Intelligent and Converged Networks (Sep 2024)

Automated and controlled patch generation for enhanced fixing of communication software vulnerabilities

  • Shuo Feng,
  • Shuai Yuan,
  • Zhitao Guan,
  • Xiaojiang Du

DOI
https://doi.org/10.23919/ICN.2024.0016
Journal volume & issue
Vol. 5, no. 3
pp. 222 – 236

Abstract

Read online

Software is a crucial component in the communication systems, and its security is of paramount importance. However, it is susceptible to different types of attacks due to potential vulnerabilities. Meanwhile, significant time and effort is required to fix such vulnerabilities. We propose an automated program repair method based on controlled text generation techniques. Specifically, we utilize a fine-tuned language model for patch generation and introduce a discriminator to evaluate the generation process, selecting results that contribute most to vulnerability fixes. Additionally, we perform static syntax analysis to expedite the patch verification process. The effectiveness of the proposed approach is validated using QuixBugs and Defects4J datasets, demonstrating significant improvements in generating correct patches compared to other existing methods.

Keywords