{"id":"https://openalex.org/W2998879504","doi":"https://doi.org/10.1109/tdsc.2021.3076142","title":"VulDeeLocator: A Deep Learning-Based Fine-Grained Vulnerability Detector","display_name":"VulDeeLocator: A Deep Learning-Based Fine-Grained Vulnerability Detector","publication_year":2021,"publication_date":"2021-04-27","ids":{"openalex":"https://openalex.org/W2998879504","doi":"https://doi.org/10.1109/tdsc.2021.3076142","mag":"2998879504"},"language":"en","primary_location":{"id":"doi:10.1109/tdsc.2021.3076142","is_oa":false,"landing_page_url":"https://doi.org/10.1109/tdsc.2021.3076142","pdf_url":null,"source":{"id":"https://openalex.org/S133795288","display_name":"IEEE Transactions on Dependable and Secure Computing","issn_l":"1545-5971","issn":["1545-5971","1941-0018","2160-9209"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310320439","host_organization_name":"IEEE Computer Society","host_organization_lineage":["https://openalex.org/P4310320439","https://openalex.org/P4310319808"],"host_organization_lineage_names":["IEEE Computer Society","Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Transactions on Dependable and Secure Computing","raw_type":"journal-article"},"type":"article","indexed_in":["arxiv","crossref"],"open_access":{"is_oa":true,"oa_status":"green","oa_url":"https://arxiv.org/pdf/2001.02350","any_repository_has_fulltext":true},"authorships":[{"author_position":"first","author":{"id":null,"display_name":"Zhen Li","orcid":null},"institutions":[{"id":"https://openalex.org/I47720641","display_name":"Huazhong University of Science and Technology","ror":"https://ror.org/00p991c53","country_code":"CN","type":"education","lineage":["https://openalex.org/I47720641"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Zhen Li","raw_affiliation_strings":["National Engineering Research Center for Big Data Technology and System, Services Computing Technology and System Lab, Cluster and Grid Computing Lab, Big Data Security Engineering Research Center, School of Cyber Science and Engineering, Huazhong University of Science and Technology, Wuhan, China"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"National Engineering Research Center for Big Data Technology and System, Services Computing Technology and System Lab, Cluster and Grid Computing Lab, Big Data Security Engineering Research Center, School of Cyber Science and Engineering, Huazhong University of Science and Technology, Wuhan, China","institution_ids":["https://openalex.org/I47720641"]}]},{"author_position":"middle","author":{"id":null,"display_name":"Deqing Zou","orcid":"https://orcid.org/0000-0001-8534-5048"},"institutions":[{"id":"https://openalex.org/I47720641","display_name":"Huazhong University of Science and Technology","ror":"https://ror.org/00p991c53","country_code":"CN","type":"education","lineage":["https://openalex.org/I47720641"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Deqing Zou","raw_affiliation_strings":["National Engineering Research Center for Big Data Technology and System, Services Computing Technology and System Lab, Cluster and Grid Computing Lab, Big Data Security Engineering Research Center, School of Cyber Science and Engineering, Huazhong University of Science and Technology, Wuhan, China"],"raw_orcid":"https://orcid.org/0000-0001-8534-5048","affiliations":[{"raw_affiliation_string":"National Engineering Research Center for Big Data Technology and System, Services Computing Technology and System Lab, Cluster and Grid Computing Lab, Big Data Security Engineering Research Center, School of Cyber Science and Engineering, Huazhong University of Science and Technology, Wuhan, China","institution_ids":["https://openalex.org/I47720641"]}]},{"author_position":"middle","author":{"id":null,"display_name":"Shouhuai Xu","orcid":"https://orcid.org/0000-0001-8034-0942"},"institutions":[{"id":"https://openalex.org/I888729015","display_name":"University of Colorado Colorado Springs","ror":"https://ror.org/054spjc55","country_code":"US","type":"education","lineage":["https://openalex.org/I888729015"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Shouhuai Xu","raw_affiliation_strings":["Department of Computer Science, University of Colorado Colorado Springs, Colorado Springs, CO, USA"],"raw_orcid":"https://orcid.org/0000-0001-8034-0942","affiliations":[{"raw_affiliation_string":"Department of Computer Science, University of Colorado Colorado Springs, Colorado Springs, CO, USA","institution_ids":["https://openalex.org/I888729015"]}]},{"author_position":"middle","author":{"id":null,"display_name":"Zhaoxuan Chen","orcid":null},"institutions":[{"id":"https://openalex.org/I47720641","display_name":"Huazhong University of Science and Technology","ror":"https://ror.org/00p991c53","country_code":"CN","type":"education","lineage":["https://openalex.org/I47720641"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Zhaoxuan Chen","raw_affiliation_strings":["National Engineering Research Center for Big Data Technology and System, Services Computing Technology and System Lab, Cluster and Grid Computing Lab, Big Data Security Engineering Research Center, School of Computer Science and Technology, Huazhong University of Science and Technology, Wuhan, China"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"National Engineering Research Center for Big Data Technology and System, Services Computing Technology and System Lab, Cluster and Grid Computing Lab, Big Data Security Engineering Research Center, School of Computer Science and Technology, Huazhong University of Science and Technology, Wuhan, China","institution_ids":["https://openalex.org/I47720641"]}]},{"author_position":"middle","author":{"id":null,"display_name":"Yawei Zhu","orcid":null},"institutions":[{"id":"https://openalex.org/I47720641","display_name":"Huazhong University of Science and Technology","ror":"https://ror.org/00p991c53","country_code":"CN","type":"education","lineage":["https://openalex.org/I47720641"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Yawei Zhu","raw_affiliation_strings":["National Engineering Research Center for Big Data Technology and System, Services Computing Technology and System Lab, Cluster and Grid Computing Lab, Big Data Security Engineering Research Center, School of Computer Science and Technology, Huazhong University of Science and Technology, Wuhan, China"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"National Engineering Research Center for Big Data Technology and System, Services Computing Technology and System Lab, Cluster and Grid Computing Lab, Big Data Security Engineering Research Center, School of Computer Science and Technology, Huazhong University of Science and Technology, Wuhan, China","institution_ids":["https://openalex.org/I47720641"]}]},{"author_position":"last","author":{"id":null,"display_name":"Hai Jin","orcid":"https://orcid.org/0000-0002-3934-7605"},"institutions":[{"id":"https://openalex.org/I47720641","display_name":"Huazhong University of Science and Technology","ror":"https://ror.org/00p991c53","country_code":"CN","type":"education","lineage":["https://openalex.org/I47720641"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Hai Jin","raw_affiliation_strings":["National Engineering Research Center for Big Data Technology and System, Services Computing Technology and System Lab, Cluster and Grid Computing Lab, Big Data Security Engineering Research Center, School of Computer Science and Technology, Huazhong University of Science and Technology, Wuhan, China"],"raw_orcid":"https://orcid.org/0000-0002-3934-7605","affiliations":[{"raw_affiliation_string":"National Engineering Research Center for Big Data Technology and System, Services Computing Technology and System Lab, Cluster and Grid Computing Lab, Big Data Security Engineering Research Center, School of Computer Science and Technology, Huazhong University of Science and Technology, Wuhan, China","institution_ids":["https://openalex.org/I47720641"]}]}],"institutions":[],"countries_distinct_count":2,"institutions_distinct_count":2,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":33.0433,"has_fulltext":false,"cited_by_count":204,"citation_normalized_percentile":{"value":0.99781273,"is_in_top_1_percent":true,"is_in_top_10_percent":true},"cited_by_percentile_year":{"min":89,"max":100},"biblio":{"volume":"19","issue":"4","first_page":"2821","last_page":"2837"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T12479","display_name":"Web Application Security Vulnerabilities","score":0.3928000032901764,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T12479","display_name":"Web Application Security Vulnerabilities","score":0.3928000032901764,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10734","display_name":"Information and Cyber Security","score":0.2492000013589859,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10260","display_name":"Software Engineering Research","score":0.13099999725818634,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/vulnerability","display_name":"Vulnerability (computing)","score":0.8047999739646912},{"id":"https://openalex.org/keywords/vulnerability-management","display_name":"Vulnerability management","score":0.6355999708175659},{"id":"https://openalex.org/keywords/vendor","display_name":"Vendor","score":0.5450000166893005},{"id":"https://openalex.org/keywords/software","display_name":"Software","score":0.5335000157356262},{"id":"https://openalex.org/keywords/detector","display_name":"Detector","score":0.4966000020503998},{"id":"https://openalex.org/keywords/variable","display_name":"Variable (mathematics)","score":0.414000004529953},{"id":"https://openalex.org/keywords/code","display_name":"Code (set theory)","score":0.399399995803833},{"id":"https://openalex.org/keywords/macro","display_name":"Macro","score":0.3903000056743622}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.8267999887466431},{"id":"https://openalex.org/C95713431","wikidata":"https://www.wikidata.org/wiki/Q631425","display_name":"Vulnerability (computing)","level":2,"score":0.8047999739646912},{"id":"https://openalex.org/C172776598","wikidata":"https://www.wikidata.org/wiki/Q7943570","display_name":"Vulnerability management","level":4,"score":0.6355999708175659},{"id":"https://openalex.org/C2777338717","wikidata":"https://www.wikidata.org/wiki/Q1762621","display_name":"Vendor","level":2,"score":0.5450000166893005},{"id":"https://openalex.org/C2777904410","wikidata":"https://www.wikidata.org/wiki/Q7397","display_name":"Software","level":2,"score":0.5335000157356262},{"id":"https://openalex.org/C94915269","wikidata":"https://www.wikidata.org/wiki/Q1834857","display_name":"Detector","level":2,"score":0.4966000020503998},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.43790000677108765},{"id":"https://openalex.org/C182365436","wikidata":"https://www.wikidata.org/wiki/Q50701","display_name":"Variable (mathematics)","level":2,"score":0.414000004529953},{"id":"https://openalex.org/C2776760102","wikidata":"https://www.wikidata.org/wiki/Q5139990","display_name":"Code (set theory)","level":3,"score":0.399399995803833},{"id":"https://openalex.org/C166955791","wikidata":"https://www.wikidata.org/wiki/Q629579","display_name":"Macro","level":2,"score":0.3903000056743622},{"id":"https://openalex.org/C1009929","wikidata":"https://www.wikidata.org/wiki/Q179550","display_name":"Software bug","level":3,"score":0.3580999970436096},{"id":"https://openalex.org/C160191386","wikidata":"https://www.wikidata.org/wiki/Q868299","display_name":"Control flow","level":2,"score":0.35429999232292175},{"id":"https://openalex.org/C2779662365","wikidata":"https://www.wikidata.org/wiki/Q5416694","display_name":"Event (particle physics)","level":2,"score":0.34700000286102295},{"id":"https://openalex.org/C2775924081","wikidata":"https://www.wikidata.org/wiki/Q55608371","display_name":"Control (management)","level":2,"score":0.3402999937534332},{"id":"https://openalex.org/C2776916960","wikidata":"https://www.wikidata.org/wiki/Q637156","display_name":"Warrant","level":2,"score":0.3230000138282776},{"id":"https://openalex.org/C124101348","wikidata":"https://www.wikidata.org/wiki/Q172491","display_name":"Data mining","level":1,"score":0.30640000104904175},{"id":"https://openalex.org/C165696696","wikidata":"https://www.wikidata.org/wiki/Q11287","display_name":"Exploit","level":2,"score":0.30390000343322754},{"id":"https://openalex.org/C184337299","wikidata":"https://www.wikidata.org/wiki/Q1437428","display_name":"Semantics (computer science)","level":2,"score":0.3012999892234802},{"id":"https://openalex.org/C167063184","wikidata":"https://www.wikidata.org/wiki/Q1400839","display_name":"Vulnerability assessment","level":3,"score":0.289900004863739},{"id":"https://openalex.org/C113843644","wikidata":"https://www.wikidata.org/wiki/Q901882","display_name":"Interface (matter)","level":4,"score":0.2526000142097473}],"mesh":[],"locations_count":2,"locations":[{"id":"doi:10.1109/tdsc.2021.3076142","is_oa":false,"landing_page_url":"https://doi.org/10.1109/tdsc.2021.3076142","pdf_url":null,"source":{"id":"https://openalex.org/S133795288","display_name":"IEEE Transactions on Dependable and Secure Computing","issn_l":"1545-5971","issn":["1545-5971","1941-0018","2160-9209"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310320439","host_organization_name":"IEEE Computer Society","host_organization_lineage":["https://openalex.org/P4310320439","https://openalex.org/P4310319808"],"host_organization_lineage_names":["IEEE Computer Society","Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Transactions on Dependable and Secure Computing","raw_type":"journal-article"},{"id":"pmh:oai:arXiv.org:2001.02350","is_oa":true,"landing_page_url":"http://arxiv.org/abs/2001.02350","pdf_url":"https://arxiv.org/pdf/2001.02350","source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":null,"issn":null,"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"text"}],"best_oa_location":{"id":"pmh:oai:arXiv.org:2001.02350","is_oa":true,"landing_page_url":"http://arxiv.org/abs/2001.02350","pdf_url":"https://arxiv.org/pdf/2001.02350","source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":null,"issn":null,"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"text"},"sustainable_development_goals":[],"awards":[{"id":"https://openalex.org/G1104464718","display_name":null,"funder_award_id":"#2122631","funder_id":"https://openalex.org/F4320335353","funder_display_name":"National Science Foundation of Sri Lanka"},{"id":"https://openalex.org/G247989327","display_name":null,"funder_award_id":"#1736209","funder_id":"https://openalex.org/F4320335353","funder_display_name":"National Science Foundation of Sri Lanka"},{"id":"https://openalex.org/G2732032965","display_name":"\u57fa\u4e8e\u6df1\u5ea6\u5b66\u4e60\u7684\u8f6f\u4ef6\u6f0f\u6d1e\u667a\u80fd\u68c0\u6d4b\u673a\u5236\u7814\u7a76","funder_award_id":"61802106","funder_id":"https://openalex.org/F4320321001","funder_display_name":"National Natural Science Foundation of China"},{"id":"https://openalex.org/G5359374254","display_name":null,"funder_award_id":"F2020201016","funder_id":"https://openalex.org/F4320322163","funder_display_name":"Natural Science Foundation of Hebei Province"},{"id":"https://openalex.org/G8256441382","display_name":null,"funder_award_id":"#1814825","funder_id":"https://openalex.org/F4320335353","funder_display_name":"National Science Foundation of Sri Lanka"}],"funders":[{"id":"https://openalex.org/F4320321001","display_name":"National Natural Science Foundation of China","ror":"https://ror.org/01h0zpd94"},{"id":"https://openalex.org/F4320321883","display_name":"Huazhong University of Science and Technology","ror":"https://ror.org/00p991c53"},{"id":"https://openalex.org/F4320322163","display_name":"Natural Science Foundation of Hebei Province","ror":"https://ror.org/01h0zpd94"},{"id":"https://openalex.org/F4320324851","display_name":"Hebei University","ror":"https://ror.org/01p884a79"},{"id":"https://openalex.org/F4320335353","display_name":"National Science Foundation of Sri Lanka","ror":"https://ror.org/010xaa060"}],"has_content":{"pdf":false,"grobid_xml":false},"content_urls":null,"referenced_works_count":36,"referenced_works":["https://openalex.org/W1563577331","https://openalex.org/W1950030762","https://openalex.org/W1990762361","https://openalex.org/W1992114977","https://openalex.org/W2028820179","https://openalex.org/W2070249305","https://openalex.org/W2165004968","https://openalex.org/W2166336492","https://openalex.org/W2278854381","https://openalex.org/W2297419069","https://openalex.org/W2487875201","https://openalex.org/W2559935471","https://openalex.org/W2564147261","https://openalex.org/W2634106992","https://openalex.org/W2765858138","https://openalex.org/W2767875428","https://openalex.org/W2781491433","https://openalex.org/W2794670092","https://openalex.org/W2796200341","https://openalex.org/W2809885387","https://openalex.org/W2884017574","https://openalex.org/W2885030880","https://openalex.org/W2899171197","https://openalex.org/W2906628499","https://openalex.org/W2962960733","https://openalex.org/W2963764936","https://openalex.org/W2965861627","https://openalex.org/W2976184969","https://openalex.org/W2978569165","https://openalex.org/W2990257819","https://openalex.org/W3155649056","https://openalex.org/W4212874595","https://openalex.org/W4246166885","https://openalex.org/W4299627282","https://openalex.org/W6610773549","https://openalex.org/W6767260250"],"related_works":[],"abstract_inverted_index":{"Automatically":[0],"detecting":[1],"software":[2,166],"vulnerabilities":[3,172,178],"is":[4],"an":[5],"important":[6],"problem":[7],"that":[8,33,49],"has":[9],"attracted":[10],"much":[11],"attention":[12],"from":[13,163],"the":[14,25,30,77,92,143,183,190,201],"academic":[15],"research":[16],"community.":[17],"However,":[18],"existing":[19],"vulnerability":[20,26,47],"detectors":[21],"still":[22],"cannot":[23],"achieve":[24,52,118],"detection":[27,55],"capability":[28,56],"and":[29,57,100,111,115,140],"locating":[31,60,120],"precision":[32],"would":[34],"warrant":[35],"their":[36,101],"adoption":[37],"for":[38],"real-world":[39,165],"use.":[40],"In":[41,76],"this":[42],"article,":[43],"we":[44,82],"present":[45],"a":[46,53,58],"detector":[48],"can":[50],"simultaneously":[51],"high":[54,59,119],"precision,":[61],"dubbed":[62],"<underline":[63,67,72],"xmlns:mml=\"http://www.w3.org/1998/Math/MathML\"":[64,68,73,147],"xmlns:xlink=\"http://www.w3.org/1999/xlink\">Vul</u>":[65],"nerability":[66],"xmlns:xlink=\"http://www.w3.org/1999/xlink\">Dee</u>":[69],"p":[70],"learning-based":[71],"xmlns:xlink=\"http://www.w3.org/1999/xlink\">Locator</u>":[74],"(VulDeeLocator).":[75],"course":[78],"of":[79,94,145,154,203],"designing":[80],"VulDeeLocator,":[81],"encounter":[83],"difficulties":[84,125],"including":[85],"how":[86,105,116],"to":[87,106,117,135,150,158,180],"accommodate":[88,107,136],"semantic":[89,138],"relations":[90],"between":[91],"definitions":[93],"types":[95],"as":[96,98],"well":[97],"macros":[99],"uses":[102],"across":[103],"files,":[104],"accurate":[108],"control":[109],"flows":[110],"variable":[112],"define-use":[113],"relations,":[114],"precision.":[121],"We":[122],"solve":[123],"these":[124],"by":[126,200],"using":[127,142],"two":[128,185],"innovative":[129],"ideas:":[130],"(i)":[131],"leveraging":[132],"intermediate":[133],"code":[134],"extra":[137],"information,":[139],"(ii)":[141],"notion":[144],"<italic":[146],"xmlns:xlink=\"http://www.w3.org/1999/xlink\">granularity":[148],"refinement</i>":[149],"pin":[151],"down":[152],"locations":[153],"vulnerabilities.":[155],"When":[156],"applied":[157],"200":[159],"files":[160],"randomly":[161],"selected":[162],"three":[164],"products,":[167],"VulDeeLocator":[168],"detects":[169],"18":[170],"confirmed":[171],"(i.e.,":[173],"true-positives).":[174],"Among":[175],"them,":[176],"16":[177],"correspond":[179],"known":[181],"vulnerabilities;":[182],"other":[184],"are":[186],"not":[187],"reported":[188],"in":[189],"National":[191],"Vulnerability":[192],"Database":[193],"(NVD)":[194],"but":[195],"have":[196],"been":[197],"\u201csilently\u201d":[198],"patched":[199],"vendor":[202],"Libav":[204],"when":[205],"releasing":[206],"newer":[207],"versions.":[208]},"counts_by_year":[{"year":2026,"cited_by_count":23},{"year":2025,"cited_by_count":63},{"year":2024,"cited_by_count":55},{"year":2023,"cited_by_count":38},{"year":2022,"cited_by_count":17},{"year":2021,"cited_by_count":7},{"year":2020,"cited_by_count":1}],"updated_date":"2026-07-21T08:15:58.654021","created_date":"2020-01-23T00:00:00"}