{"id":"https://openalex.org/W7126093343","doi":"https://doi.org/10.1109/iccasit66611.2025.11348681","title":"Source Code Vulnerability Detection Based on CodeBERT and Graph Attention Network","display_name":"Source Code Vulnerability Detection Based on CodeBERT and Graph Attention Network","publication_year":2025,"publication_date":"2025-10-22","ids":{"openalex":"https://openalex.org/W7126093343","doi":"https://doi.org/10.1109/iccasit66611.2025.11348681"},"language":"en","primary_location":{"id":"doi:10.1109/iccasit66611.2025.11348681","doi":"https://doi.org/10.1109/iccasit66611.2025.11348681","is_oa":false,"landing_page_url":"https://doi.org/10.1109/iccasit66611.2025.11348681","pdf_url":null,"source":{"id":"https://openalex.org/S4363607888","display_name":"IEEE International Conference on Civil Aviation Safety and Information Technology (ICCASIT)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"listed_in":[],"host_organization":null,"host_organization_name":null,"host_organization_lineage":[],"host_organization_lineage_names":[],"type":"conference"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"2025 IEEE 7th International Conference on Civil Aviation Safety and Information Technology (ICCASIT)","raw_type":"proceedings-article"},"volume":null,"type":"conference-paper","is_traditional":true,"indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5124262883","display_name":"Mengcong Huo","orcid":null,"observed_orcids":[]},"institutions":[{"id":"https://openalex.org/I136765683","display_name":"Tianjin University of Technology","ror":"https://ror.org/00zbe0w13","country_code":"CN","type":"education","lineage":["https://openalex.org/I136765683"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Mengcong Huo","raw_affiliation_strings":["Tianjin University of Technology,School of Management,Tianjin,China"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Tianjin University of Technology,School of Management,Tianjin,China","institution_ids":["https://openalex.org/I136765683"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5124260283","display_name":"Xi Wang","orcid":null,"observed_orcids":[]},"institutions":[{"id":"https://openalex.org/I76569877","display_name":"Southeast University","ror":"https://ror.org/04ct4d772","country_code":"CN","type":"education","lineage":["https://openalex.org/I76569877"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Xi Wang","raw_affiliation_strings":["Southeast University,School of Cyber Science and Engineering,Nanjing,China"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Southeast University,School of Cyber Science and Engineering,Nanjing,China","institution_ids":["https://openalex.org/I76569877"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":2,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":0.5315,"has_fulltext":false,"cited_by_count":1,"citation_normalized_percentile":{"value":0.60479007,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":{"min":91,"max":95},"biblio":{"volume":null,"issue":null,"first_page":"1677","last_page":"1682"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10260","display_name":"Software Engineering Research","score":0.8881999850273132,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10260","display_name":"Software Engineering Research","score":0.8881999850273132,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10743","display_name":"Software Testing and Debugging Techniques","score":0.04100000113248825,"subfield":{"id":"https://openalex.org/subfields/1712","display_name":"Software"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T12479","display_name":"Web Application Security Vulnerabilities","score":0.026100000366568565,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/source-code-vulnerability-detection","display_name":"source code vulnerability detection","score":0.9549999833106995},{"id":"https://openalex.org/keywords/c-c-source-code","display_name":"C/C++ source code","score":0.7490000128746033},{"id":"https://openalex.org/keywords/codebert","display_name":"CodeBERT","score":0.9729999899864197},{"id":"https://openalex.org/keywords/graph-attention-networks","display_name":"graph attention networks","score":0.9559999704360962},{"id":"https://openalex.org/keywords/code-property-graph","display_name":"code property graph","score":0.8270000219345093},{"id":"https://openalex.org/keywords/cross-attention","display_name":"cross-attention","score":0.8629999756813049},{"id":"https://openalex.org/keywords/vulnerability-prediction","display_name":"vulnerability prediction","score":0.32899999618530273}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.8059999942779541},{"id":"https://openalex.org/C95713431","wikidata":"https://www.wikidata.org/wiki/Q631425","display_name":"Vulnerability (computing)","level":2,"score":0.6498000025749207},{"id":"https://openalex.org/C43126263","wikidata":"https://www.wikidata.org/wiki/Q128751","display_name":"Source code","level":2,"score":0.6312999725341797},{"id":"https://openalex.org/C177774035","wikidata":"https://www.wikidata.org/wiki/Q1246948","display_name":"Granularity","level":2,"score":0.5773000121116638},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.5159000158309937},{"id":"https://openalex.org/C132525143","wikidata":"https://www.wikidata.org/wiki/Q141488","display_name":"Graph","level":2,"score":0.4884999990463257},{"id":"https://openalex.org/C2776760102","wikidata":"https://www.wikidata.org/wiki/Q5139990","display_name":"Code (set theory)","level":3,"score":0.4690000116825104},{"id":"https://openalex.org/C2776359362","wikidata":"https://www.wikidata.org/wiki/Q2145286","display_name":"Representation (politics)","level":3,"score":0.4519999921321869},{"id":"https://openalex.org/C167063184","wikidata":"https://www.wikidata.org/wiki/Q1400839","display_name":"Vulnerability assessment","level":3,"score":0.4498000144958496},{"id":"https://openalex.org/C116834253","wikidata":"https://www.wikidata.org/wiki/Q2039217","display_name":"Identification (biology)","level":2,"score":0.4399000108242035},{"id":"https://openalex.org/C124101348","wikidata":"https://www.wikidata.org/wiki/Q172491","display_name":"Data mining","level":1,"score":0.4162999987602234},{"id":"https://openalex.org/C98045186","wikidata":"https://www.wikidata.org/wiki/Q205663","display_name":"Process (computing)","level":2,"score":0.41260001063346863},{"id":"https://openalex.org/C192209626","wikidata":"https://www.wikidata.org/wiki/Q190909","display_name":"Focus (optics)","level":2,"score":0.4034999907016754},{"id":"https://openalex.org/C2776401178","wikidata":"https://www.wikidata.org/wiki/Q12050496","display_name":"Feature (linguistics)","level":2,"score":0.3880000114440918},{"id":"https://openalex.org/C119857082","wikidata":"https://www.wikidata.org/wiki/Q2539","display_name":"Machine learning","level":1,"score":0.36000001430511475},{"id":"https://openalex.org/C16311509","wikidata":"https://www.wikidata.org/wiki/Q4148050","display_name":"Dependency graph","level":3,"score":0.3598000109195709},{"id":"https://openalex.org/C50644808","wikidata":"https://www.wikidata.org/wiki/Q192776","display_name":"Artificial neural network","level":2,"score":0.35109999775886536},{"id":"https://openalex.org/C14036430","wikidata":"https://www.wikidata.org/wiki/Q3736076","display_name":"Function (biology)","level":2,"score":0.3075999915599823},{"id":"https://openalex.org/C26517878","wikidata":"https://www.wikidata.org/wiki/Q228039","display_name":"Key (lock)","level":2,"score":0.2928999960422516},{"id":"https://openalex.org/C189950617","wikidata":"https://www.wikidata.org/wiki/Q937228","display_name":"Property (philosophy)","level":2,"score":0.2879999876022339},{"id":"https://openalex.org/C739882","wikidata":"https://www.wikidata.org/wiki/Q3560506","display_name":"Anomaly detection","level":2,"score":0.25380000472068787}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1109/iccasit66611.2025.11348681","doi":"https://doi.org/10.1109/iccasit66611.2025.11348681","is_oa":false,"landing_page_url":"https://doi.org/10.1109/iccasit66611.2025.11348681","pdf_url":null,"source":{"id":"https://openalex.org/S4363607888","display_name":"IEEE International Conference on Civil Aviation Safety and Information Technology (ICCASIT)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"listed_in":[],"host_organization":null,"host_organization_name":null,"host_organization_lineage":[],"host_organization_lineage_names":[],"type":"conference"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"2025 IEEE 7th International Conference on Civil Aviation Safety and Information Technology (ICCASIT)","raw_type":"proceedings-article"}],"best_oa_location":null,"sustainable_development_goals":[],"study_designs":[],"awards":[],"funders":[],"has_content":{"grobid_xml":false,"pdf":false},"content_urls":null,"referenced_works_count":9,"referenced_works":["https://openalex.org/W2781491433","https://openalex.org/W2822734516","https://openalex.org/W2885030880","https://openalex.org/W2990323480","https://openalex.org/W3098605233","https://openalex.org/W3183962691","https://openalex.org/W3198685994","https://openalex.org/W4284667406","https://openalex.org/W4389519352"],"related_works":["https://openalex.org/W7118016279","https://openalex.org/W4412153181","https://openalex.org/W3136874603","https://openalex.org/W7045656570","https://openalex.org/W7163889169","https://openalex.org/W7143971696","https://openalex.org/W4402774224","https://openalex.org/W4402809959","https://openalex.org/W4417440078","https://openalex.org/W4405980314"],"abstract_inverted_index":{"The":[0,109],"comprehensive":[1],"analysis":[2],"of":[3,17,62,75,138],"C/C++":[4,95],"source":[5,96],"code":[6,97,129],"for":[7,48,94,114],"identifying":[8],"security":[9,38],"vulnerabilities":[10],"has":[11],"emerged":[12],"as":[13],"a":[14,31,89],"prominent":[15],"area":[16],"investigation.":[18],"Conventional":[19],"approaches":[20],"to":[21,55,105,124],"vulnerability":[22,29,49,58,91,151],"prediction":[23],"typically":[24],"depend":[25],"on":[26,69],"manually":[27],"defined":[28],"signatures,":[30],"process":[32],"that":[33,98,145],"requires":[34],"substantial":[35],"effort":[36],"from":[37,128],"specialists.":[39],"Advances":[40],"in":[41,78,161],"artificial":[42],"intelligence":[43],"have":[44],"introduced":[45],"new":[46],"possibilities":[47],"identification,":[50],"enabling":[51],"deep":[52],"neural":[53],"networks":[54],"autonomously":[56],"acquire":[57],"characteristics.":[59],"A":[60,132],"limitation":[61],"existing":[63],"research":[64],"is":[65],"the":[66,136,154],"predominant":[67],"focus":[68],"either":[70],"semantic":[71,101,116],"or":[72],"structural":[73,103,126],"aspects":[74],"code,":[76],"resulting":[77],"incomplete":[79],"feature":[80],"representation":[81],"and":[82,102,118,157],"suboptimal":[83],"detection":[84,92,162],"performance.":[85],"This":[86],"work":[87],"introduces":[88],"novel":[90],"framework":[93],"synergistically":[99],"combines":[100],"attributes":[104],"enable":[106],"function-level":[107],"analysis.":[108],"proposed":[110],"system":[111],"employs":[112],"CodeBERT":[113],"capturing":[115],"nuances":[117],"utilizes":[119],"Graph":[120],"Attention":[121],"Networks":[122],"(GAT)":[123],"extract":[125],"patterns":[127],"property":[130],"graphs.":[131],"cross-attention":[133],"mechanism":[134],"facilitates":[135],"integration":[137],"these":[139],"multimodal":[140],"features.":[141],"Validation":[142],"experiments":[143],"demonstrate":[144],"our":[146],"approach":[147],"effectively":[148],"performs":[149],"multi-category":[150],"identification":[152],"at":[153],"function":[155],"granularity":[156],"surpasses":[158],"current":[159],"methods":[160],"accuracy.":[163]},"counts_by_year":[{"year":2026,"cited_by_count":1}],"updated_date":"2026-10-28T10:33:24.094632","created_date":"2026-01-30T00:00:00"}
