IJEM Vol. 16, No. 3, 8 Jun. 2026
Cover page and Table of Contents: PDF (size: 2326KB)
PDF (2326KB), PP.79-99
Views: 0 Downloads: 0
Vulnerability detection, static code metrics, dependency analysis, domain adaptation, cross-domain
Vulnerability detection is a preventive approach for performing rigorous maintenance on software projects. In cross-domain settings, in-domain methods cannot achieve high VD performance due to differences in data distribution and labeling. Existing cross-domain VD methods suffer from the following limitations: 1) They require matrix trans-formation to meet sequence embedding criteria, 2) Feature matching relies on effort-intensive graph-based analysis that results in high computational cost, 3) Each cross-domain solver is generally designed for a specific programming lan-guage, preventing a global domain adapter. To address these problems, we present VulSD (Vulnerability detector using Static and Dynamic analysis), a cross-domain approach based on static code metrics and dependency analysis. Unlike existing methods, VulSD combines an embedding matrix produced by Word2Vec with static and dynamic code features. Additionally, VulSD employs Spearman analysis to convert constant features for compatibility with the training process. Finally, a deep learning model is established using the R deepnet library. VulSD achieves an average accuracy of 84.2% on large benchmark datasets (DiverseVul, Devign) and 70-77% on real-world project datasets. Performance varies across targets, with best results on C/C++ benchmarks and more modest gains on mixed-language and smaller project datasets.
Muhammed Maruf Ozturk, "VulSD: Cross-domain Vulnerability Detection Using Static code Metrics and Dependency Analysis for C, C#, and Java", International Journal of Engineering and Manufacturing (IJEM), Vol.16, No.3, pp.79-99, 2026. DOI:10.5815/ijem.2026.03.06
[1]Rafiq Ahmad Khan, Ismail Keshta, Hussein A Al Hashimi, Alaa Omran Almagrabi, Hathal S Alwageed, and Musaad Alzahrani. A fuzzy-ahp decision-making framework for optimizing software maintenance and deployment in infor-mation security systems. Journal of Software: Evolution and Process, 37(1):e2758, 2025, https://doi.org/10.1002/smr.2758.
[2]Adriana Meza Soria, Taylor Lopez, Negin Mashhadi, Andre´ van der Hoek, Elizabeth Seero, Emily Evans, and Janet Burge. Characterizing software maintenance meetings: Information shared, discussion outcomes, and information captured. In Proceedings - International Conference on Software Engineering. IEEE Computer Society, 2 2024, https://doi.org/10.1145/3597503.3623330
[3]Shariq Aziz Butt, Acosta-Coll Melisa, and Sanjay Misra. Software product maintenance: A case study. In Interna-tional Conference on Computer Information Systems and Industrial Management, pages 81–92. Springer, 2022, https://doi.org/10.1007/978-3-031-10539-5_6.
[4]Aidan ZH Yang, Claire Le Goues, Ruben Martins, and Vincent Hellendoorn. Large language models for test-free fault localization. In Proceedings of the 46th IEEE/ACM International Conference on Software Engineering, pages 1–12, 2024, https://doi.org/10.1145/3597503.362334.
[5]Sungmin Kang, Gabin An, and Shin Yoo. A quantitative and qualitative evaluation of llm-based explainable fault localization. Proceedings of the ACM on Software Engineering, 1(FSE):1424–1446, 2024, https://doi.org/10.1145/3660771.
[6]Davide Baroffio, Federico Reghenzani, and William Fornaciari. Enhanced compiler technology for software-based hardware fault detection. ACM Transactions on Design Automation of Electronic Systems, 29(5):1–23, 2024, https://doi.org/10.1145/3660524.
[7]Hangchang Zhang, Minhao Gu, and Shaoshuai Fan. Fault detection and diagnosis software of lhaaso. IEEE Trans-actions on Nuclear Science, 2024, https://doi.org/10.1109/TNS.2024.3470329.
[8]Jingyu Wang, Yuewei Li, Qi Qi, Yan Lu, and Bo Wu. Multilayered fault detection and localization with transformer for microservice systems. IEEE Transactions on Reliability, 73(3):1502–1515, 2024, https://doi.org/10.1109/TR.2024.3356717.
[9]Ruchika Malhotra, Anjali Bansal, and Marouane Kessentini. A systematic literature review on maintenance of software containers. ACM Computing Surveys, 56(8):1–38, 2024, https://doi.org/10.1145/3645092.
[10]Paulo Souza, Tiago Ferreto, and Rodrigo Calheiros. Maintenance operations on cloud, edge, and iot environments: Taxonomy, survey, and research challenges. ACM Computing Surveys, 56(10):1–38, 2024, https://doi.org/10.1145/3659097.
[11]Jiachi Chen, Xin Xia, David Lo, John Grundy, and Xiaohu Yang. Maintenance-related concerns for post-deployed ethereum smart contract development: issues, techniques, and future challenges. Empirical Software Engineering, 26(6):117, 2021, https://doi.org/10.1007/s10664-021-10018-0.
[12]John Spray, Roopak Sinha, Arnab Sen, and Xingbin Cheng. Building maintainable software using abstraction layering. IEEE Transactions on Software Engineering, 48(11):4397–4410, 2021, https://doi.org/10.1109/TSE.2021.3119012.
[13]Bo Liu, Yanjie Jiang, Yuxia Zhang, Nan Niu, Guangjie Li, and Hui Liu. Exploring the potential of general purpose llms in automated software refactoring: an empirical study. Automated Software Engineering, 32(1):26, 2025, https://doi.org/10.1007/s10515-025-00500-0.
[14]T Pandiyavathi and B Sivakumar. Software refactoring network: An improved software refactoring prediction framework using hybrid networking-based deep learning approach. Journal of Software: Evolution and Process, 37(2):e2734, 2025.
[15]Somayeh Kalhor, Mohammad Reza Keyvanpour, and Afshin Salajegheh. A systematic review of refactoring oppor-tunities by software antipattern detection. Automated Software Engineering, 31(2):42, 2024, https://doi.org/10.1007/s10515-024-00443-y.
[16]Serhiy O Semerikov, Andrey Kupin, Ivan Marynych, and Anton Makohonov. Collection data and visualization preventive maintenance schedule. In Proceedings of the 8th International Conference on Computational Linguistics and Intelligent Systems. Lviv, Ukraine, April 12-13, 2024, volume 3, pages 157–168. CEUR Workshop Proceedings, 2024.
[17]Chong Chen, Jianzhong Su, Jiachi Chen, Yanlin Wang, Tingting Bi, Jianxing Yu, Yanli Wang, Xingwei Lin, Ting Chen, and Zibin Zheng. When chatgpt meets smart contract vulnerability detection: How far are we? ACM Transactions on Software Engineering and Methodology, 34(4):1–30, 2025, https://doi.org/10.1145/3702973.
[18]Aleksei Shestov, Rodion Levichev, Ravil Mussabayev, Evgeny Maslov, Pavel Zadorozhny, Anton Cheshkov, Rustam Mussabayev, Alymzhan Toleu, Gulmira Tolegen, and Alexander Krassovitskiy. Finetuning large language models for vulnerability detection. IEEE Access, 2025, https://doi.org/10.1109/ACCESS.2025.3546700.
[19]Emanuele Iannone, Roberta Guadagni, Filomena Ferrucci, Andrea De Lucia, and Fabio Palomba. The secret life of software vulnerabilities: A large-scale empirical study. IEEE Transactions on Software Engineering, 49(1):44–63, 2022, https://doi.org/10.1109/TSE.2022.3140868.
[20]Zimin Chen, Steve Kommrusch, and Martin Monperrus. Neural transfer learning for repairing security vulnerabilities in c code. IEEE Transactions on Software Engineering, 49(1):147–165, 2022, https://doi.org/10.1109/TSE.2022.3147265.
[21]Jianzhong Su, Hong-Ning Dai, Lingjun Zhao, Zibin Zheng, and Xiapu Luo. Effectively generating vulnerable transaction sequences in smart contracts with reinforcement learning-guided fuzzing. In Proceedings of the 37th IEEE/ACM International Conference on Automated Software Engineering, pages 1–12, 2022, https://doi.org/10.1145/3551349.3560429.
[22]Bing Zhang, Jingyue Li, Jiadong Ren, and Guoyan Huang. Efficiency and effectiveness of web application vulnera-bility detection approaches: A review. ACM Computing Surveys (CSUR), 54(9):1–35, 2021, https://doi.org/10.1145/3474553.
[23]Luciano Sampaio and Alessandro Garcia. Exploring context-sensitive data flow analysis for early vulnerability detection. Journal of Systems and Software, 113:337–361, 2016.
[24]Lida Zhao, Sen Chen, Zhengzi Xu, Chengwei Liu, Lyuye Zhang, Jiahui Wu, Jun Sun, and Yang Liu. Software composition analysis for vulnerability detection: An empirical study on java projects. In Proceedings of the 31st ACM Joint European Software Engineering Conference and Symposium on the Foundations of Software Engineering, pages 960–972, 2023, https://doi.org/10.1016/j.jss.2015.12.021.
[25]Boris Chernis and Rakesh Verma. Machine learning methods for software vulnerability detection. In Proceedings of the fourth ACM international workshop on security and privacy analytics, pages 31–39, 2018, https://doi.org/10.1145/3180445.3180453.
[26]Siqi Ma, Ferdian Thung, David Lo, Cong Sun, and Robert H Deng. Vurle: Automatic vulnerability detection and repair by learning from examples. In Computer Security–ESORICS 2017: 22nd European Symposium on Research in Computer Security, Oslo, Norway, September 11-15, 2017, Proceedings, Part II 22, pages 229–246. Springer, 2017.
[27]Sanghoon Jeon and Huy Kang Kim. Autovas: An automated vulnerability analysis system with a deep learning approach. Computers & Security, 106:102308, 2021, https://doi.org/10.1016/j.cose.2021.102308.
[28]Garrett Partenza, Trevor Amburgey, Lin Deng, Josh Dehlinger, and Suranjan Chakraborty. Automatic identifica-tion of vulnerable code: Investigations with an ast-based neural network. In 2021 IEEE 45th Annual Computers, Software, and Applications Conference (COMPSAC), pages 1475–1482. IEEE, 2021, https://doi.org/10.1109/COMPSAC51774.2021.00219.
[29]Wei Zheng, Chang Liu, Peiran Deng, Xiang Chen, and Xiaoxue Wu. Enhancing concurrency vulnerability detection through ast-based static fuzz mutation. Journal of Systems and Software, page 112352, 2025, https://doi.org/10.1016/j.jss.2025.112352.
[30]Huanting Wang, Guixin Ye, Zhanyong Tang, Shin Hwei Tan, Songfang Huang, Dingyi Fang, Yansong Feng, Lizhong Bian, and Zheng Wang. Combining graph-based learning with automated data collection for code vulnerability detection. IEEE Transactions on Information Forensics and Security, 16:1943–1958, 2020, https://doi.org/10.1109/TIFS.2020.3044773.
[31]Fangcheng Qiu, Zhongxin Liu, Xing Hu, Xin Xia, Gang Chen, and Xinyu Wang. Vulnerability detection via multiple-graph-based code representation. IEEE Transactions on Software Engineering, 2024, https://doi.org/10.1109/TSE.2024.3427815.
[32]Wei Zheng, Jialiang Gao, Xiaoxue Wu, Fengyu Liu, Yuxing Xun, Guoliang Liu, and Xiang Chen. The impact factors on the performance of machine learning-based vulnerability detection: A comparative study. Journal of Systems and Software, 168:110659, 2020, https://doi.org/10.1016/j.jss.2020.110659.
[33]Fang Wu, Jigang Wang, Jiqiang Liu, and Wei Wang. Vulnerability detection with deep learning. In 2017 3rd IEEE international conference on computer and communications (ICCC), pages 1298–1302. IEEE, 2017, https://doi.org/10.1109/CompComm.2017.8322752.
[34]Saikat Chakraborty, Rahul Krishna, Yangruibo Ding, and Baishakhi Ray. Deep learning based vulnerability detec-tion: Are we there yet? IEEE Transactions on Software Engineering, 48(9):3280–3296, 2021, https://doi.org/10.1109/TSE.2021.3087402.
[35]Chao Ni, Liyu Shen, Wei Wang, Xiang Chen, Xin Yin, and Lexiao Zhang. Fva: Assessing function-level vulner-ability by integrating flow-sensitive structure and code statement semantic. In 2023 IEEE/ACM 31st International Conference on Program Comprehension (ICPC), pages 339–350. IEEE, 2023, https://doi.org/10.1109/ICPC58990.2023.00048.
[36]David Hin, Andrey Kan, Huaming Chen, and M Ali Babar. Linevd: Statement-level vulnerability detection using graph neural networks. In Proceedings of the 19th international conference on mining software repositories, pages 596–607, 2022.
[37]Michael Fu and Chakkrit Tantithamthavorn. Linevul: A transformer-based line-level vulnerability prediction. In Proceedings of the 19th International Conference on Mining Software Repositories, pages 608–620, 2022.
[38]Qianchong Zhao, Cheng Huang, and Liuhu Dai. Vuldeff: Vulnerability detection method based on function finger-prints and code differences. Knowledge-based systems, 260:110139, 2023, https://doi.org/10.1016/j.knosys.2022.110139.
[39]Yukun Dong, Yeer Tang, Xiaotong Cheng, Yufei Yang, and Shuqi Wang. Sedsvd: Statement-level software vul-nerability detection based on relational graph convolutional network with subgraph embedding. Information and Software Technology, 158:107168, 2023, https://doi.org/10.1016/j.infsof.2023.107168.
[40]Ying Zhang, Ya Xiao, Md Mahir Asef Kabir, Danfeng Yao, and Na Meng. Example-based vulnerability detection and repair in java code. In Proceedings of the 30th IEEE/ACM International Conference on Program Comprehension, pages 190–201, 2022, https://doi.org/10.1145/3524610.3527895.
[41]Ridhi Jain, Nicole Gervasoni, Mthandazo Ndhlovu, and Sanjay Rawat. A code centric evaluation of c/c++ vulnera-bility datasets for deep learning based vulnerability detection techniques. In Proceedings of the 16th Innovations in Software Engineering Conference, pages 1–10, 2023.
[42]Chao Ni, Liyu Shen, Xiaohu Yang, Yan Zhu, and Shaohua Wang. Megavul: Ac/c++ vulnerability dataset with com-prehensive code representations. In Proceedings of the 21st International Conference on Mining Software Reposito-ries, pages 738–742, 2024.
[43]Syafiq Al Atiiq, Christian Gehrmann, and Kevin Dahle´n. Vulnerability detection in popular programming languages with language models. arXiv preprint arXiv:2412.15905, 2024.
[44]Yuriy Brun, Tian Lin, Jessie Elise Somerville, Elisha M Myers, and Natalie Ebner. Blindspots in python and java apis result in vulnerable code. ACM Transactions on Software Engineering and Methodology, 32(3):1–31, 2023, https://doi.org/10.1145/3571850.
[45]Xiao Yu, Guancheng Lin, Xing Hu, Jacky Wai Keung, and Xin Xia. Less is more: Unlocking semi-supervised deep learning for vulnerability detection. ACM Transactions on Software Engineering and Methodology, 34(3):1–37, 2025, https://doi.org/10.1145/3699602.
[46]Chunyong Zhang, Bin Liu, Yang Xin, and Liangwei Yao. Cpvd: Cross project vulnerability detection based on graph attention network and domain adaptation. IEEE Transactions on Software Engineering, 49(8):4152–4168, 2023, 10.1109/TSE.2023.3285910.
[47]Zhilong Cai, Yongwei Cai, Xiang Chen, Guilong Lu, Wenlong Pei, and Junjie Zhao. Csvd-tf: Cross-project software vulnerability detection with tradaboost by fusing expert metrics and semantic metrics. Journal of Systems and Software, 213:112038, 2024, https://doi.org/10.1016/j.jss.2024.112038.
[48]Guanjun Lin, Jun Zhang, Wei Luo, Lei Pan, Yang Xiang, Olivier De Vel, and Paul Montague. Cross-project transfer representation learning for vulnerable function discovery. IEEE Transactions on Industrial Informatics, 14(7):3289–3297, 2018, https://doi.org/10.1109/TII.2018.2821768.
[49]Xin Li, Yang Xin, Hongliang Zhu, Yixian Yang, and Yuling Chen. Cross-domain vulnerability detection using graph embedding and domain adaptation. Computers & Security, 125:103017, 2023, https://doi.org/10.1016/j.cose.2022.103017.
[50]Katerina Goseva-Popstojanova and Andrei Perhinschi. On the capability of static code analysis to detect security vulnerabilities. Information and Software Technology, 68:18–33, 2015, https://doi.org/10.1016/j.infsof.2015.08.002.
[51]Stephan Lipp, Sebastian Banescu, and Alexander Pretschner. An empirical study on the effectiveness of static c code analyzers for vulnerability detection. In Proceedings of the 31st ACM SIGSOFT international symposium on software testing and analysis, pages 544–555, 2022, https://doi.org/10.5281/zenodo.6515687.
[52]Fabian Yamaguchi, Nico Golde, Daniel Arp, and Konrad Rieck. Combining static and dynamic analysis for vulner-ability detection. In Proceedings of the 2015 International Symposium on Software Testing and Analysis (ISSTA), pages 1–11. ACM, 2015, https://doi.org/10.48550/arXiv.1305.3883.
[53]Byeonghun Lee and Hyoungshick Kim. Software vulnerability detection methodology combining static and dynamic analysis. In Proceedings of the KIISE Korea Computer Congress (KCC), pages 438–440. KIISE, 2016.
[54]Quoc Le and Tomas Mikolov. Distributed representations of sentences and documents. In International conference on machine learning, pages 1188–1196. PMLR, 2014.
[55]Tomas Mikolov, Kai Chen, Greg Corrado, and Jeffrey Dean. Efficient estimation of word representations in vector space. arXiv preprint arXiv:1301.3781, 2013.
[56]Chen Liang, Qiang Wei, Jiang Du, Yisen Wang, and Zirui Jiang. Survey of source code vulnerability analysis based on deep learning. Computers & Security, 148:104098, 2025, https://doi.org/10.1016/j.cose.2024.104098.
[57]Jiaqi Gao, Yueming Lu, Yaru He, Mingrui Fan, Daoqi Han, and Yaojun Qiao. Tokenization representation and deep learning based intrusion detection in internet of vehicles. IEEE Internet of Things Journal, 2024, https://doi.org/10.1109/JIOT.2024.3441763.
[58]Guodong Zhang, Zhuo Jin, Tianyu Yao, and Jiawei Qin. Ecet: Enhanced vulnerability detection through code embedding techniques. In 2024 Sixth International Conference on Next Generation Data-driven Networks (NGDN), pages 100–103. IEEE, 2024, https://doi.org/10.1109/NGDN61651.2024.10744066.
[59]Gewangzi Du, Liwei Chen, Tongshuai Wu, Xiong Zheng, and Gang Shi. Code property graph based cross-domain vulnerability detection via deep fused feature. In 2024 IEEE International Symposium on Circuits and Systems (ISCAS), pages 1–5. IEEE, 2024, https://doi.org/10.1109/ISCAS58744.2024.10558497.
[60]Weisong Sun, Chunrong Fang, Yun Miao, Yudu You, Mengzhe Yuan, Yuchen Chen, Quanjun Zhang, An Guo, Xiang Chen, Yang Liu, et al. Abstract syntax tree for programming language understanding and representation: How far are we? arXiv preprint arXiv:2312.00413, 2023.
[61]M Maruf O¨ ztu¨rk. A cosine similarity-based labeling technique for vulnerability type detection using source codes. Computers & Security, 146:104059, 2024, https://doi.org/10.1016/j.cose.2024.104059.
[62]Yizheng Chen, Zhoujie Ding, Lamya Alowain, Xinyun Chen, and David Wagner. Diversevul: A new vulnerable source code dataset for deep learning based vulnerability detection. In ACM International Conference Proceeding Series, pages 654–668. Association for Computing Machinery, 10 2023, https://doi.org/10.1145/3607199.3607242.
[63]Yaqin Zhou, Shangqing Liu, Jingkai Siow, Xiaoning Du, and Yang Liu. Devign: Effective vulnerability identifi-cation by learning comprehensive program semantics via graph neural networks. Advances in neural information processing systems, 32, 2019.
[64]Ruyan Lin, Yulong Fu, Wei Yi, Jincheng Yang, Jin Cao, Zhiqiang Dong, Fei Xie, and Hui Li. Vulnerabilities and security patches detection in oss: A survey. ACM Computing Surveys, 57(1):1–37, 2024, https://doi.org/10.1145/3694782.
[65]Avishree Khare, Saikat Dutta, Ziyang Li, Alaia Solko-Breslin, Rajeev Alur, and Mayur Naik. Understanding the effectiveness of large language models in detecting security vulnerabilities. In 2025 IEEE Conference on Software Testing, Verification and Validation (ICST), pages 103–114. IEEE, 2025, https://doi.org/10.1109/ICST62969.2025.10988968.
[66]Xin Zhou, Ting Zhang, and David Lo. Large language model for vulnerability detection: Emerging results and future directions. In Proceedings of the 2024 ACM/IEEE 44th International Conference on Software Engineering: New Ideas and Emerging Results, pages 47–51, 2024, https://doi.org/10.1145/3639476.3639762.
[67]Guilong Lu, Xiaolin Ju, Xiang Chen, Wenlong Pei, and Zhilong Cai. Grace: Empowering llm-based software vulnerability detection with graph structure and in-context learning. Journal of Systems and Software, 212:112031, 2024, https://doi.org/10.1016/j.jss.2024.112031.
[68]Xuehai Jia, Junwei Du, Minying Fang, Hao Liu, Yuying Li, and Feng Jiang. Vulnerability detection with graph enhancement and global dependency representation learning. Automated Software Engineering, 32(1):14, 2025, https://doi.org/10.1007/s10515-024-00484-3.
[69]Xinghang Lv, Jianming Fu, and Tao Peng. Vuloc: Vulnerability location framework based on assembly code slicing. Journal of Systems and Software, page 112459, 2025, https://doi.org/10.1016/j.jss.2025.112459.
[70]Scarlett Taviss, Steven HH Ding, Mohammad Zulkernine, Philippe Charland, and Sudipta Acharya. Asm2seq: Ex-plainable assembly code functional summary generation for reverse engineering and vulnerability analysis. Digital Threats: Research and Practice, 5(1):1–25, 2024, https://doi.org/10.1145/3592623.
[71]Hao Wang, Zeyu Gao, Chao Zhang, Zihan Sha, Mingyang Sun, Yuchen Zhou, Wenyu Zhu, Wenju Sun, Han Qiu, and Xi Xiao. Clap: Learning transferable binary code representations with natural language supervision. In Proceedings of the 33rd ACM SIGSOFT International Symposium on Software Testing and Analysis, pages 503–515, 2024, https://doi.org/10.1145/3650212.3652145.
[72]Justin Gilmer, Behrooz Ghorbani, Ankush Garg, Sneha Kudugunta, Behnam Neyshabur, David Cardoze, George Ed-ward Dahl, Zachary Nado, and Orhan Firat. A loss curvature perspective on training instabilities of deep learning models. In International Conference on Learning Representations, 2022.
[73]Shenwang Jiang, Jianan Li, Ying Wang, Bo Huang, Zhang Zhang, and Tingfa Xu. Delving into sample loss curve to embrace noisy and imbalanced data. In Proceedings of the AAAI Conference on Artificial Intelligence, volume 36, pages 7024–7032, 2022, https://doi.org/10.1609/aaai.v36i6.20661.
[74]Hazim Hanif, Mohd Hairul Nizam Md Nasir, Mohd Faizal Ab Razak, Ahmad Firdaus, and Nor Badrul Anuar. The rise of software vulnerability: Taxonomy of software vulnerabilities detection and machine learning approaches, 4 2021.
[75]Yi Li, Shaohua Wang, and Tien N. Nguyen. Vulnerability detection with fine-grained interpretations. In ESEC/FSE 2021 - Proceedings of the 29th ACM Joint Meeting European Software Engineering Conference and Symposium on the Foundations of Software Engineering, pages 292–303. Association for Computing Machinery, Inc, 8 2021, https://doi.org/10.1145/3468264.3468597.
[76]Yueming Wu, Deqing Zou, Shihan Dou, Wei Yang, Duo Xu, and Hai Jin. Vulcnn: An image-inspired scalable vulnerability detection system. In Proceedings - International Conference on Software Engineering, volume 2022-May, pages 2365–2376. IEEE Computer Society, 2022, https://doi.org/10.1145/3510003.3510229.
[77]Michael Fu, Chakkrit Kla Tantithamthavorn, Van Nguyen, and Trung Le. Chatgpt for vulnerability detection, clas-sification, and repair: How far are we? In 2023 30th Asia-Pacific Software Engineering Conference (APSEC), pages 632–636. IEEE, 2023, https://doi.org/10.1109/APSEC60848.2023.00085
[78]Ruiyang Zhou, Lu Chen, and Kai Yu. Is llm a reliable reviewer? a comprehensive evaluation of llm on automatic paper reviewing tasks. In Proceedings of the 2024 joint international conference on computational linguistics, language resources and evaluation (LREC-COLING 2024), pages 9340–9351, 2024.
[79]Sicong Cao, Xiaobing Sun, Lili Bo, Ying Wei, and Bin Li. Bgnn4vd: Constructing bidirectional graph neural-network for vulnerability detection. Information and Software Technology, 136, 8 2021, https://doi.org/10.1016/j.infsof.2021.106576.
[80]Benjamin Steenhoek, Md Mahbubur Rahman, Richard Jiles, and Wei Le. An empirical study of deep learning models for vulnerability detection. In 2023 IEEE/ACM 45th International Conference on Software Engineering (ICSE), pages 2237–2248. IEEE, 2023, https://doi.org/10.6084/m9.figshare.20791240.
[81]Janaka Senanayake, Harsha Kalutarage, Mhd Omar Al-Kadri, Andrei Petrovski, and Luca Piras. Android source code vulnerability detection: a systematic literature review. ACM Computing Surveys, 55(9):1–37, 2023, https://doi.org/10.1145/3556974.
[82]Feng Luo, Ruijie Luo, Ting Chen, Ao Qiao, Zheyuan He, Shuwei Song, Yu Jiang, and Sixing Li. Scvhunter: Smart contract vulnerability detection based on heterogeneous graph attention network. In Proceedings of the IEEE/ACM 46th International Conference on Software Engineering, pages 1–13, 2024, https://doi.org/10.1145/3597503.3639213.
[83]Wei Tang, Mingwei Tang, Minchao Ban, Ziguo Zhao, and Mingjun Feng. Csgvd: A deep learning approach com-bining sequence and graph embedding for source code vulnerability detection. Journal of Systems and Software, 199:111623, 2023, https://doi.org/10.1016/j.jss.2023.111623.
[84]Xin-Cheng Wen, Xinchen Wang, Cuiyun Gao, Shaohua Wang, Yang Liu, and Zhaoquan Gu. When less is enough: Positive and unlabeled learning model for vulnerability detection. In 2023 38th IEEE/ACM International Conference on Automated Software Engineering (ASE), pages 345–357. IEEE, 2023, https://doi.org/10.1109/ASE56229.2023.00144.
[85]Chunyong Zhang, Tianxiang Yu, Bin Liu, and Yang Xin. Vulnerability detection based on federated learning. Information and Software Technology, 167:107371, 2024, https://doi.org/10.1016/j.infsof.2023.107371.
[86]Hai Ngoc Nguyen, Songpon Teerakanok, Atsuo Inomata, and Tetsutaro Uehara. The comparison of word embedding techniques in rnns for vulnerability detection. In ICISSP, pages 109–120, 2021.
[87]Peilin Zheng, Zibin Zheng, and Xiapu Luo. Park: accelerating smart contract vulnerability detection via parallel-fork symbolic execution. In Proceedings of the 31st ACM SIGSOFT International Symposium on Software Testing and Analysis, pages 740–751, 2022, https://doi.org/10.1145/3533767.3534395.