{"id":"https://openalex.org/W4409985231","doi":"https://doi.org/10.1109/access.2025.3565980","title":"TEDVIL: Leveraging Transformer-Based Embeddings for Vulnerability Detection in Lifted Code","display_name":"TEDVIL: Leveraging Transformer-Based Embeddings for Vulnerability Detection in Lifted Code","publication_year":2025,"publication_date":"2025-01-01","ids":{"openalex":"https://openalex.org/W4409985231","doi":"https://doi.org/10.1109/access.2025.3565980"},"language":"en","primary_location":{"id":"doi:10.1109/access.2025.3565980","is_oa":true,"landing_page_url":"https://doi.org/10.1109/access.2025.3565980","pdf_url":null,"source":{"id":"https://openalex.org/S2485537415","display_name":"IEEE Access","issn_l":"2169-3536","issn":["2169-3536"],"is_oa":true,"is_in_doaj":true,"is_core":true,"host_organization":"https://openalex.org/P4310319808","host_organization_name":"Institute of Electrical and Electronics Engineers","host_organization_lineage":["https://openalex.org/P4310319808"],"host_organization_lineage_names":["Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Access","raw_type":"journal-article"},"type":"article","indexed_in":["crossref","doaj"],"open_access":{"is_oa":true,"oa_status":"gold","oa_url":"https://doi.org/10.1109/access.2025.3565980","any_repository_has_fulltext":true},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5098954272","display_name":"Gary A. McCully","orcid":null},"institutions":[{"id":"https://openalex.org/I125467818","display_name":"Dakota State University","ror":"https://ror.org/016yv6y68","country_code":"US","type":"education","lineage":["https://openalex.org/I125467818"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Gary A. McCully","raw_affiliation_strings":["The Beacom College of Computer and Cyber Sciences, Dakota State University, Madison, SD, USA"],"raw_orcid":"https://orcid.org/0009-0005-6163-7720","affiliations":[{"raw_affiliation_string":"The Beacom College of Computer and Cyber Sciences, Dakota State University, Madison, SD, USA","institution_ids":["https://openalex.org/I125467818"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5022580647","display_name":"John D. Hastings","orcid":"https://orcid.org/0000-0003-0871-3622"},"institutions":[{"id":"https://openalex.org/I125467818","display_name":"Dakota State University","ror":"https://ror.org/016yv6y68","country_code":"US","type":"education","lineage":["https://openalex.org/I125467818"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"John D. Hastings","raw_affiliation_strings":["The Beacom College of Computer and Cyber Sciences, Dakota State University, Madison, SD, USA"],"raw_orcid":"https://orcid.org/0000-0003-0871-3622","affiliations":[{"raw_affiliation_string":"The Beacom College of Computer and Cyber Sciences, Dakota State University, Madison, SD, USA","institution_ids":["https://openalex.org/I125467818"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5024969203","display_name":"Shengjie Xu","orcid":"https://orcid.org/0000-0003-2019-5186"},"institutions":[{"id":"https://openalex.org/I138006243","display_name":"University of Arizona","ror":"https://ror.org/03m2x1q45","country_code":"US","type":"education","lineage":["https://openalex.org/I138006243"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Shengjie Xu","raw_affiliation_strings":["College of Applied Science and Technology, The University of Arizona, Tucson, AZ, USA","Department of Cyber, Intelligence, and Information Operations, College of Applied Science & Technology, University of Arizona, Tucson, AZ, USA"],"raw_orcid":"https://orcid.org/0000-0003-2019-5186","affiliations":[{"raw_affiliation_string":"College of Applied Science and Technology, The University of Arizona, Tucson, AZ, USA","institution_ids":["https://openalex.org/I138006243"]},{"raw_affiliation_string":"Department of Cyber, Intelligence, and Information Operations, College of Applied Science & Technology, University of Arizona, Tucson, AZ, USA","institution_ids":["https://openalex.org/I138006243"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":3,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":{"value":1850,"currency":"USD","value_usd":1850},"apc_paid":{"value":1850,"currency":"USD","value_usd":1850},"fwci":0.0,"has_fulltext":false,"cited_by_count":0,"citation_normalized_percentile":{"value":0.07727544,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":null,"biblio":{"volume":"13","issue":null,"first_page":"76894","last_page":"76913"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T12423","display_name":"Software Reliability and Analysis Research","score":0.9934999942779541,"subfield":{"id":"https://openalex.org/subfields/1712","display_name":"Software"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T12423","display_name":"Software Reliability and Analysis Research","score":0.9934999942779541,"subfield":{"id":"https://openalex.org/subfields/1712","display_name":"Software"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T12479","display_name":"Web Application Security Vulnerabilities","score":0.9850000143051147,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10743","display_name":"Software Testing and Debugging Techniques","score":0.9835000038146973,"subfield":{"id":"https://openalex.org/subfields/1712","display_name":"Software"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.7400391101837158},{"id":"https://openalex.org/keywords/code","display_name":"Code (set theory)","score":0.5256306529045105},{"id":"https://openalex.org/keywords/vulnerability","display_name":"Vulnerability (computing)","score":0.4920901656150818},{"id":"https://openalex.org/keywords/transformer","display_name":"Transformer","score":0.4609118103981018},{"id":"https://openalex.org/keywords/computer-security","display_name":"Computer security","score":0.33849576115608215},{"id":"https://openalex.org/keywords/programming-language","display_name":"Programming language","score":0.22151675820350647},{"id":"https://openalex.org/keywords/electrical-engineering","display_name":"Electrical engineering","score":0.11636623740196228},{"id":"https://openalex.org/keywords/engineering","display_name":"Engineering","score":0.09246832132339478},{"id":"https://openalex.org/keywords/voltage","display_name":"Voltage","score":0.06858804821968079}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.7400391101837158},{"id":"https://openalex.org/C2776760102","wikidata":"https://www.wikidata.org/wiki/Q5139990","display_name":"Code (set theory)","level":3,"score":0.5256306529045105},{"id":"https://openalex.org/C95713431","wikidata":"https://www.wikidata.org/wiki/Q631425","display_name":"Vulnerability (computing)","level":2,"score":0.4920901656150818},{"id":"https://openalex.org/C66322947","wikidata":"https://www.wikidata.org/wiki/Q11658","display_name":"Transformer","level":3,"score":0.4609118103981018},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.33849576115608215},{"id":"https://openalex.org/C199360897","wikidata":"https://www.wikidata.org/wiki/Q9143","display_name":"Programming language","level":1,"score":0.22151675820350647},{"id":"https://openalex.org/C119599485","wikidata":"https://www.wikidata.org/wiki/Q43035","display_name":"Electrical engineering","level":1,"score":0.11636623740196228},{"id":"https://openalex.org/C127413603","wikidata":"https://www.wikidata.org/wiki/Q11023","display_name":"Engineering","level":0,"score":0.09246832132339478},{"id":"https://openalex.org/C165801399","wikidata":"https://www.wikidata.org/wiki/Q25428","display_name":"Voltage","level":2,"score":0.06858804821968079},{"id":"https://openalex.org/C177264268","wikidata":"https://www.wikidata.org/wiki/Q1514741","display_name":"Set (abstract data type)","level":2,"score":0.0}],"mesh":[],"locations_count":2,"locations":[{"id":"doi:10.1109/access.2025.3565980","is_oa":true,"landing_page_url":"https://doi.org/10.1109/access.2025.3565980","pdf_url":null,"source":{"id":"https://openalex.org/S2485537415","display_name":"IEEE Access","issn_l":"2169-3536","issn":["2169-3536"],"is_oa":true,"is_in_doaj":true,"is_core":true,"host_organization":"https://openalex.org/P4310319808","host_organization_name":"Institute of Electrical and Electronics Engineers","host_organization_lineage":["https://openalex.org/P4310319808"],"host_organization_lineage_names":["Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Access","raw_type":"journal-article"},{"id":"pmh:oai:doaj.org/article:e717df07d2404d6f9713bfc8ba83d3cb","is_oa":true,"landing_page_url":"https://doaj.org/article/e717df07d2404d6f9713bfc8ba83d3cb","pdf_url":null,"source":{"id":"https://openalex.org/S4306401280","display_name":"DOAJ (DOAJ: Directory of Open Access Journals)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":null,"host_organization_name":null,"host_organization_lineage":[],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by-sa","license_id":"https://openalex.org/licenses/cc-by-sa","version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"IEEE Access, Vol 13, Pp 76894-76913 (2025)","raw_type":"article"}],"best_oa_location":{"id":"doi:10.1109/access.2025.3565980","is_oa":true,"landing_page_url":"https://doi.org/10.1109/access.2025.3565980","pdf_url":null,"source":{"id":"https://openalex.org/S2485537415","display_name":"IEEE Access","issn_l":"2169-3536","issn":["2169-3536"],"is_oa":true,"is_in_doaj":true,"is_core":true,"host_organization":"https://openalex.org/P4310319808","host_organization_name":"Institute of Electrical and Electronics Engineers","host_organization_lineage":["https://openalex.org/P4310319808"],"host_organization_lineage_names":["Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Access","raw_type":"journal-article"},"sustainable_development_goals":[],"awards":[],"funders":[],"has_content":{"grobid_xml":false,"pdf":false},"content_urls":null,"referenced_works_count":81,"referenced_works":["https://openalex.org/W17195072","https://openalex.org/W1614668525","https://openalex.org/W1974316340","https://openalex.org/W2010452422","https://openalex.org/W2064356230","https://openalex.org/W2075698084","https://openalex.org/W2090780255","https://openalex.org/W2297419069","https://openalex.org/W2585020150","https://openalex.org/W2598645805","https://openalex.org/W2618209987","https://openalex.org/W2806827663","https://openalex.org/W2885195348","https://openalex.org/W2895787676","https://openalex.org/W2896457183","https://openalex.org/W2947887503","https://openalex.org/W2963026768","https://openalex.org/W2965373594","https://openalex.org/W2978569165","https://openalex.org/W2998879504","https://openalex.org/W3005105185","https://openalex.org/W3007993592","https://openalex.org/W3084034552","https://openalex.org/W3085647877","https://openalex.org/W3110858800","https://openalex.org/W3116736794","https://openalex.org/W3132588576","https://openalex.org/W3133719257","https://openalex.org/W3175269629","https://openalex.org/W3181292541","https://openalex.org/W3187025053","https://openalex.org/W3204424092","https://openalex.org/W4229014078","https://openalex.org/W4246166885","https://openalex.org/W4283273170","https://openalex.org/W4285173329","https://openalex.org/W4285407531","https://openalex.org/W4309892485","https://openalex.org/W4311165836","https://openalex.org/W4311166089","https://openalex.org/W4312326656","https://openalex.org/W4313000152","https://openalex.org/W4323042475","https://openalex.org/W4360764539","https://openalex.org/W4361988647","https://openalex.org/W4366374002","https://openalex.org/W4385245566","https://openalex.org/W4385412387","https://openalex.org/W4386214355","https://openalex.org/W4387351061","https://openalex.org/W4388212383","https://openalex.org/W4390572759","https://openalex.org/W4390679741","https://openalex.org/W4391497362","https://openalex.org/W4392240261","https://openalex.org/W4396506586","https://openalex.org/W4396594820","https://openalex.org/W4398239389","https://openalex.org/W4398785927","https://openalex.org/W4402683771","https://openalex.org/W4403969644","https://openalex.org/W4405182676","https://openalex.org/W4405362333","https://openalex.org/W4406944226","https://openalex.org/W6636510571","https://openalex.org/W6640818009","https://openalex.org/W6763701032","https://openalex.org/W6768021236","https://openalex.org/W6771917389","https://openalex.org/W6776048684","https://openalex.org/W6779068807","https://openalex.org/W6781533629","https://openalex.org/W6784472380","https://openalex.org/W6796119419","https://openalex.org/W6858937723","https://openalex.org/W6863467715","https://openalex.org/W6865043740","https://openalex.org/W6869596394","https://openalex.org/W6873240872","https://openalex.org/W6874852040","https://openalex.org/W6911452879"],"related_works":["https://openalex.org/W4391375266","https://openalex.org/W2899084033","https://openalex.org/W2748952813","https://openalex.org/W2390279801","https://openalex.org/W4391913857","https://openalex.org/W2358668433","https://openalex.org/W4396701345","https://openalex.org/W2376932109","https://openalex.org/W2001405890","https://openalex.org/W4396696052"],"abstract_inverted_index":{"Ransomware":[0],"and":[1,7,75,77,80,114,122,145,154,196],"other":[2],"malware":[3],"inflict":[4],"devastating":[5],"financial":[6],"operational":[8],"damage":[9],"on":[10],"organizations":[11],"worldwide":[12],"by":[13],"exploiting":[14],"deeply":[15],"embedded,":[16],"hard-to-detect":[17,191],"vulnerabilities":[18,24,64,192],"in":[19,25,37,48,65,100,179,189,193,203],"their":[20,123],"systems.":[21],"Detecting":[22],"these":[23,160],"compiled":[26,194],"code":[27],"before":[28],"malicious":[29],"actors":[30],"exploit":[31],"them":[32],"remains":[33],"a":[34,51,149,171],"critical":[35],"challenge":[36],"cybersecurity.":[38],"This":[39],"research":[40,202],"introduces":[41],"TEDVIL":[42,188],"(Transformer-based":[43],"Embeddings":[44],"for":[45,87,200,207],"Discovering":[46],"Vulnerabilities":[47],"Lifted":[49],"Code),":[50],"novel":[52],"framework":[53,69],"which":[54],"uses":[55],"transformer-based":[56,82,205],"embeddings":[57,86,124,138],"to":[58,62,84,95,127],"train":[59,128],"neural":[60,93],"networks":[61,94],"detect":[63,96],"lifted":[66],"code.":[67,107],"The":[68,130,182],"was":[70],"implemented":[71],"using":[72,136,141],"bidirectional":[73],"(BERT":[74],"RoBERTa)":[76],"unidirectional":[78],"(GPT-1":[79],"GPT-2)":[81],"models":[83,112,206],"generate":[85],"training":[88],"Long":[89],"Short-Term":[90],"Memory":[91],"(LSTM)":[92],"stack-based":[97],"buffer":[98],"overflows":[99],"Low-Level":[101],"Virtual":[102],"Machine":[103],"(LLVM)":[104],"intermediate":[105],"representation":[106],"For":[108],"comparison,":[109],"simpler":[110],"word2vec":[111,146],"(Skip-Gram":[113],"Continuous":[115],"Bag":[116],"of":[117,152,157,173,187],"Words)":[118],"were":[119,125],"also":[120],"trained,":[121],"used":[126],"LSTMs.":[129],"results":[131,161],"show":[132],"that":[133],"the":[134,165,185,198],"LSTMs":[135],"GPT-2":[137],"outperformed":[139],"those":[140],"GPT-1,":[142],"BERT,":[143],"RoBERTa,":[144],"embeddings,":[147],"achieving":[148],"top":[150],"accuracy":[151],"92.5%":[153],"an":[155],"F1-score":[156],"89.7%.":[158],"Notably,":[159],"are":[162],"achieved":[163],"when":[164],"embedding":[166],"model":[167],"is":[168],"trained":[169],"with":[170],"dataset":[172],"just":[174],"48,000":[175],"functions,":[176],"demonstrating":[177],"effectiveness":[178,186],"resource-constrained":[180],"settings.":[181],"findings":[183],"underscore":[184],"identifying":[190],"code,":[195],"lay":[197],"groundwork":[199],"future":[201],"leveraging":[204],"vulnerability":[208],"detection.":[209]},"counts_by_year":[],"updated_date":"2026-06-11T09:08:48.828518","created_date":"2025-10-10T00:00:00"}