SHARE
Facebook X Pinterest WhatsApp

Microsoft: Our AI 99% Accurate At Detecting Security Flaws

thumbnail
Microsoft: Our AI 99% Accurate At Detecting Security Flaws

Security concept: blue opened padlock on digital background, 3d render

Microsoft found that pairing machine learning models with security experts significantly improves the identification and classification of security bugs.

Written By
thumbnail
David Curry
David Curry
May 4, 2020

To cope with the overwhelming amount of bugs developers create, Microsoft has built a machine learning model to correctly distinguish and prioritize security-related bugs.

Microsoft developers create about 30,000 bugs a month, but the vast majority are not security-related. However, there are ones that require immediate action, which is why Microsoft is applying machine learning, to reduce the time it takes to identify these bugs.

SEE ALSO: Microsoft Launches $40 Million AI For Health Program

“Too often, engineers waste time on false positives or miss a critical security vulnerability that has been misclassified,” said Scott Christiansen and Mayana Pereira in a company blog post.

“To tackle this problem data science and security teams came together to explore how machine learning could help. We discovered that by pairing machine learning models with security experts, we can significantly improve the identification and classification of security bugs.”

According to Microsoft, the model is already highly accurate. It has 99 percent accuracy at distinguishing between non-security and security bugs, and 97 percent accuracy at identifying critical security bugs.

To train the model, Microsoft fed it 13 million work items and bugs it has collected since 2001. It then had data scientists and security researchers fine-tune the model until it was able to identify the bugs as accurately as a security expert.

Microsoft will continue to use security experts to ensure the model does not miss any unfamiliar bugs. They will also approve all changes or additions data scientists feed into the model.

It will share the model’s methodology on Github in the coming months.

thumbnail
David Curry

David is a technology writer with several years experience covering all aspects of IoT, from technology to networks to security.

Recommended for you...

The State of the Neoclouds Market
Why Agentic AI Projects Are Getting Canceled (And How You Can Save Yours)
Akhil Verghese
Mar 2, 2026
Will Your Organization Take the Quantum Leap in 2026? Read This First.
David McNeely
Feb 26, 2026
IBM’s New Acquisition Highlights Organizations Aren’t Ready for Real-Time
Max Vermeir
Feb 24, 2026

Featured Resources from Cloud Data Insights

The AI That Actually Scales Is Boring. That’s the Point.
Jared Coyle
Mar 9, 2026
Real-time Analytics News for the Week Ending March 7
The State of the Neoclouds Market
What High-Performing Manufacturers Do Differently

Property of TechnologyAdvice. © 2026 TechnologyAdvice. All Rights Reserved

Advertiser Disclosure: Some of the products that appear on this site are from companies from which TechnologyAdvice receives compensation. This compensation may impact how and where products appear on this site including, for example, the order in which they appear. TechnologyAdvice does not include all companies or all types of products available in the marketplace.