{"id":"https://openalex.org/W4414605519","doi":"https://doi.org/10.1109/qrs65678.2025.00015","title":"Generation, Migration and Optimization of Cross-Language Static-Analysis Rules Based on Large Language Models","display_name":"Generation, Migration and Optimization of Cross-Language Static-Analysis Rules Based on Large Language Models","publication_year":2025,"publication_date":"2025-07-16","ids":{"openalex":"https://openalex.org/W4414605519","doi":"https://doi.org/10.1109/qrs65678.2025.00015"},"language":"en","primary_location":{"id":"doi:10.1109/qrs65678.2025.00015","is_oa":false,"landing_page_url":"https://doi.org/10.1109/qrs65678.2025.00015","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"2025 25th International Conference on Software Quality, Reliability and Security (QRS)","raw_type":"proceedings-article"},"type":"conference-paper","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5025172382","display_name":"Zhanyi Hou","orcid":"https://orcid.org/0000-0001-8524-5370"},"institutions":[{"id":"https://openalex.org/I82880672","display_name":"Beihang University","ror":"https://ror.org/00wk2mp56","country_code":"CN","type":"education","lineage":["https://openalex.org/I82880672"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Zhanyi Hou","raw_affiliation_strings":["School of Reliability and Systems Engineering, Beihang University,Beijing,China,100191"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"School of Reliability and Systems Engineering, Beihang University,Beijing,China,100191","institution_ids":["https://openalex.org/I82880672"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5018443613","display_name":"Zhiyu Duan","orcid":"https://orcid.org/0000-0002-1641-9792"},"institutions":[{"id":"https://openalex.org/I82880672","display_name":"Beihang University","ror":"https://ror.org/00wk2mp56","country_code":"CN","type":"education","lineage":["https://openalex.org/I82880672"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Zhiyu Duan","raw_affiliation_strings":["School of Reliability and Systems Engineering, Beihang University,Beijing,China,100191"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"School of Reliability and Systems Engineering, Beihang University,Beijing,China,100191","institution_ids":["https://openalex.org/I82880672"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5027059634","display_name":"Minghao Yang","orcid":"https://orcid.org/0000-0003-3243-0569"},"institutions":[{"id":"https://openalex.org/I82880672","display_name":"Beihang University","ror":"https://ror.org/00wk2mp56","country_code":"CN","type":"education","lineage":["https://openalex.org/I82880672"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Minghao Yang","raw_affiliation_strings":["School of Reliability and Systems Engineering, Beihang University,Beijing,China,100191"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"School of Reliability and Systems Engineering, Beihang University,Beijing,China,100191","institution_ids":["https://openalex.org/I82880672"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5017272190","display_name":"Mengdan Wu","orcid":null},"institutions":[{"id":"https://openalex.org/I82880672","display_name":"Beihang University","ror":"https://ror.org/00wk2mp56","country_code":"CN","type":"education","lineage":["https://openalex.org/I82880672"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Mengdan Wu","raw_affiliation_strings":["School of Reliability and Systems Engineering, Beihang University,Beijing,China,100191"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"School of Reliability and Systems Engineering, Beihang University,Beijing,China,100191","institution_ids":["https://openalex.org/I82880672"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5037089910","display_name":"Shunkun Yang","orcid":"https://orcid.org/0000-0002-8226-4477"},"institutions":[{"id":"https://openalex.org/I82880672","display_name":"Beihang University","ror":"https://ror.org/00wk2mp56","country_code":"CN","type":"education","lineage":["https://openalex.org/I82880672"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Shunkun Yang","raw_affiliation_strings":["School of Reliability and Systems Engineering, Beihang University,Beijing,China,100191"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"School of Reliability and Systems Engineering, Beihang University,Beijing,China,100191","institution_ids":["https://openalex.org/I82880672"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":1,"corresponding_author_ids":[],"corresponding_institution_ids":["https://openalex.org/I82880672"],"apc_list":null,"apc_paid":null,"fwci":0.0,"has_fulltext":false,"cited_by_count":0,"citation_normalized_percentile":{"value":0.22670213,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":null,"biblio":{"volume":null,"issue":null,"first_page":"34","last_page":"45"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10181","display_name":"Natural Language Processing Techniques","score":0.9570000171661377,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10181","display_name":"Natural Language Processing Techniques","score":0.9570000171661377,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10215","display_name":"Semantic Web and Ontologies","score":0.9348000288009644,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/consistency","display_name":"Consistency (knowledge bases)","score":0.5228999853134155},{"id":"https://openalex.org/keywords/rule-based-system","display_name":"Rule-based system","score":0.5170000195503235},{"id":"https://openalex.org/keywords/static-analysis","display_name":"Static analysis","score":0.48489999771118164},{"id":"https://openalex.org/keywords/adaptability","display_name":"Adaptability","score":0.4731999933719635},{"id":"https://openalex.org/keywords/scalability","display_name":"Scalability","score":0.44519999623298645},{"id":"https://openalex.org/keywords/natural-language","display_name":"Natural language","score":0.39309999346733093},{"id":"https://openalex.org/keywords/programming-paradigm","display_name":"Programming paradigm","score":0.3668000102043152}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.801800012588501},{"id":"https://openalex.org/C2776436953","wikidata":"https://www.wikidata.org/wiki/Q5163215","display_name":"Consistency (knowledge bases)","level":2,"score":0.5228999853134155},{"id":"https://openalex.org/C149271511","wikidata":"https://www.wikidata.org/wiki/Q1417149","display_name":"Rule-based system","level":2,"score":0.5170000195503235},{"id":"https://openalex.org/C97686452","wikidata":"https://www.wikidata.org/wiki/Q7604153","display_name":"Static analysis","level":2,"score":0.48489999771118164},{"id":"https://openalex.org/C177606310","wikidata":"https://www.wikidata.org/wiki/Q5674297","display_name":"Adaptability","level":2,"score":0.4731999933719635},{"id":"https://openalex.org/C48044578","wikidata":"https://www.wikidata.org/wiki/Q727490","display_name":"Scalability","level":2,"score":0.44519999623298645},{"id":"https://openalex.org/C115903868","wikidata":"https://www.wikidata.org/wiki/Q80993","display_name":"Software engineering","level":1,"score":0.42260000109672546},{"id":"https://openalex.org/C195324797","wikidata":"https://www.wikidata.org/wiki/Q33742","display_name":"Natural language","level":2,"score":0.39309999346733093},{"id":"https://openalex.org/C199360897","wikidata":"https://www.wikidata.org/wiki/Q9143","display_name":"Programming language","level":1,"score":0.3840000033378601},{"id":"https://openalex.org/C34165917","wikidata":"https://www.wikidata.org/wiki/Q188267","display_name":"Programming paradigm","level":2,"score":0.3668000102043152},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.3610000014305115},{"id":"https://openalex.org/C2776187449","wikidata":"https://www.wikidata.org/wiki/Q1513879","display_name":"Natural language generation","level":3,"score":0.3580999970436096},{"id":"https://openalex.org/C184337299","wikidata":"https://www.wikidata.org/wiki/Q1437428","display_name":"Semantics (computer science)","level":2,"score":0.30140000581741333},{"id":"https://openalex.org/C111065885","wikidata":"https://www.wikidata.org/wiki/Q1189053","display_name":"Fuzz testing","level":3,"score":0.3009999990463257},{"id":"https://openalex.org/C74193536","wikidata":"https://www.wikidata.org/wiki/Q574844","display_name":"Kernel (algebra)","level":2,"score":0.2922999858856201},{"id":"https://openalex.org/C7051814","wikidata":"https://www.wikidata.org/wiki/Q1051282","display_name":"Generic programming","level":2,"score":0.2815999984741211},{"id":"https://openalex.org/C95713431","wikidata":"https://www.wikidata.org/wiki/Q631425","display_name":"Vulnerability (computing)","level":2,"score":0.2662999927997589},{"id":"https://openalex.org/C120558287","wikidata":"https://www.wikidata.org/wiki/Q1418502","display_name":"Procedural programming","level":4,"score":0.2662000060081482}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1109/qrs65678.2025.00015","is_oa":false,"landing_page_url":"https://doi.org/10.1109/qrs65678.2025.00015","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"2025 25th International Conference on Software Quality, Reliability and Security (QRS)","raw_type":"proceedings-article"}],"best_oa_location":null,"sustainable_development_goals":[],"awards":[],"funders":[],"has_content":{"pdf":false,"grobid_xml":false},"content_urls":null,"referenced_works_count":28,"referenced_works":["https://openalex.org/W814172419","https://openalex.org/W2065224323","https://openalex.org/W2884106799","https://openalex.org/W2990685757","https://openalex.org/W3001783472","https://openalex.org/W3028950780","https://openalex.org/W3109798265","https://openalex.org/W4233410239","https://openalex.org/W4243266470","https://openalex.org/W4255398023","https://openalex.org/W4308515311","https://openalex.org/W4313909309","https://openalex.org/W4320481230","https://openalex.org/W4388483130","https://openalex.org/W4388629193","https://openalex.org/W4388644506","https://openalex.org/W4391579639","https://openalex.org/W4396242417","https://openalex.org/W4399629579","https://openalex.org/W4399872440","https://openalex.org/W4400276230","https://openalex.org/W4400582613","https://openalex.org/W4400582623","https://openalex.org/W4400614601","https://openalex.org/W4401567960","https://openalex.org/W4402502392","https://openalex.org/W4403935769","https://openalex.org/W4406610428"],"related_works":[],"abstract_inverted_index":{"Rule-based":[0],"static":[1,55,74,126,179],"analysis":[2,75,127],"tools":[3],"are":[4],"widely":[5],"utilized":[6],"for":[7,54,150,195],"their":[8],"high":[9],"customizability.":[10],"However,":[11],"the":[12,21,27,32,47,71,84,134,148,164,209,219,223,232],"creation":[13,53],"of":[14,29,73,138,222,234,241],"effective":[15],"rules":[16,38,113,199],"presents":[17],"significant":[18,48],"challenges,":[19],"including":[20],"considerable":[22],"human":[23,86],"effort":[24,87],"to":[25,69,82,162],"handle":[26],"complexity":[28],"rules,":[30],"and":[31,92,136,170,177,187,206,244],"additional":[33],"costs":[34],"involved":[35],"in":[36,50,90,192,218],"developing":[37],"across":[39,114,200],"various":[40],"programming":[41,116],"languages":[42,117,202],"or":[43,118],"frameworks.":[44,119],"To":[45],"address":[46],"challenges":[49],"manual":[51],"rule":[52,94,102,139,193],"analysis,":[56,172],"this":[57],"paper":[58],"proposes":[59],"a":[60,99],"novel":[61],"framework":[62,78,237],"that":[63],"leverages":[64],"large":[65,156],"language":[66,168],"models":[67],"(LLMs)":[68],"automate":[70],"generation":[72,140,194],"rules.":[76],"The":[77,181],"is":[79],"specifically":[80],"designed":[81],"alleviate":[83],"substantial":[85],"typically":[88],"required":[89],"constructing":[91],"maintaining":[93],"sets.":[95],"Furthermore,":[96],"we":[97],"introduce":[98],"natural":[100,167],"language-mediated":[101],"migration":[103],"methodology,":[104],"which":[105],"ensures":[106],"semantic":[107],"consistency":[108],"when":[109],"transferring":[110],"functionally":[111],"similar":[112],"different":[115],"By":[120],"seamlessly":[121],"integrating":[122],"LLMs":[123],"with":[124,247],"existing":[125],"tools,":[128],"our":[129,235],"approach":[130],"not":[131],"only":[132],"enhances":[133],"scalability":[135],"adaptability":[137],"but":[141],"also":[142],"enables":[143],"efficient":[144],"vulnerability":[145],"scanning":[146],"without":[147],"need":[149],"extensive":[151],"computational":[152],"resources":[153],"such":[154],"as":[155],"GPU":[157],"clusters.":[158],"This":[159,229],"integration":[160],"aims":[161],"bridge":[163],"gap":[165],"between":[166],"understanding":[169],"program":[171],"thereby":[173],"facilitating":[174],"more":[175],"intelligent":[176],"resource-efficient":[178],"analysis.":[180],"method":[182],"achieved":[183],"81.98":[184],"%":[185,189],"grammatical":[186],"74.73":[188],"functional":[190],"validity":[191],"Semgrep,":[196],"while":[197],"migrating":[198],"4":[201],"(Python,":[203],"Java,":[204],"JavaScript,":[205],"Golang).":[207],"On":[208],"real-world":[210],"engineering":[211],"evaluation,":[212],"it":[213],"uncovered":[214],"9":[215],"unknown":[216],"vulnerabilities":[217],"latest":[220],"version":[221],"Linux":[224],"Kernel":[225],"undetectable":[226],"by":[227],"now.":[228],"work":[230],"highlights":[231],"potential":[233],"LLM-driven":[236],"provides":[238],"better":[239],"handling":[240],"corner":[242],"cases":[243],"maintains":[245],"compatibility":[246],"industry-standard":[248],"tools.":[249]},"counts_by_year":[],"updated_date":"2026-07-29T14:22:42.915294","created_date":"2025-10-10T00:00:00"}