Skip to content

Google DeepMind's CodeMender Automates Software Security Fixes

CodeMender's AI is transforming software security. It's already patched dozens of open-source projects, with human review ensuring accuracy before integration.

In this image we can see there is a tool box with so many tools in it.
In this image we can see there is a tool box with so many tools in it.

Google DeepMind's CodeMender Automates Software Security Fixes

Google DeepMind's CodeMender is making waves in the software development world. Since its launch, this AI-powered tool has offered over 70 security fixes to open-source projects, aiming to automate the process of identifying and rectifying vulnerabilities.

CodeMender employs a blend of techniques to achieve this, including static and dynamic code analysis, differential testing, fuzzing, and SMT solvers. In a recent test, it pinpointed the cause of a heap buffer overflow in XML code and adjusted the lifecycle of C objects to prevent memory errors.

Currently, all suggestions made by CodeMender are reviewed by human researchers before integration. However, the ultimate goal is to make CodeMender available as a tool for developers to use directly, potentially revolutionising the way software bugs are addressed.

CodeMender, developed by Google, has already proven its worth by providing dozens of patches to open-source projects. By proactively securing existing code and using compiler checks against memory access errors, it's poised to become an invaluable asset in the software development landscape.

Read also:

Latest