Methods, systems, apparatuses, and computer-readable media for detecting vulnerabilities in computer code

A non-transitory computer-readable medium comprising computer instructions stored thereon for detecting vulnerabilities in computer code, wherein the computer instructions, when executed by one or more processors, causes the one or more processors to perform a method comprising:

• calculating a function change log of a section of the computer code, the function change log comprising at least one intermediate change between a first version of the section of computer code and a second version of the section of computer code, the section of the computer code being similar to a computer-code vulnerability, and the first version is a version prior to the second version;
• and
• determining whether the section of the computer code comprises the computer-code vulnerability based on a similarity between the function change log and a fix change log, the fix change log comprising at least one code change for fixing the computer-code vulnerability.

A computing device comprising one or more processors operable to perform a method for detecting vulnerabilities in computer code, wherein the method comprises:

• calculating a function change log of a section of the computer code, the function change log comprising at least one intermediate change between a first version of the section of computer code and a second version of the section of computer code, the section of the computer code being similar to a computer-code vulnerability, and the first version is a version prior to the second version;
• and
• determining whether the section of the computer code comprises the computer-code vulnerability based on a similarity between the function change log and a fix change log, the fix change log comprising at least one code change for fixing the computer-code vulnerability.