paperbot · PL 论文追踪

全部论文 待读 收藏

P2 You see what I want you to see: poisoning vulnerabilities in neural code search

你看到的是我想让你看到的:神经代码搜索中的投毒漏洞
FSE Proceedings of the 30th ACM Joint European Software Engineering Conference and Symposium on the Foundations of Software Engineering2022匹配度 3/10 · 该论文研究神经代码搜索模型的投毒攻击与鲁棒性,属于ML+PL/代码智能安全方向,但与用户核心关注的静态分析、LLM/Agent改进程序分析、浮点程序分析及贝叶斯程序分析并无直接关联。引用 59 inbox
Yao Wan, Shijie Zhang, Hongyu Zhang, Yulei Sui, Guandong Xu, Dezhong Yao, Hai Jin, Lichao Sun
crossref: 2026-09-12

AI 速览

一句话:揭示神经代码搜索模型对投毒攻击的脆弱性,呼吁关注其鲁棒性。

论文背景是:基于自然语言查询从开源软件仓库中搜索并复用代码片段,能显著提升编程效率,而基于深度学习的代码搜索方法近年日益流行。尽管训练准确率已有长足进步,这些模型的鲁棒性此前却很少受到关注。标题进一步指向神经代码搜索中的投毒漏洞(poisoning vulnerabilities)。因此,本文关注的核心问题是:神经代码搜索模型在恶意投毒场景下是否可靠,以及这类脆弱性为何值得重视。由于所给摘要仅提供背景与问题动机,未展开具体攻击构造、防御机制或实验评估细节,无法从摘要进一步概括方法与关键结果。

问题
神经代码搜索模型虽被广泛使用,但其鲁棒性、特别是对投毒攻击的脆弱性尚未得到充分关注。
方法
从标题看,论文研究神经代码搜索中的投毒漏洞;但所给摘要未展开具体攻击或防御方法。
评估
摘要未报告具体评估方式与结果,仅指出该类模型的鲁棒性问题此前未受到足够重视。
原文摘要(Abstract)

Searching and reusing code snippets from open-source software repositories based on natural-language queries can greatly improve programming productivity.Recently, deep-learning-based approaches have become increasingly popular for code search. Despite substantial progress in training accurate models of code search, the robustness of these models has received little attention so far.

链接与引用

DOI 原文 ·

BibTeX
@inproceedings{paperbot7081,
  title = {You see what I want you to see: poisoning vulnerabilities in neural code search},
  author = {Yao Wan and Shijie Zhang and Hongyu Zhang and Yulei Sui and Guandong Xu and Dezhong Yao and Hai Jin and Lichao Sun},
  booktitle = {FSE},
  year = {2022},
  doi = {10.1145/3540250.3549153}
}