{"id":"https://openalex.org/W4285821122","doi":"https://doi.org/10.1109/tdsc.2022.3192419","title":"How About Bug-Triggering Paths? - Understanding and Characterizing Learning-Based Vulnerability Detectors","display_name":"How About Bug-Triggering Paths? - Understanding and Characterizing Learning-Based Vulnerability Detectors","publication_year":2022,"publication_date":"2022-07-19","ids":{"openalex":"https://openalex.org/W4285821122","doi":"https://doi.org/10.1109/tdsc.2022.3192419"},"language":"en","primary_location":{"id":"doi:10.1109/tdsc.2022.3192419","is_oa":false,"landing_page_url":"https://doi.org/10.1109/tdsc.2022.3192419","pdf_url":null,"source":{"id":"https://openalex.org/S133795288","display_name":"IEEE Transactions on Dependable and Secure Computing","issn_l":"1545-5971","issn":["1545-5971","1941-0018","2160-9209"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310320439","host_organization_name":"IEEE Computer Society","host_organization_lineage":["https://openalex.org/P4310320439","https://openalex.org/P4310319808"],"host_organization_lineage_names":["IEEE Computer Society","Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Transactions on Dependable and Secure Computing","raw_type":"journal-article"},"type":"article","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5036194526","display_name":"Xiao Cheng","orcid":"https://orcid.org/0000-0001-5456-3827"},"institutions":[{"id":"https://openalex.org/I114017466","display_name":"University of Technology Sydney","ror":"https://ror.org/03f0f6041","country_code":"AU","type":"education","lineage":["https://openalex.org/I114017466"]}],"countries":["AU"],"is_corresponding":false,"raw_author_name":"Xiao Cheng","raw_affiliation_strings":["University of Technology Sydney, Ultimo, NSW, Australia"],"raw_orcid":"https://orcid.org/0000-0001-5456-3827","affiliations":[{"raw_affiliation_string":"University of Technology Sydney, Ultimo, NSW, Australia","institution_ids":["https://openalex.org/I114017466"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5101223431","display_name":"Xu Nie","orcid":"https://orcid.org/0000-0002-7517-8394"},"institutions":[{"id":"https://openalex.org/I139759216","display_name":"Beijing University of Posts and Telecommunications","ror":"https://ror.org/04w9fbh59","country_code":"CN","type":"education","lineage":["https://openalex.org/I139759216"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Xu Nie","raw_affiliation_strings":["Beijing University of Posts and Telecommunications, Beijing, China"],"raw_orcid":"https://orcid.org/0000-0002-7517-8394","affiliations":[{"raw_affiliation_string":"Beijing University of Posts and Telecommunications, Beijing, China","institution_ids":["https://openalex.org/I139759216"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5047202892","display_name":"Ningke Li","orcid":"https://orcid.org/0000-0003-0270-1372"},"institutions":[{"id":"https://openalex.org/I139759216","display_name":"Beijing University of Posts and Telecommunications","ror":"https://ror.org/04w9fbh59","country_code":"CN","type":"education","lineage":["https://openalex.org/I139759216"]},{"id":"https://openalex.org/I47720641","display_name":"Huazhong University of Science and Technology","ror":"https://ror.org/00p991c53","country_code":"CN","type":"education","lineage":["https://openalex.org/I47720641"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Ningke Li","raw_affiliation_strings":["Huazhong University of Science and Technology, Wuhan, Hubei, China","Beijing University of Posts and Telecommunications, Beijing, China"],"raw_orcid":"https://orcid.org/0000-0003-0270-1372","affiliations":[{"raw_affiliation_string":"Huazhong University of Science and Technology, Wuhan, Hubei, China","institution_ids":["https://openalex.org/I47720641"]},{"raw_affiliation_string":"Beijing University of Posts and Telecommunications, Beijing, China","institution_ids":["https://openalex.org/I139759216"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5115695530","display_name":"Haoyu Wang","orcid":"https://orcid.org/0000-0003-1100-8633"},"institutions":[{"id":"https://openalex.org/I47720641","display_name":"Huazhong University of Science and Technology","ror":"https://ror.org/00p991c53","country_code":"CN","type":"education","lineage":["https://openalex.org/I47720641"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Haoyu Wang","raw_affiliation_strings":["Huazhong University of Science and Technology, Wuhan, Hubei, China"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Huazhong University of Science and Technology, Wuhan, Hubei, China","institution_ids":["https://openalex.org/I47720641"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5100459073","display_name":"Zheng Zheng","orcid":"https://orcid.org/0000-0001-7922-9067"},"institutions":[{"id":"https://openalex.org/I114017466","display_name":"University of Technology Sydney","ror":"https://ror.org/03f0f6041","country_code":"AU","type":"education","lineage":["https://openalex.org/I114017466"]},{"id":"https://openalex.org/I82880672","display_name":"Beihang University","ror":"https://ror.org/00wk2mp56","country_code":"CN","type":"education","lineage":["https://openalex.org/I82880672"]}],"countries":["AU","CN"],"is_corresponding":false,"raw_author_name":"Zheng Zheng","raw_affiliation_strings":["Beihang University, Beijing, China","University of Technology Sydney, Australia"],"raw_orcid":"https://orcid.org/0000-0001-7922-9067","affiliations":[{"raw_affiliation_string":"Beihang University, Beijing, China","institution_ids":["https://openalex.org/I82880672"]},{"raw_affiliation_string":"University of Technology Sydney, Australia","institution_ids":["https://openalex.org/I114017466"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5053058502","display_name":"Yulei Sui","orcid":"https://orcid.org/0000-0002-9510-6574"},"institutions":[{"id":"https://openalex.org/I114017466","display_name":"University of Technology Sydney","ror":"https://ror.org/03f0f6041","country_code":"AU","type":"education","lineage":["https://openalex.org/I114017466"]}],"countries":["AU"],"is_corresponding":false,"raw_author_name":"Yulei Sui","raw_affiliation_strings":["University of Technology Sydney, Ultimo, NSW, Australia"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"University of Technology Sydney, Ultimo, NSW, Australia","institution_ids":["https://openalex.org/I114017466"]}]}],"institutions":[],"countries_distinct_count":2,"institutions_distinct_count":4,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":12.5077,"has_fulltext":false,"cited_by_count":42,"citation_normalized_percentile":{"value":0.9866107,"is_in_top_1_percent":false,"is_in_top_10_percent":true},"cited_by_percentile_year":{"min":97,"max":100},"biblio":{"volume":"21","issue":"2","first_page":"542","last_page":"558"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10260","display_name":"Software Engineering Research","score":0.9997000098228455,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10260","display_name":"Software Engineering Research","score":0.9997000098228455,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":0.9973000288009644,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T12423","display_name":"Software Reliability and Analysis Research","score":0.996999979019165,"subfield":{"id":"https://openalex.org/subfields/1712","display_name":"Software"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.8288654088973999},{"id":"https://openalex.org/keywords/machine-learning","display_name":"Machine learning","score":0.740416407585144},{"id":"https://openalex.org/keywords/artificial-intelligence","display_name":"Artificial intelligence","score":0.6818451285362244},{"id":"https://openalex.org/keywords/deep-learning","display_name":"Deep learning","score":0.5658798217773438},{"id":"https://openalex.org/keywords/context","display_name":"Context (archaeology)","score":0.557753324508667},{"id":"https://openalex.org/keywords/supervised-learning","display_name":"Supervised learning","score":0.470575749874115},{"id":"https://openalex.org/keywords/vulnerability","display_name":"Vulnerability (computing)","score":0.434786319732666},{"id":"https://openalex.org/keywords/key","display_name":"Key (lock)","score":0.41649648547172546},{"id":"https://openalex.org/keywords/code","display_name":"Code (set theory)","score":0.41353845596313477},{"id":"https://openalex.org/keywords/software-bug","display_name":"Software bug","score":0.41021671891212463},{"id":"https://openalex.org/keywords/artificial-neural-network","display_name":"Artificial neural network","score":0.1905338168144226},{"id":"https://openalex.org/keywords/software","display_name":"Software","score":0.1791030466556549},{"id":"https://openalex.org/keywords/set","display_name":"Set (abstract data type)","score":0.1280137002468109}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.8288654088973999},{"id":"https://openalex.org/C119857082","wikidata":"https://www.wikidata.org/wiki/Q2539","display_name":"Machine learning","level":1,"score":0.740416407585144},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.6818451285362244},{"id":"https://openalex.org/C108583219","wikidata":"https://www.wikidata.org/wiki/Q197536","display_name":"Deep learning","level":2,"score":0.5658798217773438},{"id":"https://openalex.org/C2779343474","wikidata":"https://www.wikidata.org/wiki/Q3109175","display_name":"Context (archaeology)","level":2,"score":0.557753324508667},{"id":"https://openalex.org/C136389625","wikidata":"https://www.wikidata.org/wiki/Q334384","display_name":"Supervised learning","level":3,"score":0.470575749874115},{"id":"https://openalex.org/C95713431","wikidata":"https://www.wikidata.org/wiki/Q631425","display_name":"Vulnerability (computing)","level":2,"score":0.434786319732666},{"id":"https://openalex.org/C26517878","wikidata":"https://www.wikidata.org/wiki/Q228039","display_name":"Key (lock)","level":2,"score":0.41649648547172546},{"id":"https://openalex.org/C2776760102","wikidata":"https://www.wikidata.org/wiki/Q5139990","display_name":"Code (set theory)","level":3,"score":0.41353845596313477},{"id":"https://openalex.org/C1009929","wikidata":"https://www.wikidata.org/wiki/Q179550","display_name":"Software bug","level":3,"score":0.41021671891212463},{"id":"https://openalex.org/C50644808","wikidata":"https://www.wikidata.org/wiki/Q192776","display_name":"Artificial neural network","level":2,"score":0.1905338168144226},{"id":"https://openalex.org/C2777904410","wikidata":"https://www.wikidata.org/wiki/Q7397","display_name":"Software","level":2,"score":0.1791030466556549},{"id":"https://openalex.org/C177264268","wikidata":"https://www.wikidata.org/wiki/Q1514741","display_name":"Set (abstract data type)","level":2,"score":0.1280137002468109},{"id":"https://openalex.org/C86803240","wikidata":"https://www.wikidata.org/wiki/Q420","display_name":"Biology","level":0,"score":0.0},{"id":"https://openalex.org/C199360897","wikidata":"https://www.wikidata.org/wiki/Q9143","display_name":"Programming language","level":1,"score":0.0},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.0},{"id":"https://openalex.org/C151730666","wikidata":"https://www.wikidata.org/wiki/Q7205","display_name":"Paleontology","level":1,"score":0.0}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1109/tdsc.2022.3192419","is_oa":false,"landing_page_url":"https://doi.org/10.1109/tdsc.2022.3192419","pdf_url":null,"source":{"id":"https://openalex.org/S133795288","display_name":"IEEE Transactions on Dependable and Secure Computing","issn_l":"1545-5971","issn":["1545-5971","1941-0018","2160-9209"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310320439","host_organization_name":"IEEE Computer Society","host_organization_lineage":["https://openalex.org/P4310320439","https://openalex.org/P4310319808"],"host_organization_lineage_names":["IEEE Computer Society","Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Transactions on Dependable and Secure Computing","raw_type":"journal-article"}],"best_oa_location":null,"sustainable_development_goals":[],"awards":[],"funders":[],"has_content":{"grobid_xml":false,"pdf":false},"content_urls":null,"referenced_works_count":66,"referenced_works":["https://openalex.org/W46012774","https://openalex.org/W327452528","https://openalex.org/W1563577331","https://openalex.org/W1992012690","https://openalex.org/W2028820179","https://openalex.org/W2072385532","https://openalex.org/W2079735306","https://openalex.org/W2108104925","https://openalex.org/W2137952932","https://openalex.org/W2148143831","https://openalex.org/W2297419069","https://openalex.org/W2297774820","https://openalex.org/W2360967250","https://openalex.org/W2592125937","https://openalex.org/W2618574054","https://openalex.org/W2741201074","https://openalex.org/W2781491433","https://openalex.org/W2794889478","https://openalex.org/W2806718802","https://openalex.org/W2885030880","https://openalex.org/W2889225139","https://openalex.org/W2955426500","https://openalex.org/W2956062508","https://openalex.org/W2962960733","https://openalex.org/W2964015378","https://openalex.org/W2964150020","https://openalex.org/W2976184969","https://openalex.org/W2982577744","https://openalex.org/W2998879504","https://openalex.org/W3007993592","https://openalex.org/W3091588759","https://openalex.org/W3092430836","https://openalex.org/W3101228802","https://openalex.org/W3104849875","https://openalex.org/W3107793421","https://openalex.org/W3161071537","https://openalex.org/W3163206498","https://openalex.org/W3166095789","https://openalex.org/W3173766797","https://openalex.org/W3177116043","https://openalex.org/W3194346579","https://openalex.org/W3199263538","https://openalex.org/W4220908681","https://openalex.org/W4225134668","https://openalex.org/W4225673889","https://openalex.org/W4243606051","https://openalex.org/W4251676373","https://openalex.org/W4254647327","https://openalex.org/W4284668601","https://openalex.org/W6630256684","https://openalex.org/W6637688222","https://openalex.org/W6638733343","https://openalex.org/W6654930536","https://openalex.org/W6675802400","https://openalex.org/W6679775712","https://openalex.org/W6682691769","https://openalex.org/W6684941089","https://openalex.org/W6690815549","https://openalex.org/W6691431627","https://openalex.org/W6726873649","https://openalex.org/W6737985840","https://openalex.org/W6739901393","https://openalex.org/W6754575879","https://openalex.org/W6754601402","https://openalex.org/W6767260250","https://openalex.org/W6767288045"],"related_works":["https://openalex.org/W4375867731","https://openalex.org/W2611989081","https://openalex.org/W2731899572","https://openalex.org/W4230611425","https://openalex.org/W4294635752","https://openalex.org/W4304166257","https://openalex.org/W2095999892","https://openalex.org/W4383066092","https://openalex.org/W3215138031","https://openalex.org/W4286530553"],"abstract_inverted_index":{"Machine":[0],"learning":[1,7,29,69,148],"and":[2,112,132,175,218,237,261,271],"its":[3],"promising":[4,123],"branch":[5],"deep":[6,28],"have":[8,23],"proven":[9],"to":[10,37,62,79,163,267],"be":[11,130,195],"effective":[12,170],"in":[13,26,199,223,263],"a":[14,82,85,89,94,188,203],"wide":[15],"range":[16],"of":[17,51,100,139,179,202,225,241,245],"application":[18],"domains.":[19],"Recently,":[20],"several":[21,258],"efforts":[22],"shown":[24],"success":[25],"applying":[27],"techniques":[30],"for":[31,172,273],"automatic":[32],"vulnerability":[33,95],"discovery,":[34],"as":[35,197],"alternatives":[36],"traditional":[38],"static":[39,180,220],"bug":[40,173,181,221,277],"detection.":[41,182],"In":[42,115,206],"principle,":[43],"these":[44,65,101],"learning-based":[45,141,216,247,276],"approaches":[46,66,217],"are":[47,72,161],"built":[48],"on":[49,58,68],"top":[50],"classification":[52,153,265],"models":[53,70,102,149,266],"using":[54,231],"supervised":[55],"learning.":[56],"Depending":[57],"the":[59,125,137,146,152,176,200,212,239,242],"different":[60,250],"granularities":[61],"detect":[63],"vulnerabilities,":[64],"rely":[67],"which":[71,167],"typically":[73],"trained":[74],"with":[75],"well-labeled":[76],"source":[77],"code":[78,91],"predict":[80],"whether":[81],"program":[83,86,158,189],"method,":[84],"slice,":[87],"or":[88,96,155,191],"particular":[90],"line":[92],"contains":[93],"not.":[97],"The":[98],"effectiveness":[99,138],"is":[103,144,168,186],"normally":[104],"evaluated":[105],"against":[106],"conventional":[107,219],"metrics":[108,227,230],"including":[109],"precision,":[110],"recall":[111],"F1":[113],"score.":[114],"this":[116,207],"paper,":[117],"we":[118,209],"show":[119],"that":[120,187],"despite":[121],"yielding":[122],"numbers,":[124],"above":[126],"evaluation":[127],"strategy":[128],"can":[129,193],"insufficient":[131],"even":[133],"misleading":[134],"when":[135],"evaluating":[136],"current":[140],"approaches.":[142],"This":[143],"because":[145],"underlying":[147],"only":[150,194],"produce":[151],"results":[154,244],"report":[156],"individual/isolated":[157],"statements,":[159],"but":[160],"unable":[162],"pinpoint":[164,268],"bug-triggering":[165,204,232,269],"paths,":[166],"an":[169],"way":[171],"fixing":[174],"main":[177],"aim":[178],"Our":[183],"key":[184,259],"insight":[185],"method":[190],"statement":[192],"stated":[196],"vulnerable":[198],"context":[201],"path.":[205],"work,":[208],"systematically":[210],"study":[211,256],"gap":[213],"between":[214],"recent":[215],"detectors":[222,248],"terms":[224],"fine-grained":[226],"called":[228],"BTP":[229],"paths.":[233],"We":[234],"then":[235],"characterize":[236],"compare":[238],"quality":[240],"prediction":[243],"existing":[246],"under":[249],"granularities.":[251],"Finally,":[252],"our":[253],"comprehensive":[254],"empirical":[255],"reveals":[257],"issues":[260],"challenges":[262],"developing":[264],"paths":[270],"calls":[272],"more":[274],"advanced":[275],"detection":[278],"techniques.":[279]},"counts_by_year":[{"year":2026,"cited_by_count":2},{"year":2025,"cited_by_count":10},{"year":2024,"cited_by_count":14},{"year":2023,"cited_by_count":16}],"updated_date":"2026-07-29T09:40:50.615796","created_date":"2025-10-10T00:00:00"}