{"id":"https://openalex.org/W4412605456","doi":"https://doi.org/10.1109/tse.2025.3591934","title":"CGP-Tuning: Structure-Aware Soft Prompt Tuning for Code Vulnerability Detection","display_name":"CGP-Tuning: Structure-Aware Soft Prompt Tuning for Code Vulnerability Detection","publication_year":2025,"publication_date":"2025-07-23","ids":{"openalex":"https://openalex.org/W4412605456","doi":"https://doi.org/10.1109/tse.2025.3591934"},"language":"en","primary_location":{"id":"doi:10.1109/tse.2025.3591934","is_oa":false,"landing_page_url":"https://doi.org/10.1109/tse.2025.3591934","pdf_url":null,"source":{"id":"https://openalex.org/S8351582","display_name":"IEEE Transactions on Software Engineering","issn_l":"0098-5589","issn":["0098-5589","1939-3520","2326-3881"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310320439","host_organization_name":"IEEE Computer Society","host_organization_lineage":["https://openalex.org/P4310320439","https://openalex.org/P4310319808"],"host_organization_lineage_names":["IEEE Computer Society","Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Transactions on Software Engineering","raw_type":"journal-article"},"type":"article","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5115829777","display_name":"Ruijun Feng","orcid":null},"institutions":[{"id":"https://openalex.org/I31746571","display_name":"UNSW Sydney","ror":"https://ror.org/03r8z3t63","country_code":"AU","type":"education","lineage":["https://openalex.org/I31746571"]}],"countries":["AU"],"is_corresponding":false,"raw_author_name":"Ruijun Feng","raw_affiliation_strings":["School of Computer Science and Engineering, University of New South Wales (UNSW), Sydney, NSW, Australia","School of Computer Science and Engineering, University of New South Wales (UNSW), Sydney, Australia"],"raw_orcid":"https://orcid.org/0000-0003-2167-2968","affiliations":[{"raw_affiliation_string":"School of Computer Science and Engineering, University of New South Wales (UNSW), Sydney, NSW, Australia","institution_ids":["https://openalex.org/I31746571"]},{"raw_affiliation_string":"School of Computer Science and Engineering, University of New South Wales (UNSW), Sydney, Australia","institution_ids":["https://openalex.org/I31746571"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5053148078","display_name":"Hammond Pearce","orcid":"https://orcid.org/0000-0002-3488-7004"},"institutions":[{"id":"https://openalex.org/I31746571","display_name":"UNSW Sydney","ror":"https://ror.org/03r8z3t63","country_code":"AU","type":"education","lineage":["https://openalex.org/I31746571"]}],"countries":["AU"],"is_corresponding":false,"raw_author_name":"Hammond Pearce","raw_affiliation_strings":["School of Computer Science and Engineering, University of New South Wales (UNSW), Sydney, NSW, Australia","School of Computer Science and Engineering, University of New South Wales (UNSW), Sydney, Australia"],"raw_orcid":"https://orcid.org/0000-0002-3488-7004","affiliations":[{"raw_affiliation_string":"School of Computer Science and Engineering, University of New South Wales (UNSW), Sydney, NSW, Australia","institution_ids":["https://openalex.org/I31746571"]},{"raw_affiliation_string":"School of Computer Science and Engineering, University of New South Wales (UNSW), Sydney, Australia","institution_ids":["https://openalex.org/I31746571"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5073369636","display_name":"Pietro Liguori","orcid":"https://orcid.org/0000-0001-5579-1696"},"institutions":[{"id":"https://openalex.org/I71267560","display_name":"University of Naples Federico II","ror":"https://ror.org/05290cv24","country_code":"IT","type":"education","lineage":["https://openalex.org/I71267560"]}],"countries":["IT"],"is_corresponding":false,"raw_author_name":"Pietro Liguori","raw_affiliation_strings":["Department of Electrical Engineering and Information Technology, University of Naples Federico II, Napoli, Italy","Department of Electrical Engineering and Information Technology, University of Naples Federico II, Italy"],"raw_orcid":"https://orcid.org/0000-0001-5579-1696","affiliations":[{"raw_affiliation_string":"Department of Electrical Engineering and Information Technology, University of Naples Federico II, Napoli, Italy","institution_ids":["https://openalex.org/I71267560"]},{"raw_affiliation_string":"Department of Electrical Engineering and Information Technology, University of Naples Federico II, Italy","institution_ids":["https://openalex.org/I71267560"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5053058502","display_name":"Yulei Sui","orcid":"https://orcid.org/0000-0002-9510-6574"},"institutions":[{"id":"https://openalex.org/I31746571","display_name":"UNSW Sydney","ror":"https://ror.org/03r8z3t63","country_code":"AU","type":"education","lineage":["https://openalex.org/I31746571"]}],"countries":["AU"],"is_corresponding":false,"raw_author_name":"Yulei Sui","raw_affiliation_strings":["School of Computer Science and Engineering, University of New South Wales (UNSW), Sydney, NSW, Australia","School of Computer Science and Engineering, University of New South Wales (UNSW), Sydney, Australia"],"raw_orcid":"https://orcid.org/0000-0002-9510-6574","affiliations":[{"raw_affiliation_string":"School of Computer Science and Engineering, University of New South Wales (UNSW), Sydney, NSW, Australia","institution_ids":["https://openalex.org/I31746571"]},{"raw_affiliation_string":"School of Computer Science and Engineering, University of New South Wales (UNSW), Sydney, Australia","institution_ids":["https://openalex.org/I31746571"]}]}],"institutions":[],"countries_distinct_count":2,"institutions_distinct_count":2,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":6.8734,"has_fulltext":false,"cited_by_count":6,"citation_normalized_percentile":{"value":0.96732496,"is_in_top_1_percent":false,"is_in_top_10_percent":true},"cited_by_percentile_year":{"min":91,"max":99},"biblio":{"volume":"51","issue":"9","first_page":"2533","last_page":"2548"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10743","display_name":"Software Testing and Debugging Techniques","score":0.9966999888420105,"subfield":{"id":"https://openalex.org/subfields/1712","display_name":"Software"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10743","display_name":"Software Testing and Debugging Techniques","score":0.9966999888420105,"subfield":{"id":"https://openalex.org/subfields/1712","display_name":"Software"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":0.9962999820709229,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11424","display_name":"Security and Verification in Computing","score":0.9962000250816345,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.8686589002609253},{"id":"https://openalex.org/keywords/vulnerability","display_name":"Vulnerability (computing)","score":0.6916175484657288},{"id":"https://openalex.org/keywords/code","display_name":"Code (set theory)","score":0.5885208249092102},{"id":"https://openalex.org/keywords/distributed-computing","display_name":"Distributed computing","score":0.3322945237159729},{"id":"https://openalex.org/keywords/programming-language","display_name":"Programming language","score":0.30786949396133423},{"id":"https://openalex.org/keywords/computer-security","display_name":"Computer security","score":0.266353964805603}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.8686589002609253},{"id":"https://openalex.org/C95713431","wikidata":"https://www.wikidata.org/wiki/Q631425","display_name":"Vulnerability (computing)","level":2,"score":0.6916175484657288},{"id":"https://openalex.org/C2776760102","wikidata":"https://www.wikidata.org/wiki/Q5139990","display_name":"Code (set theory)","level":3,"score":0.5885208249092102},{"id":"https://openalex.org/C120314980","wikidata":"https://www.wikidata.org/wiki/Q180634","display_name":"Distributed computing","level":1,"score":0.3322945237159729},{"id":"https://openalex.org/C199360897","wikidata":"https://www.wikidata.org/wiki/Q9143","display_name":"Programming language","level":1,"score":0.30786949396133423},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.266353964805603},{"id":"https://openalex.org/C177264268","wikidata":"https://www.wikidata.org/wiki/Q1514741","display_name":"Set (abstract data type)","level":2,"score":0.0}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1109/tse.2025.3591934","is_oa":false,"landing_page_url":"https://doi.org/10.1109/tse.2025.3591934","pdf_url":null,"source":{"id":"https://openalex.org/S8351582","display_name":"IEEE Transactions on Software Engineering","issn_l":"0098-5589","issn":["0098-5589","1939-3520","2326-3881"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310320439","host_organization_name":"IEEE Computer Society","host_organization_lineage":["https://openalex.org/P4310320439","https://openalex.org/P4310319808"],"host_organization_lineage_names":["IEEE Computer Society","Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Transactions on Software Engineering","raw_type":"journal-article"}],"best_oa_location":null,"sustainable_development_goals":[],"awards":[{"id":"https://openalex.org/G2523843086","display_name":"Certifying Code Language Models to Fortify Software Engineering Foundations","funder_award_id":"DP250101396","funder_id":"https://openalex.org/F4320334704","funder_display_name":"Australian Research Council"},{"id":"https://openalex.org/G5510943983","display_name":"Learning Software Security Analysers with Imperfect Data","funder_award_id":"FT220100391","funder_id":"https://openalex.org/F4320334704","funder_display_name":"Australian Research Council"}],"funders":[{"id":"https://openalex.org/F4320334704","display_name":"Australian Research Council","ror":"https://ror.org/05mmh0f86"}],"has_content":{"pdf":false,"grobid_xml":false},"content_urls":null,"referenced_works_count":26,"referenced_works":["https://openalex.org/W1992114977","https://openalex.org/W1996567876","https://openalex.org/W2194775991","https://openalex.org/W2297774820","https://openalex.org/W2997997679","https://openalex.org/W3161071537","https://openalex.org/W3166095789","https://openalex.org/W4206639582","https://openalex.org/W4285247752","https://openalex.org/W4311165836","https://openalex.org/W4322766882","https://openalex.org/W4385245566","https://openalex.org/W4387250125","https://openalex.org/W4387298393","https://openalex.org/W4391558398","https://openalex.org/W4392980063","https://openalex.org/W4393147025","https://openalex.org/W4394001171","https://openalex.org/W4394994998","https://openalex.org/W4398785927","https://openalex.org/W4400524696","https://openalex.org/W4400579932","https://openalex.org/W4400647264","https://openalex.org/W4401863349","https://openalex.org/W4402533615","https://openalex.org/W4404609282"],"related_works":["https://openalex.org/W4391375266","https://openalex.org/W2899084033","https://openalex.org/W2748952813","https://openalex.org/W2390279801","https://openalex.org/W4391913857","https://openalex.org/W2358668433","https://openalex.org/W4396701345","https://openalex.org/W2376932109","https://openalex.org/W2001405890","https://openalex.org/W4396696052"],"abstract_inverted_index":{"Large":[0],"language":[1],"models":[2],"(LLMs)":[3],"have":[4],"been":[5],"proposed":[6],"as":[7,35],"powerful":[8],"tools":[9],"for":[10,70,123],"detecting":[11],"software":[12],"vulnerabilities,":[13],"where":[14],"task-specific":[15],"fine-tuning":[16,29],"is":[17,156],"typically":[18],"employed":[19],"to":[20,24,98,130],"provide":[21],"vulnerability-specific":[22],"knowledge":[23],"the":[25,39,53,60,85,132,159,185],"LLMs.":[26],"However,":[27,64],"existing":[28],"techniques":[30],"often":[31],"treat":[32],"source":[33],"code":[34,93,116,137,165],"plain":[36],"text,":[37],"losing":[38],"graph-based":[40],"structural":[41,54],"information":[42,55,88,135],"inherent":[43],"in":[44,83,106],"code.Graph-enhanced":[45],"soft":[46,119,188],"prompt":[47,120,189],"tuning":[48,121,190],"addresses":[49],"this":[50],"by":[51,192,204],"translating":[52],"into":[56],"contextual":[57],"cues":[58],"that":[59,146,174],"LLM":[61],"can":[62],"understand.":[63],"current":[65],"methods":[66],"are":[67],"primarily":[68],"designed":[69],"general":[71],"graph-related":[72],"tasks":[73],"and":[74,161,169,179,199],"focus":[75],"more":[76],"on":[77,158],"adjacency":[78],"information,":[79],"they":[80],"fall":[81],"short":[82],"preserving":[84],"rich":[86,133],"semantic":[87,134],"(e.g.,":[89],"control/data":[90],"flow)":[91],"within":[92,136],"graphs.":[94],"They":[95],"also":[96],"fail":[97],"ensure":[99],"computational":[100,149],"efficiency":[101],"while":[102,151],"capturing":[103],"graph-text":[104,153],"interactions":[105],"their":[107],"cross-modal":[108,143],"alignment":[109,144],"module.This":[110],"paper":[111],"presents":[112],"CGP-Tuning,":[113],"a":[114],"new":[115],"graph-enhanced,":[117],"structure-aware":[118],"method":[122],"vulnerability":[124],"detection.":[125],"CGP-Tuning":[126,175],"introduces":[127],"type-aware":[128],"embeddings":[129],"capture":[131],"graphs,":[138],"along":[139],"with":[140],"an":[141,193],"efficient":[142],"module":[145],"achieves":[147],"linear":[148],"costs":[150],"incorporating":[152],"interactions.":[154],"It":[155],"evaluated":[157],"latestDiverseVuldataset":[160],"three":[162],"advanced":[163],"open-source":[164],"LLMs,":[166],"CodeLlama,":[167],"CodeGemma,":[168],"Qwen2.5-Coder.":[170],"Experimental":[171],"results":[172],"show":[173],"delivers":[176],"model-agnostic":[177],"improvements":[178],"maintains":[180],"practical":[181],"inference":[182],"speed,":[183],"surpassing":[184],"best":[186],"graph-enhanced":[187],"baseline":[191],"average":[194],"of":[195],"four":[196],"percentage":[197,206],"points":[198],"outperforming":[200],"non-tuned":[201],"zero-shot":[202],"prompting":[203],"15":[205],"points.":[207]},"counts_by_year":[{"year":2026,"cited_by_count":5},{"year":2025,"cited_by_count":1}],"updated_date":"2026-07-29T09:40:50.615796","created_date":"2025-10-10T00:00:00"}