Patents
Literature
Patsnap Eureka AI that helps you search prior art, draft patents, and assess FTO risks, powered by patent and scientific literature data.

60 results about "Abstract syntax" patented technology

In computer science, the abstract syntax of data is its structure described as a data type (possibly, but not necessarily, an abstract data type), independent of any particular representation or encoding. This is particularly used in the representation of text in computer languages, which are generally stored in a tree structure as an abstract syntax tree. Abstract syntax, which only consists of the structure of data, is contrasted with concrete syntax, which also includes information about the representation. For example, concrete syntax includes features like parentheses (for grouping) or commas (for lists) which are not included in the abstract syntax, as they are implicit in the structure.

Intelligent contract vulnerability detection method based on heterogeneous graph attention network

The invention discloses an intelligent contract vulnerability detection method based on a heterogeneous graph attention network. According to the method, firstly, the source code of the intelligent contract is preprocessed, the SCIR of the code of the intelligent contract is constructed, the complexity of the code of the contract is reduced, and vulnerability features are enriched; and constructing an intelligent contract code attribute graph SCPG based on SCIR, integrating various code graph structures such as an abstract syntax tree and a control flow graph, and comprehensively describing syntax and semantic features of the contract. And then constructing an intelligent contract code heterogeneous graph SCHG on the basis of the SCPG, optimizing code graph structure representation, and realizing high-quality modeling of node features. And finally, detecting the vulnerability of the smart contract by using a customized multi-layer heterogeneous graph attention network model MHGAN. The intelligent contract vulnerability detection method based on deep learning makes up for the defects of an existing intelligent contract vulnerability detection method based on deep learning, effectively improves the accuracy of intelligent contract vulnerability detection, and is excellent in the interpretability of the detection result.
Owner:HANGZHOU DIANZI UNIV

Private intelligent code collaborative optimization method and system based on graph retrieval

The invention provides a private intelligent code collaborative optimization method and system based on graph retrieval, and relates to the technical field of software engineering intelligent auxiliary tools, and the method comprises the steps: obtaining a source code file and operation log data of a private project; the method comprises the following steps: performing syntax tree analysis on a source code file through a Tree-siter analyzer to generate a corresponding abstract syntax tree; constructing a code knowledge graph by analyzing a function call relationship, an inheritance relationship and a module dependency relationship; monitoring the change of a project file in the code knowledge graph through a code change event processor, and updating the code knowledge graph in real time when the file is changed; establishing an association relationship between the running log data and a corresponding function node in the code knowledge graph; the method comprises the following steps: analyzing a natural language problem of a developer into a Cypher query statement through an intelligent Agent; obtaining a query result from the graph database; and formatting the query result to generate a final result.
Owner:QINGTA TECH

Validating code generated by artificial intelligence using abstract syntax trees

Validating code generated by artificial intelligence using abstract syntax trees includes generating, by an artificial intelligence (AI) language model, output source code based on input source code; determining an equivalency mapping between a first abstract syntax tree (AST) constructed for the input source code and a second AST constructed for the output source code; and indicating, based on the equivalency mapping, a validation result for the output source code.
Owner:INTERNATIONAL BUSINESS MACHINE CORPORATION

Similarity comparison-based large model supply chain automatic repair method and device

The invention discloses a similarity comparison-based large model supply chain automatic restoration method and device, and the method comprises the steps: firstly carrying out the semantic coding of an original vulnerability code through a pre-training model, and constructing a semantic and structure parallel dual-channel representation in combination with an abstract syntax tree and other program structures; cWE type intelligent classification is performed on vulnerabilities by using a locally deployed large language model subjected to LoRA fine tuning, and meanwhile, a zero sample semantic matching mechanism is introduced, so that the recognition capability of unknown vulnerability types is improved. And searching the closest historical case from the knowledge base through similarity vector comparison, and extracting a repair abstract to construct a model to generate a prompt. Patch codes and repair instructions are generated through a large model, automatic filing and knowledge base updating are supported, and the continuously-enhanced automatic repair capacity is achieved. The method can be widely applied to automatic vulnerability repair scenes of supply chain components such as large model plug-ins, code interfaces and dependent packages, and the safety, functionality and interpretability of code repair patches are greatly improved.
Owner:TSINGHUA UNIVERSITY

Buildless dependency fetching

Some embodiments construct a set of build dependencies for a program without a full set of build instructions. The build dependency set is constructed without piggy-backing on a build process that would produce an executable version of the program. Representations of the program's structure, such as expression types, call targets, symbol tables, abstract syntax trees, and other internal compiler data structures, are emitted to persistent non-volatile storage instead of being used only as intermediate steps for executable code generation. Security analysis can then utilize the program representations. Licensing analysis can also utilize the dependency set to identify program components and their storage locations.
Owner:MICROSOFT TECHNOLOGY LICENSING LLC

Code verification and attribution using semantic analysis

Systems and methods are provided for attributing source code, including ingesting source code from a plurality of repositories, normalizing the ingested source code using abstract syntax trees (ASTs), and converting the normalized source code into vector embeddings that represent syntactic and semantic features of the source code. Unique fingerprints are generated from the vector embeddings, the fingerprints are compared against a vector database to identify potential matches and verify code attribution, and feedback and alternative code suggestions are provided based on the comparing the fingerprints.
Owner:INTERNATIONAL BUSINESS MACHINE CORPORATION

Cross-language software vulnerability detection method and device

The invention relates to a cross-language software vulnerability detection method and device, and the method comprises the steps: carrying out the analysis of a Joern static analysis pair, carrying out the integration and semantic enhancement of an abstract syntax tree, a control flow graph and a data dependence graph, and obtaining a cross-warehouse heterogeneous code graph; obtaining cross-language intermediate representation based on a compiler framework; after the cross-language intermediate representation and the cross-warehouse heterogeneous code graph are modeled, weighted fusion is carried out through a gated cross attention mechanism, and a multi-modal data set is obtained; carrying out migration training on the multi-modal cross-language vulnerability detection model, and carrying out vulnerability detection on cross-language software to obtain a detection result; through multi-modal data fusion and modeling, in combination with cross-language intermediate representation and a cross-warehouse heterogeneous code graph, the defects of a traditional method in the aspects of cross-language generalization ability and context reasoning ability are effectively overcome; the method has the advantages that the generalization ability of cross-language vulnerability detection is improved, the false alarm rate and the missing report rate are reduced, and the comprehensive utilization effect of global structure information is enhanced.
Owner:WSGRI SMART CITY(WUHAN) ENGINEERING TECHNOLOGY CO LTD

Computing device and method for text-to-SQL semantic parsing

A computing device (800) configured to: receive (701) a database query (302) in a natural language and database information (303) comprising a schema; receive (702) a preliminary query (307) in structured query language; select (703) schema elements; select (704) examples each comprising a respective pair of natural language and structured query language queries, in dependence on respective structural similarities between the preliminary query and the structured query language query of a respective pair represented as normalized abstract syntax trees; form (705) a prompt (312) based on the selected schema elements and examples; and input (706) the prompt to a large language model (313) to form an output query (314) in structured query language. This may allow output queries to be formed using examples in the prompt that have semantic similarity with respect to the input query and the expected SQL, with the ability to support new domains with limited data.
Owner:HUAWEI TECH CO LTD +1

Homework correcting method based on image recognition

The invention discloses a homework correction method based on image recognition, relates to the technical field of homework correction, and comprises the following steps: breaking through the limitation of the existing homework correction technology on surface processing of consecutive characters, and bringing consecutive deformation into an expression intention analysis framework through linkage of stroke topological characteristics and semantic compensation; metaphor words intensified by students deliberately, such as a s with lengthened strokes, can be recognized, and the rhetorical structure is prevented from being misjudged as word use errors; the method comprises the following steps of: forcibly merging and eliminating the segmentation of physical paging on a long rhetorical sentence through a cross-row syntax tree, and ensuring that a not only... but also type emphasis sentence is completely analyzed; a dynamic visualization mechanism is adopted to convert an abstract grammar rule into a perceptible scene: a time axis animation of a tense error visually presents dislocation of an action and a time node, and a depth rhetorical analysis triggered by a hand-drawn wavy line accurately marks a metaphor ontology-metaphor body mapping relationship, so that students can understand the essence of the error at a glance.
Owner:BEIJING CETEN EDUCATION TECH GRP CO LTD

Program dependent component amalgamation

Some embodiments construct a set of build dependencies for a program without access to a full set of build instructions. When multiple clashing name resolutions are identified for a particular dependency, a union of the alternative versions is formed. Intermediate representations of the union of program versions, such as symbol tables, abstract syntax trees, and other internal compiler data structures, are emitted to persistent non-volatile storage, instead of using a single resolution to create temporary intermediate data to build an executable program. Security analysis and licensing analysis utilize the persisted program representations to analyze the union of multiple overlapping but different versions of the program.
Owner:MICROSOFT TECHNOLOGY LICENSING LLC

A homework grading method based on image recognition

The present invention discloses a homework grading method based on image recognition, which relates to the technical field of homework grading. The present invention comprises the following steps: breaking through the surface processing limitations of existing homework grading technologies on cursive characters, integrating cursive deformation into an expression intention analysis framework through the linkage of stroke topological features and semantic compensation, and being able to identify metaphors deliberately emphasized by students, such as "as" with elongated strokes, to avoid misjudging rhetorical structures as word errors; eliminating the fragmentation of long rhetorical sentences by physical paging through forced merging of cross-line syntax trees, ensuring complete parsing of emphasized sentences such as "not only...but also"; and converting abstract grammatical rules into perceptible scenarios through a dynamic visualization mechanism: a timeline animation of tense errors intuitively presents the misalignment of actions and time nodes, and in-depth rhetorical analysis triggered by hand-drawn wavy lines accurately marks the metaphor subject-metaphor mapping relationship, enabling students to understand the essence of the error at a glance.
Owner:BEIJING CETEN EDUCATION TECH GRP CO LTD

Modular design of radio resource control for radio access technology

Various aspects of the present disclosure relate to a User Equipment (UE) configured to or operable to generate a first message according to an Abstract Syntax Notation One (ASN.1) module and one or more ASN.1 sub-modules, wherein the ASN.1 module comprises information irrespective of features applicable to the UE, and wherein the one or more ASN.1 sub-modules comprises information respective to one or more features applicable to the UE, transmit, to a network entity, the first message, wherein the first message includes information respective to the one or more features applicable to the UE and excludes other information respective to one or more features inapplicable to the UE and receive, from the network entity, a second message based at least in part on the transmitted first message.
Owner:LENOVO UNITED STATES INC

A code security scanning method

PendingCN122333483AData setAlgorithm
This invention discloses a code security scanning method, comprising: project file filtering: filtering project files in a source code repository according to a preset filtering strategy to generate a set of files to be scanned; scan scheduling: scheduling a first scanning tool and / or a second scanning tool to perform code security scanning on the set of files to be scanned according to the scan mode selected by the user, and obtaining a set of scan alert results, wherein the first scanning tool is a static scanning tool based on regular expressions or abstract syntax trees, and the second scanning tool is a deep scanning tool based on graph analysis; result standardization: deduplicating the scan alert result set to obtain a standardized scan alert dataset; report generation: generating a standardized scan report based on the standardized scan alert dataset. By scheduling the corresponding scanning tool to perform code security scanning on the files to be scanned according to the scan mode selected by the user, multiple scanning modes are provided to improve scanning accuracy.
Owner:深圳市和讯华谷信息技术有限公司

Service code version difference identification method and system based on syntax tree structure features

The invention discloses a syntax tree structure feature-based service code version difference identification method and system, and belongs to the technical field of computers, and the key points of the technical scheme are that the method comprises the following steps: obtaining a first syntax tree and a second syntax tree, the first syntax tree and the second syntax tree are abstract syntax trees corresponding to two service codes needing difference comparison; dividing the first syntax tree into a plurality of node clusters according to the structural features of the first syntax tree; identifying difference nodes in the second syntax tree according to the function, hierarchical relationship and data input node corresponding to each father node in the plurality of node clusters, dividing the syntax tree into the plurality of node clusters, performing difference identification according to each father node in the node clusters, and further selecting comparison nodes according to the father nodes. That is to say, the comparison range is further reduced, finally the difference nodes are identified according to the comparison nodes, the limitation of global comparison is avoided, and the difference nodes are accurately determined while the comparison amount is reduced.
Owner:JIANGSU GUOXIN DIGITAL INTELLIGENCE SERVICE CO LTD

Structured query statement similarity detection method and apparatus, and device

A structured query statement similarity detection method, a device and a medium are provided. The method includes: acquiring first and second structured query statements, and constructing corresponding first and second abstract syntax trees, a correlation degree between the root node in the abstract syntax tree and the query result of the statement being higher than a correlation degree between other nodes and the query result of the statement; traversing a node in the first abstract syntax tree, matching the traversed node with a node at a same level in the second abstract syntax tree, and obtaining a matching result of the node; and determining a statement similarity between the first structured query statement and the second structured query statement based on a matching result of a root node in the first abstract syntax tree, a matching result of a child node of the root node, and their corresponding weights.
Owner:BEIJING VOLCANO ENGINE TECH CO LTD

Relationship-enhanced retrieval method, device, and readable medium based on graph database

The present invention discloses a relation-enhanced retrieval method, device and readable medium based on a graph database. The method obtains a natural language question and performs word segmentation processing to obtain a word sequence, and uses a pre-trained language model to generate word vector features of the words in the question, word vector features of table names and word vector features of column names; a graph database is constructed based on the word vector features of the table names and the word vector features of the column names, and a self-attention mechanism is used to generate deep relation fusion features based on the word vector features of the words in the question and the graph database; the word vector features of the words in the question, the word vector features of the table names, the word vector features of the column names and the deep relation fusion features are spliced ​​to obtain a joint feature vector, and the joint feature vector is input into a trained Text2AQL model to obtain a syntax tree. According to the syntax tree, an AQL query statement is obtained by using the abstract syntax description language specification mapping, which can reduce the difficulty of interaction between users and the graph database and improve the user experience.
Owner:XIAMEN MEIYA PICO INFORMATION CO LTD

A private intelligent code collaboration optimization method and system based on graph search

The application provides a private intelligent code collaboration optimization method and system based on graph search, and relates to the technical field of intelligent auxiliary tools for software engineering, which comprises the following steps: obtaining source code files and running log data of a private project; performing syntax tree analysis on the source code files through a Tree-sitter parser to generate corresponding abstract syntax trees; constructing a code knowledge graph by analyzing function call relationships, inheritance relationships and module dependency relationships; monitoring changes in project files in the code knowledge graph through a code change event processor and updating the code knowledge graph in real time when the files are changed; establishing an association relationship between the running log data and corresponding function nodes in the code knowledge graph; parsing natural language questions of developers into Cypher query statements through an intelligent Agent; obtaining query results from a graph database; and performing format processing on the query results to generate final results.
Owner:QINGTA TECH

Flow code debugging method, system and device, and storage medium

The application discloses a flow code debugging method, system and device and a storage medium, and relates to the technical field of computers. The flow code debugging method comprises the following steps: parsing flow code to be debugged through an abstract syntax analyzer to obtain component code; traversing the component code and converting the component code into a plurality of generators to obtain a generator tree; obtaining a debugging instruction and determining a first generator tree to be debugged and a start node according to the debugging instruction; starting and traversing the first generator tree to be debugged; when the start node is traversed, obtaining and loading context information of a previous run on the first generator tree, and running code corresponding to a generator where the start node is located. The application can reduce the time cost of flow code debugging.
Owner:GUANGZHOU YUNDI TECH CO LTD

Structured query language similarity detection method, device and equipment

The application discloses a structured query statement similarity detection method, device and equipment, obtains a first structured query statement and a second structured query statement, and constructs corresponding first and second abstract syntax trees. The correlation degree of the root node in the abstract syntax tree with the query result of the statement is higher than that of other nodes with the query result of the statement. The nodes in the first abstract syntax tree are traversed, the traversed nodes are matched with nodes in the same level in the second abstract syntax tree, and a matching result of the nodes is obtained, which indicates whether there is a node in the same level in the second abstract syntax tree matched with the node in the first abstract syntax tree. The statement similarity of the first structured query statement and the second structured query statement is determined in combination with the matching result of the root node in the first abstract syntax tree, the matching result of the child nodes of the root node and respective corresponding weights. In this way, the statement does not need to be executed in cooperation with a database, and the detection cost is lower.
Owner:BEIJING VOLCANO ENGINE TECH CO LTD

High-performance cross-module routing configuration method, system and equipment based on Gawan system

The invention relates to a high-performance cross-module routing configuration method, system and equipment based on a swan monk system. The method comprises the following steps: acquiring a routing folder relative address sent by a developer through a routing decorator; obtaining an absolute path address of the routing file folder in the computer based on the relative address of the routing file folder, determining all file paths of all routing files in the routing file folder according to the absolute path address of the routing file folder, and determining all file paths of all routing files in the routing file folder according to all file paths of all routing files. Correspondingly analyzing the text content of each routing file into an abstract syntax tree; and calculating a routing path and a routing method name by using all the abstract syntax trees, generating a routing configuration function and a routing configuration file according to the routing path and the routing method name, and performing routing configuration. The problem that developers need to repeatedly write a large number of codes of the same structure in order to achieve the routing jump function between the modules in the development process of the Nan Mongolian app is solved, and the development efficiency and the routing configuration accuracy are improved.
Owner:CHONGQING CHANGAN AUTOMOBILE CO LTD

Lower layer positioning measurement report

A method of transmitting measurement information from a user equipment includes measuring a reference signal, generating a measurement report payload based on the measurement of the reference signal, encoding the measurement report payload according to ASN.1 (Abstract Syntax Notation One) encoding and according to a lower layer protocol to generate an encoded payload, the lower layer protocol being a physical layer protocol or a MAC layer (Media Access Control layer) protocol, and transmitting a lower layer message from the user equipment to a network entity based on the encoded payload.
Owner:QUALCOMM INC

Code conversion method and device, medium, electronic equipment and program product

The invention discloses a code conversion method and device, a medium, electronic equipment and a program product, and relates to the technical field of computers, and the method comprises the following steps: obtaining a source code file, and processing the source code file to obtain a plurality of abstract syntax trees; traversing each node in the abstract syntax tree according to a pre-registered hook function, and mounting a target processing function for a target node meeting a specified condition; printing operation is executed on the abstract syntax tree on which the target processing function is mounted, a target file is obtained, and the printing operation is used for executing the target processing function mounted on the abstract syntax tree. According to the method, the mounting operation and the printing operation are executed on the abstract syntax tree obtained through analysis, so that the code conversion efficiency can be improved.
Owner:BEIJING ZITIAO NETWORK TECH CO LTD

A front-end canvas-based communication service logic arrangement and abstract syntax tree conversion method and device

This application provides a method and apparatus for orchestrating communication service logic and converting abstract syntax trees based on a front-end canvas. The method includes: scanning the visualization process setting information in the front-end canvas and extracting the node identifier of each node in the visualization process; verifying the branch processing formula added to the branch conditions of the visualization process based on the node identifier to determine that the branch processing formula satisfies the syntax rules; verifying the data structure integrity and validity of the visualization process, so as to generate the sequence flow, branch flow, and loop structure in the abstract syntax tree based on the verified visualization process and the branch processing formula that satisfies the syntax rules; persisting the visualization data in the front-end canvas as front-end data, and simultaneously persisting the sequence flow, branch flow, and loop structure in the abstract syntax tree as the target abstract syntax tree corresponding to the visualization process.
Owner:XIAMEN XINGZONG DIGITAL TECH CO LTD

A method for converting SLIM models to XSAP models based on ATL

This invention discloses an ATL-based method for converting SLIM models to XSAP models, comprising: designing a SLIM metamodel and an XSAP metamodel according to predefined model conversion rules, and obtaining the abstract syntactic structures of the SLIM metamodel and the XSAP metamodel; designing a model conversion algorithm based on ATL, utilizing the metamodel and abstract syntactic structures to convert the SLIM model to an XSAP model, obtaining a converted XML-formatted XSAP model; and designing a verification algorithm to verify the XSAP model, obtaining a complete SMV-formatted XSAP model. This invention can directly convert safety-critical systems from SLIM models to XSAP models and perform verification analysis on the converted XSAP models. The conversion algorithm and model verification algorithm proposed in this invention have universality.
Owner:NANJING UNIV OF AERONAUTICS & ASTRONAUTICS

A method, device, and medium for constructing a C++ code knowledge base

The embodiments of this specification disclose a method, device, and medium for constructing a C++ code knowledge base, which relates to the technical field of knowledge graphs and is used to solve the problem of incomplete and inaccurate information in existing knowledge bases. The method includes: constructing a compilation configuration file with detailed compilation parameters based on the C++ project configuration file; parsing the file elements of the compilation configuration file based on a preset script parsing engine, and preprocessing the C++ project source files to obtain processed C++ project files, so as to generate compilation units based on the file elements; obtaining the dependency information of the C++ project files based on the compilation units, and obtaining the abstract syntax trees of the C++ project files for node filtering, so as to map and store the filtered nodes and the dependency information into the corresponding semantic mapping tables to achieve the first persistent processing; determining the association relationships of the C++ project files based on each semantic mapping table, and storing each association relationship into a preset relational database to achieve the second persistent processing to obtain a C++ code knowledge base.
Owner:SHANDONG HUAYUN 3D TECH CO LTD

Verification rule updating method and device, electronic equipment and medium

The embodiment of the invention provides a verification rule updating method and device, electronic equipment and a medium, and belongs to the technical field of finance. The method comprises the following steps: monitoring a rule updating dynamic state of a rule issuing platform, and acquiring rule updating information under the condition that the rule issuing platform performs rule updating; analyzing the rule update information by using the trained semantic analysis model to obtain a target verification rule; converting the target verification rule into a target abstract syntax tree; the target abstract syntax tree is stored in a verification rule base, the verification rule base is used for storing multiple verification rules represented by the abstract syntax tree, and the multiple verification rules are used for verifying the to-be-verified information. Therefore, the latest supervision standard can be synchronized in real time without manual coding or configuration, the rule response time is shortened, the quick response capability to the change of the supervision policy is improved, and the verification rule is obtained and updated in time.
Owner:CHINA PING AN LIFE INSURANCE CO LTD

Methods, apparatus, electronic devices and storage media for handling redundant code

This invention provides a method, apparatus, electronic device, and storage medium for processing redundant code. The method includes: acquiring target files, the target files including HTML type files and CSS type files; generating an abstract syntax tree corresponding to the target files based on the file content of the target files; determining a set of HTML style class names corresponding to the HTML type files and a set of CSS style class names corresponding to the CSS type files based on the abstract syntax trees corresponding to each target file; filtering style class names based on the set of HTML style class names and the set of CSS style class names to obtain a style class name deletion set; and deleting the CSS code corresponding to the style class name deletion set from the CSS type files.
Owner:NETEASE (HANGZHOU) NETWORK CO LTD

A data processing method, apparatus, and storage medium

Embodiments of the present application disclose a data processing method, apparatus, and storage medium. By reading a preset framework template file and decompressing it, a directory structure hierarchy is generated; a file list of multiple interface definition files is obtained, and the interface definition files are cyclically parsed according to the file list to obtain the first abstract syntax trees of the multiple interface definition files; service information and interface attribute information in the interface definition files are obtained according to the first abstract syntax trees; framework code files are generated based on the service information, interface attribute information, and a preset code template file, and the framework code files are moved to the corresponding target directories in the directory structure hierarchy. In this way, the operation of generating framework code files multiple times for multiple interface definition files is avoided, and the development efficiency is improved.
Owner:TENCENT TECHNOLOGY (SHENZHEN) CO LTD

Cross-language compilation optimization method based on graph neural network

This invention discloses a cross-language compiler optimization method based on graph neural networks. The method uses a UAST module to map the abstract syntax trees (ASTs) of different programming languages ​​to a shared semantic space. The FUAST module then fuses control flow and data flow information to form a flow-enhanced AST representation. The Sub2Vec module extracts key optimization subgraphs such as control flow, function inlining, and loops, and models their local structure and global relationships. The IRGAT module uses a sparse attention mechanism after structural pruning to aggregate features from the subgraphs, generating graph-enhanced sequence vectors. Finally, the SALT module, based on a lightweight Transformer architecture, embeds IRGAT as a structure-aware component, which processes and outputs optimization decisions through a feedforward network. This invention achieves unified semantic understanding, dynamic information fusion, and key region focusing for multi-language programs, and possesses compiler platform versatility.
Owner:NANJING UNIV OF INFORMATION SCI & TECH

An AI-based vulnerability repair rule generation method and related device

The application discloses an AI-based vulnerability repair rule generation method and related equipment, and relates to the field of digital data processing. A computer device performs double analysis on vulnerability code fragments and vulnerability description texts through a large language model, constructs double representations of abstract syntax trees and semantic graphs, aligns the semantic graphs and the abstract syntax trees in a cross-modal manner, and obtains a vulnerability context relationship matrix. The computer device traverses the abstract syntax trees, extracts vulnerability code feature vectors, and determines multiple repair modes according to vulnerability type identifiers. The computer device calculates the similarity between the vulnerability code feature vectors and multiple context constraint conditions, filters target repair modes, verifies the feasibility of the target repair modes based on the vulnerability context relationship matrix, determines an optimal repair mode, and generates a repair rule. The double analysis and cross-modal alignment greatly improve the accuracy and reliability of vulnerability repair rule generation.
Owner:HANGZHOU XIAODAO TECH CO LTD