A method, apparatus, computer device, and storage medium for detecting code vulnerabilities

Abstract

The present disclosure provides a code vulnerability detection method, apparatus, computer device, and storage medium. Among them, the method includes: dividing the code to be detected to obtain code segments corresponding to each function; determining the control dependence relationship between each code segment, the data dependence relationship between variables, and the context dependence relationship of the code to be detected; performing first feature extraction on the code segments according to the control dependence relationship, data dependence relationship, and context dependence relationship to obtain structural feature information; performing second feature extraction on the image information corresponding to the code segments to obtain sequential feature information; performing third feature extraction on the code segments to obtain timing feature information; performing feature fusion processing on the structural feature information, sequential feature information, and timing feature information to obtain the fusion feature information of the code segments; respectively inputting the fusion feature information of each code segment into a vulnerability detection model to obtain the vulnerability detection results of each code segment.

Images