a context in the file and a first cross-file context according to a static structure of the project, and acquires a second cross-file context according to behavior characteristics of the user in a development project, obtaining a third cross-file context according to the evolution coupling degree of at least one second code file in a code warehouse of the project and the first code file, and generating prompt information according to the input information, the context in the file, the first cross-file context, the second cross-file context and the third cross-file context, and inputting the prompt information into the code generation model for reasoning to obtain at least one group of generation codes, and displaying the at least one group of generation codes to the user. According to the method, the multi-dimensional item-level context and the user input serve as the input of the code generation model, the capability of the code generation model for utilizing the cross-file context in the code generation process is improved, and the code generation effect is improved.

Systems and methods of utilizing a large language model (LLM) to reverse engineer software is provided. The method includes obtaining sample assembly language from coded information or data. The sample assembly language is input to a machine learning (ML) model trained to recognize when the sample assembly language includes malicious code. The method further includes identifying, from the sample assembly language, a functionality implemented by the sample assembly language, where the functionality is indicative of whether the sample assembly language includes the malicious code. The method further includes generating, by a processing device, a natural language indication of the functionality implemented by the sample assembly language. The natural language indication is an output of the ML model.

An integrated development environment (IDE) leverages a generative AI model to generate industrial control code in accordance with specified functional requirements, which can be provided to the industrial IDE system as intuitive natural language spoken or written text. The industrial IDE can also analyze written code in response to natural language prompts submitted against the code, generate answers to user-submitted questions about the code, and offer recommendations for improving the code in response to specific questions or requests submitted by the user.

Disclosed are various examples for managing post quantum cryptography migrations of application services. For example, a system can include a computing device that is configured to identify a uniform resource location associated with source code for an application service and identify a cryptographic primitive in the source code by scanning the source code. The computing device can be configured to generate a large language model prompt for a cryptographic bill of materials based at least in part on the cryptographic primitive. The cryptographic bill of materials for the source code can be generated by inputting the large language model prompt to a large language model application. The cryptographic bill of materials can include a list of cryptographic components.

The invention provides a script preservation method which can be applied to the technical field of artificial intelligence. The script preservation method comprises the following steps: carrying out semantic understanding on demand related files by utilizing a large model, extracting core elements, and generating a structured demand change list; analyzing to obtain an abstract syntax tree of an existing script code, and constructing a mapping relationship between the software automation test element and a script code block; dynamically comparing the structured demand change list with an existing script code structure tree based on a mapping relation between software automation test elements and script code blocks, identifying a script range influenced by demand change, and outputting a change influence matrix; and based on the change influence matrix, generating an automatic script code snippet needing to be updated, and realizing preservation of the automatic script. The invention further provides a script preservation device and equipment, a storage medium and a program product.

The present disclosure provides systems and methods performed in a central system. An initial entity model comprising a plurality of artefacts is formed. A runtime engine determines a plurality of available agent engagements based on the initial entity model. Responsive to an input selecting one of the available agent engagements, a notification is sent to an external autonomous agent. An indication of an action to be performed is received from the external autonomous agent. Responsive thereto, a message is sent to an external service indicating the action, thereby causing the action to be performed. The entity model is updated with a new artefact corresponding to the performed action, and a further plurality of agent actions is determined based on the updated entity model.

The invention discloses a code vulnerability detection method, a code vulnerability rule configuration method, a static single assignment SSA code acquisition method, devices corresponding to the methods, and electronic equipment. The code vulnerability detection method comprises the following steps: acquiring a plurality of source code files and code vulnerability rules of an application program; generating an abstract syntax tree of the source code file, and obtaining a function call relationship; and traversing the abstract syntax tree, and obtaining a cross-function risk propagation path according to the function call relationship and the code vulnerability rule. By the adoption of the processing mode, the function calling relation and the abstract syntax tree are fused to conduct cross-function code vulnerability detection, cross-function vulnerability detection of context sensitivity, flow sensitivity and domain sensitivity is achieved, and vulnerability false report and missing report are avoided; therefore, the accuracy and recall rate of vulnerability detection can be effectively improved.

Methods, systems, and apparatus for automatic detection of software bugs are disclosed. An example apparatus includes a comparator to compare reference code to input code to detect a source code error in the input code; a graph generator to generate a graphical representation of the reference code or the input code, the graphical representation to identify non-overlapping code regions; and a root cause determiner to determine a root cause of the source code error in the input code, the root cause based on the non-overlapping code regions.

The invention discloses a code vulnerability detection method based on multi-dimensional feature fusion and edge semantic enhancement, and the method comprises the steps: carrying out AST sub-tree structure compression based on a sub-tree folding rule on the basis of retaining an AST high-level grammar framework, fusing a PDG data flow and control flow dependency relationship, and constructing a lightweight program semantic graph; extracting node multi-dimensional features from the program semantic graph, extracting program-level global features in combination with an edge semantic enhancement mechanism, and performing vectorization representation; and inputting the program semantic graph features into a full connection layer, identifying potential vulnerabilities and outputting a detection result. According to the scheme, a context modeling mechanism based on a scope path is introduced, a semantic subtree, a grammar structure and scope information are combined, multi-dimensional features are extracted, multi-dimensional information fusion is realized through a dynamic attention mechanism, local and global feature splitting is prevented, and the edge semantic enhancement module is constructed to realize multi-dimensional information fusion. And the distinguishing capability and the feature expression capability of the model on heterogeneous edges are improved.

The invention discloses a static and dynamic analysis-combined source code vulnerability detection method, which comprises the following steps of: performing static scanning on an input source code, and preliminarily positioning potential vulnerabilities according to a preset vulnerability rule base; executing program slicing based on the control flow diagram and the data flow diagram, and extracting a precise code subset related to the vulnerability; a large language model based on a Transform structure is utilized, and a dynamic verification attack case is automatically generated according to the vulnerability type and the slice code; executing the test case in a sandbox environment, monitoring program abnormal behaviors in real time, and confirming actual availability of vulnerabilities; and finally, synthesizing static and dynamic results to generate a multi-level vulnerability detection report. According to the method, the accuracy and coverage rate of vulnerability detection can be effectively improved, the false report and missing report rate is reduced, high automation and intelligence of the source code vulnerability detection process are realized, and the method has good applicability and popularization value.