Cross-platform software vulnerability detection using Vulnerascope-X with Word2Vec Node2Vec and RCGO optimized SVM

Abstract

To increase program dependability and reduce maintenance expenses, software defect prediction is essential. For software vulnerability study across platforms, this paper presents a state-of-the-art methodology that makes use of a unique synthetic dataset called VulneraScope-X. Utilising synthetic CVE intelligence, this dataset incorporates a wealth of static, syntactic, and semantic information. This work employs an array of pre-processing methods, such as min-max normalisation, Word2Vec, Node2Vec, Synthetic Minority Oversampling Technique (SMOTE) for class balance, to deal with complexity and diversity of the features. The recently suggested Running City Game Optimiser (RCGO) outperformed state-of-the-art metaheuristics in feature selection while simultaneously lowering dimensionality and keeping predictive characteristics. With help of the features that were chosen, a Support Vector Machine (SVM) classifier was trained. The hyperparameters of this classifier were adjusted using Grid Search. Outperforming more conventional classifiers like Naive Bayes, MLP, and KNN, the model produced remarkable results with a 94.25% accuracy rate, 93.90% precision rate, 94.10% recall rate, and AUC-ROC of 0.962. In terms of accuracy and execution time, the RCGO algorithm outperformed other optimisation algorithms such as GA, GWO, CRO, and BWO. This scheme provides reproducible and scalable methodologies for software security evaluation in addition to demonstrating a high-performing pipeline for defect prediction. According to the findings, VulneraScope-X greatly improve cross-platform defect detection when combined with topological and semantic embeddings. When applied to large-scale, heterogeneous software organizations, this method demonstrates promise for vulnerability triaging and safe software development.