Master's Thesis

Evaluating Reliability of Static Analysis Results Using Machine Learning

Thesis Details

Author:  Bc. Tomáš Beránek

Language:  EN

Category:  Artificial Intelligence

Company:  Red Hat Czech s.r.o.

Supervisor:  prof. Ing. Tomáš Vojnar, Ph.D.

Consultants:  Mgr. Marek Grác, Ph.D., Ing. Viktor Malík

Specification

1. Learn about the Infer tool for static analysis and finding bugs in software.
2. Explore the possibilities of using machine learning in the context of source code analysis.
3. Get a dataset containing the bugs found by Infer, with information on whether they are real bugs or not.
4. Design and implement a machine learning based approach (using the dataset obtained in Section 3) that will be able to automatically determine whether a bug found by Infer represents a real bug or not.
5. Evaluate the quality of your solution on at least two different open-source projects.
6. Summarize and discuss the results obtained and their possible extensions.

Literature

• Facebook Infer
• Cao, Sicong, et al. "Bgnn4vd: constructing bidirectional graph neural-network for vulnerability detection." Information and Software Technology 136 (2021): 106576.
• Y. Zheng et al., "D2A: A Dataset Built for AI-Based Vulnerability Detection Methods Using Differential Analysis," 2021 IEEE/ACM 43rd International Conference on Software Engineering: Software Engineering in Practice (ICSE-SEIP), 2021, pp. 111-120.