{"id":"https://openalex.org/W4408355038","doi":"https://doi.org/10.1109/icassp49660.2025.10890652","title":"VulKiller: Java Web Vulnerability Detection with Code Property Graph and Large Language Models","display_name":"VulKiller: Java Web Vulnerability Detection with Code Property Graph and Large Language Models","publication_year":2025,"publication_date":"2025-03-12","ids":{"openalex":"https://openalex.org/W4408355038","doi":"https://doi.org/10.1109/icassp49660.2025.10890652"},"language":"en","primary_location":{"id":"doi:10.1109/icassp49660.2025.10890652","is_oa":false,"landing_page_url":"https://doi.org/10.1109/icassp49660.2025.10890652","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"ICASSP 2025 - 2025 IEEE International Conference on Acoustics, Speech and Signal Processing (ICASSP)","raw_type":"proceedings-article"},"type":"conference-paper","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5067727958","display_name":"Xingchen Chen","orcid":"https://orcid.org/0000-0003-3432-7469"},"institutions":[{"id":"https://openalex.org/I19820366","display_name":"Chinese Academy of Sciences","ror":"https://ror.org/034t30j35","country_code":"CN","type":"government","lineage":["https://openalex.org/I19820366"]},{"id":"https://openalex.org/I4210156404","display_name":"Institute of Information Engineering","ror":"https://ror.org/04r53se39","country_code":"CN","type":"facility","lineage":["https://openalex.org/I19820366","https://openalex.org/I4210156404"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Xingchen Chen","raw_affiliation_strings":["Chinese Academy of Sciences,Institute of Information Engineering,Beijing,China"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Chinese Academy of Sciences,Institute of Information Engineering,Beijing,China","institution_ids":["https://openalex.org/I19820366","https://openalex.org/I4210156404"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5111022089","display_name":"Baizhu Wang","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Baizhu Wang","raw_affiliation_strings":["MYbank AntGroup,Hangzhou,China"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"MYbank AntGroup,Hangzhou,China","institution_ids":[]}]},{"author_position":"middle","author":{"id":null,"display_name":"Mengjun Zhang","orcid":null},"institutions":[{"id":"https://openalex.org/I19820366","display_name":"Chinese Academy of Sciences","ror":"https://ror.org/034t30j35","country_code":"CN","type":"government","lineage":["https://openalex.org/I19820366"]},{"id":"https://openalex.org/I4210156404","display_name":"Institute of Information Engineering","ror":"https://ror.org/04r53se39","country_code":"CN","type":"facility","lineage":["https://openalex.org/I19820366","https://openalex.org/I4210156404"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Mengjun Zhang","raw_affiliation_strings":["Chinese Academy of Sciences,Institute of Information Engineering,Beijing,China"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Chinese Academy of Sciences,Institute of Information Engineering,Beijing,China","institution_ids":["https://openalex.org/I19820366","https://openalex.org/I4210156404"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5020641983","display_name":"Yaqin Cao","orcid":"https://orcid.org/0000-0002-2568-2517"},"institutions":[{"id":"https://openalex.org/I19820366","display_name":"Chinese Academy of Sciences","ror":"https://ror.org/034t30j35","country_code":"CN","type":"government","lineage":["https://openalex.org/I19820366"]},{"id":"https://openalex.org/I4210156404","display_name":"Institute of Information Engineering","ror":"https://ror.org/04r53se39","country_code":"CN","type":"facility","lineage":["https://openalex.org/I19820366","https://openalex.org/I4210156404"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Yaqin Cao","raw_affiliation_strings":["Chinese Academy of Sciences,Institute of Information Engineering,Beijing,China"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Chinese Academy of Sciences,Institute of Information Engineering,Beijing,China","institution_ids":["https://openalex.org/I19820366","https://openalex.org/I4210156404"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5004834139","display_name":"Qixu Liu","orcid":"https://orcid.org/0000-0003-0895-9585"},"institutions":[{"id":"https://openalex.org/I19820366","display_name":"Chinese Academy of Sciences","ror":"https://ror.org/034t30j35","country_code":"CN","type":"government","lineage":["https://openalex.org/I19820366"]},{"id":"https://openalex.org/I4210156404","display_name":"Institute of Information Engineering","ror":"https://ror.org/04r53se39","country_code":"CN","type":"facility","lineage":["https://openalex.org/I19820366","https://openalex.org/I4210156404"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Qixu Liu","raw_affiliation_strings":["Chinese Academy of Sciences,Institute of Information Engineering,Beijing,China"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Chinese Academy of Sciences,Institute of Information Engineering,Beijing,China","institution_ids":["https://openalex.org/I19820366","https://openalex.org/I4210156404"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":2,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":3.8492,"has_fulltext":false,"cited_by_count":2,"citation_normalized_percentile":{"value":0.91185199,"is_in_top_1_percent":false,"is_in_top_10_percent":true},"cited_by_percentile_year":{"min":97,"max":98},"biblio":{"volume":null,"issue":null,"first_page":"1","last_page":"5"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T12479","display_name":"Web Application Security Vulnerabilities","score":0.996999979019165,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T12479","display_name":"Web Application Security Vulnerabilities","score":0.996999979019165,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T12423","display_name":"Software Reliability and Analysis Research","score":0.9921000003814697,"subfield":{"id":"https://openalex.org/subfields/1712","display_name":"Software"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10260","display_name":"Software Engineering Research","score":0.9900000095367432,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.8146675825119019},{"id":"https://openalex.org/keywords/java","display_name":"Java","score":0.6684620976448059},{"id":"https://openalex.org/keywords/programming-language","display_name":"Programming language","score":0.6473566293716431},{"id":"https://openalex.org/keywords/property","display_name":"Property (philosophy)","score":0.5217279195785522},{"id":"https://openalex.org/keywords/code","display_name":"Code (set theory)","score":0.45914173126220703},{"id":"https://openalex.org/keywords/graph","display_name":"Graph","score":0.44138094782829285},{"id":"https://openalex.org/keywords/theoretical-computer-science","display_name":"Theoretical computer science","score":0.29433026909828186}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.8146675825119019},{"id":"https://openalex.org/C548217200","wikidata":"https://www.wikidata.org/wiki/Q251","display_name":"Java","level":2,"score":0.6684620976448059},{"id":"https://openalex.org/C199360897","wikidata":"https://www.wikidata.org/wiki/Q9143","display_name":"Programming language","level":1,"score":0.6473566293716431},{"id":"https://openalex.org/C189950617","wikidata":"https://www.wikidata.org/wiki/Q937228","display_name":"Property (philosophy)","level":2,"score":0.5217279195785522},{"id":"https://openalex.org/C2776760102","wikidata":"https://www.wikidata.org/wiki/Q5139990","display_name":"Code (set theory)","level":3,"score":0.45914173126220703},{"id":"https://openalex.org/C132525143","wikidata":"https://www.wikidata.org/wiki/Q141488","display_name":"Graph","level":2,"score":0.44138094782829285},{"id":"https://openalex.org/C80444323","wikidata":"https://www.wikidata.org/wiki/Q2878974","display_name":"Theoretical computer science","level":1,"score":0.29433026909828186},{"id":"https://openalex.org/C111472728","wikidata":"https://www.wikidata.org/wiki/Q9471","display_name":"Epistemology","level":1,"score":0.0},{"id":"https://openalex.org/C177264268","wikidata":"https://www.wikidata.org/wiki/Q1514741","display_name":"Set (abstract data type)","level":2,"score":0.0},{"id":"https://openalex.org/C138885662","wikidata":"https://www.wikidata.org/wiki/Q5891","display_name":"Philosophy","level":0,"score":0.0}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1109/icassp49660.2025.10890652","is_oa":false,"landing_page_url":"https://doi.org/10.1109/icassp49660.2025.10890652","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"ICASSP 2025 - 2025 IEEE International Conference on Acoustics, Speech and Signal Processing (ICASSP)","raw_type":"proceedings-article"}],"best_oa_location":null,"sustainable_development_goals":[{"display_name":"Peace, Justice and strong institutions","score":0.5199999809265137,"id":"https://metadata.un.org/sdg/16"}],"awards":[],"funders":[{"id":"https://openalex.org/F4320321001","display_name":"National Natural Science Foundation of China","ror":"https://ror.org/01h0zpd94"},{"id":"https://openalex.org/F4320335892","display_name":"Youth Innovation Promotion Association","ror":null}],"has_content":{"pdf":false,"grobid_xml":false},"content_urls":null,"referenced_works_count":15,"referenced_works":["https://openalex.org/W1008898928","https://openalex.org/W2091159822","https://openalex.org/W2209872464","https://openalex.org/W2935913954","https://openalex.org/W2954121957","https://openalex.org/W2955471678","https://openalex.org/W3089611879","https://openalex.org/W4313242379","https://openalex.org/W4384302826","https://openalex.org/W4388212383","https://openalex.org/W4393208022","https://openalex.org/W4396242417","https://openalex.org/W4399147175","https://openalex.org/W6601362850","https://openalex.org/W6630065895"],"related_works":["https://openalex.org/W2749690376","https://openalex.org/W2786317006","https://openalex.org/W4367724653","https://openalex.org/W2788563018","https://openalex.org/W4395962217","https://openalex.org/W2997587123","https://openalex.org/W4281673905","https://openalex.org/W3206385231","https://openalex.org/W1566482460","https://openalex.org/W3118256810"],"abstract_inverted_index":{"In":[0,120],"recent":[1],"years,":[2],"web":[3],"application":[4,70],"development":[5],"has":[6],"become":[7],"more":[8],"efficient,":[9],"yet":[10],"vulnerabilities":[11],"still":[12],"pose":[13],"significant":[14,147],"risks.":[15],"Traditional":[16],"static":[17,66],"and":[18,27,34,77,95,112,131],"dynamic":[19],"detection":[20,56,137],"techniques":[21],"are":[22,98,106],"prone":[23],"to":[24,41,68,80,152],"false":[25,129],"positives":[26,130],"negatives,":[28],"making":[29],"it":[30],"challenging":[31],"for":[32,118,149],"small":[33],"medium-sized":[35],"developers":[36],"with":[37,90,122],"limited":[38],"security":[39],"knowledge":[40],"accurately":[42],"assess":[43],"the":[44],"results.":[45],"To":[46],"address":[47],"these":[48,92],"challenges,":[49],"we":[50],"introduced":[51],"VulKiller,":[52],"an":[53],"automated":[54],"vulnerability":[55,116,136,154],"tool":[57],"powered":[58],"by":[59,114],"large":[60],"language":[61],"models":[62],"(LLM).":[63],"VulKiller":[64,125,139],"leverages":[65],"analysis":[67],"convert":[69],"code":[71,97],"into":[72,100,109],"Code":[73],"Property":[74],"Graphs":[75],"(CPG)":[76],"utilizes":[78],"Neo4j":[79],"identify":[81],"high-risk":[82],"method":[83],"call":[84,93],"chains.":[85],"By":[86],"designing":[87],"structured":[88],"interactions":[89],"ChatGPT,":[91],"chains":[94],"corresponding":[96],"transformed":[99],"Proofs":[101],"of":[102],"Concept":[103],"(PoCs),":[104],"which":[105],"then":[107],"parsed":[108],"attack":[110],"payloads":[111],"evaluated":[113],"a":[115],"monitor":[117],"effectiveness.":[119],"comparison":[121],"traditional":[123],"tools,":[124],"excels":[126],"in":[127,134],"reducing":[128],"negatives.":[132],"Additionally,":[133],"zero-day":[135,142],"experiments,":[138],"identified":[140],"12":[141],"vulnerabilities.":[143],"Our":[144],"results":[145],"offer":[146],"encouragement":[148],"using":[150],"LLM":[151],"enhance":[153],"detection.":[155]},"counts_by_year":[{"year":2026,"cited_by_count":2}],"updated_date":"2026-07-29T14:22:42.915294","created_date":"2025-10-10T00:00:00"}