Research on code entity recognition matching technology

Abstract

Nowadays, in the process of program development, it is unavoidable to use third-party code repositories, but the safety of third-party code is not guaranteed. Therefore, the research of software composition analysis (SCA) is very important. In this paper, we first proposed the value dependency analysis technology for feature extraction and entity recognition of code. From the level of functions, classes, files, packages, and projects, the normalized extraction of the intermediate representation of open-source code. In view of the insufficient accuracy of the existing models based on text, identification, syntax, and other analysis technologies, the value dependency analysis technology is used for the first time to build a more accurate normalized model of control flow and data flow, effectively improving the accuracy of feature extraction and anti-aliasing.