{"id":"https://openalex.org/W7129106369","doi":"https://doi.org/10.1109/tse.2026.3663143","title":"Cost-Effective Adversarial Attacks Against Code LLM With Model Attention","display_name":"Cost-Effective Adversarial Attacks Against Code LLM With Model Attention","publication_year":2026,"publication_date":"2026-02-16","ids":{"openalex":"https://openalex.org/W7129106369","doi":"https://doi.org/10.1109/tse.2026.3663143"},"language":"en","primary_location":{"id":"doi:10.1109/tse.2026.3663143","is_oa":false,"landing_page_url":"https://doi.org/10.1109/tse.2026.3663143","pdf_url":null,"source":{"id":"https://openalex.org/S8351582","display_name":"IEEE Transactions on Software Engineering","issn_l":"0098-5589","issn":["0098-5589","1939-3520","2326-3881"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310320439","host_organization_name":"IEEE Computer Society","host_organization_lineage":["https://openalex.org/P4310320439","https://openalex.org/P4310319808"],"host_organization_lineage_names":["IEEE Computer Society","Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Transactions on Software Engineering","raw_type":"journal-article"},"type":"article","indexed_in":["crossref"],"open_access":{"is_oa":true,"oa_status":"green","oa_url":"https://ink.library.smu.edu.sg/sis_research/11038","any_repository_has_fulltext":true},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5121940522","display_name":"Weifeng Sun","orcid":null},"institutions":[{"id":"https://openalex.org/I158842170","display_name":"Chongqing University","ror":"https://ror.org/023rhb549","country_code":"CN","type":"education","lineage":["https://openalex.org/I158842170"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Weifeng Sun","raw_affiliation_strings":["School of Big Data and Software Engineering, Chongqing University, Chongqing, China"],"raw_orcid":"https://orcid.org/0000-0001-6013-1369","affiliations":[{"raw_affiliation_string":"School of Big Data and Software Engineering, Chongqing University, Chongqing, China","institution_ids":["https://openalex.org/I158842170"]}]},{"author_position":"middle","author":{"id":null,"display_name":"Naiqi Huang","orcid":"https://orcid.org/0009-0004-8754-2060"},"institutions":[{"id":"https://openalex.org/I158842170","display_name":"Chongqing University","ror":"https://ror.org/023rhb549","country_code":"CN","type":"education","lineage":["https://openalex.org/I158842170"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Naiqi Huang","raw_affiliation_strings":["School of Big Data and Software Engineering, Chongqing University, Chongqing, China"],"raw_orcid":"https://orcid.org/0009-0004-8754-2060","affiliations":[{"raw_affiliation_string":"School of Big Data and Software Engineering, Chongqing University, Chongqing, China","institution_ids":["https://openalex.org/I158842170"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5126166484","display_name":"Meng Yan","orcid":null},"institutions":[{"id":"https://openalex.org/I158842170","display_name":"Chongqing University","ror":"https://ror.org/023rhb549","country_code":"CN","type":"education","lineage":["https://openalex.org/I158842170"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Meng Yan","raw_affiliation_strings":["School of Big Data and Software Engineering, Chongqing University, Chongqing, China"],"raw_orcid":"https://orcid.org/0000-0002-9538-9121","affiliations":[{"raw_affiliation_string":"School of Big Data and Software Engineering, Chongqing University, Chongqing, China","institution_ids":["https://openalex.org/I158842170"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5126162068","display_name":"Li Huang","orcid":null},"institutions":[{"id":"https://openalex.org/I158842170","display_name":"Chongqing University","ror":"https://ror.org/023rhb549","country_code":"CN","type":"education","lineage":["https://openalex.org/I158842170"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Li Huang","raw_affiliation_strings":["School of Big Data and Software Engineering, Chongqing University, Chongqing, China"],"raw_orcid":"https://orcid.org/0009-0005-2603-3366","affiliations":[{"raw_affiliation_string":"School of Big Data and Software Engineering, Chongqing University, Chongqing, China","institution_ids":["https://openalex.org/I158842170"]}]},{"author_position":"middle","author":{"id":null,"display_name":"Zhongxin Liu","orcid":"https://orcid.org/0000-0002-1981-1626"},"institutions":[{"id":"https://openalex.org/I76130692","display_name":"Zhejiang University","ror":"https://ror.org/00a2xv884","country_code":"CN","type":"education","lineage":["https://openalex.org/I76130692"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Zhongxin Liu","raw_affiliation_strings":["State Key Laboratory of Blockchain and Data Security, Zhejiang University, Hangzhou, China"],"raw_orcid":"https://orcid.org/0000-0002-1981-1626","affiliations":[{"raw_affiliation_string":"State Key Laboratory of Blockchain and Data Security, Zhejiang University, Hangzhou, China","institution_ids":["https://openalex.org/I76130692"]}]},{"author_position":"middle","author":{"id":null,"display_name":"Xiao Liu","orcid":"https://orcid.org/0009-0007-9715-627X"},"institutions":[{"id":"https://openalex.org/I158842170","display_name":"Chongqing University","ror":"https://ror.org/023rhb549","country_code":"CN","type":"education","lineage":["https://openalex.org/I158842170"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Xiao Liu","raw_affiliation_strings":["School of Big Data and Software Engineering, Chongqing University, Chongqing, China"],"raw_orcid":"https://orcid.org/0009-0007-9715-627X","affiliations":[{"raw_affiliation_string":"School of Big Data and Software Engineering, Chongqing University, Chongqing, China","institution_ids":["https://openalex.org/I158842170"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5122900149","display_name":"David Lo","orcid":null},"institutions":[{"id":"https://openalex.org/I79891267","display_name":"Singapore Management University","ror":"https://ror.org/050qmg959","country_code":"SG","type":"education","lineage":["https://openalex.org/I79891267"]}],"countries":["SG"],"is_corresponding":false,"raw_author_name":"David Lo","raw_affiliation_strings":["School of Computing and Information Systems, Singapore Management University, Singapore"],"raw_orcid":"https://orcid.org/0000-0002-4367-7201","affiliations":[{"raw_affiliation_string":"School of Computing and Information Systems, Singapore Management University, Singapore","institution_ids":["https://openalex.org/I79891267"]}]}],"institutions":[],"countries_distinct_count":2,"institutions_distinct_count":3,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":12.1051,"has_fulltext":false,"cited_by_count":1,"citation_normalized_percentile":{"value":0.96887796,"is_in_top_1_percent":false,"is_in_top_10_percent":true},"cited_by_percentile_year":{"min":94,"max":97},"biblio":{"volume":"52","issue":"4","first_page":"1371","last_page":"1390"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":0.33889999985694885,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":0.33889999985694885,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10028","display_name":"Topic Modeling","score":0.2134000062942505,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11273","display_name":"Advanced Graph Neural Networks","score":0.15950000286102295,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/adversarial-system","display_name":"Adversarial system","score":0.902999997138977},{"id":"https://openalex.org/keywords/proxy","display_name":"Proxy (statistics)","score":0.6021999716758728},{"id":"https://openalex.org/keywords/attack-model","display_name":"Attack model","score":0.4593999981880188},{"id":"https://openalex.org/keywords/key","display_name":"Key (lock)","score":0.4456000030040741},{"id":"https://openalex.org/keywords/code","display_name":"Code (set theory)","score":0.4388999938964844},{"id":"https://openalex.org/keywords/focus","display_name":"Focus (optics)","score":0.4147999882698059},{"id":"https://openalex.org/keywords/flexibility","display_name":"Flexibility (engineering)","score":0.3684999942779541}],"concepts":[{"id":"https://openalex.org/C37736160","wikidata":"https://www.wikidata.org/wiki/Q1801315","display_name":"Adversarial system","level":2,"score":0.902999997138977},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.8428000211715698},{"id":"https://openalex.org/C2780148112","wikidata":"https://www.wikidata.org/wiki/Q1432581","display_name":"Proxy (statistics)","level":2,"score":0.6021999716758728},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.4894999861717224},{"id":"https://openalex.org/C65856478","wikidata":"https://www.wikidata.org/wiki/Q3991682","display_name":"Attack model","level":2,"score":0.4593999981880188},{"id":"https://openalex.org/C26517878","wikidata":"https://www.wikidata.org/wiki/Q228039","display_name":"Key (lock)","level":2,"score":0.4456000030040741},{"id":"https://openalex.org/C2776760102","wikidata":"https://www.wikidata.org/wiki/Q5139990","display_name":"Code (set theory)","level":3,"score":0.4388999938964844},{"id":"https://openalex.org/C192209626","wikidata":"https://www.wikidata.org/wiki/Q190909","display_name":"Focus (optics)","level":2,"score":0.4147999882698059},{"id":"https://openalex.org/C2780598303","wikidata":"https://www.wikidata.org/wiki/Q65921492","display_name":"Flexibility (engineering)","level":2,"score":0.3684999942779541},{"id":"https://openalex.org/C119857082","wikidata":"https://www.wikidata.org/wiki/Q2539","display_name":"Machine learning","level":1,"score":0.35269999504089355},{"id":"https://openalex.org/C120936955","wikidata":"https://www.wikidata.org/wiki/Q2155640","display_name":"Empirical research","level":2,"score":0.328000009059906},{"id":"https://openalex.org/C41065033","wikidata":"https://www.wikidata.org/wiki/Q2825412","display_name":"Adversary","level":2,"score":0.321399986743927},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.30660000443458557},{"id":"https://openalex.org/C140547941","wikidata":"https://www.wikidata.org/wiki/Q7797194","display_name":"Threat model","level":2,"score":0.28769999742507935},{"id":"https://openalex.org/C71901391","wikidata":"https://www.wikidata.org/wiki/Q7126699","display_name":"Upload","level":2,"score":0.2815999984741211},{"id":"https://openalex.org/C124101348","wikidata":"https://www.wikidata.org/wiki/Q172491","display_name":"Data mining","level":1,"score":0.2766000032424927},{"id":"https://openalex.org/C2776576444","wikidata":"https://www.wikidata.org/wiki/Q303569","display_name":"Attack surface","level":2,"score":0.2694999873638153},{"id":"https://openalex.org/C166052673","wikidata":"https://www.wikidata.org/wiki/Q83021","display_name":"Empirical evidence","level":2,"score":0.2655999958515167},{"id":"https://openalex.org/C2778712577","wikidata":"https://www.wikidata.org/wiki/Q3505966","display_name":"Retraining","level":2,"score":0.25609999895095825},{"id":"https://openalex.org/C43126263","wikidata":"https://www.wikidata.org/wiki/Q128751","display_name":"Source code","level":2,"score":0.2547000050544739}],"mesh":[],"locations_count":2,"locations":[{"id":"doi:10.1109/tse.2026.3663143","is_oa":false,"landing_page_url":"https://doi.org/10.1109/tse.2026.3663143","pdf_url":null,"source":{"id":"https://openalex.org/S8351582","display_name":"IEEE Transactions on Software Engineering","issn_l":"0098-5589","issn":["0098-5589","1939-3520","2326-3881"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310320439","host_organization_name":"IEEE Computer Society","host_organization_lineage":["https://openalex.org/P4310320439","https://openalex.org/P4310319808"],"host_organization_lineage_names":["IEEE Computer Society","Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Transactions on Software Engineering","raw_type":"journal-article"},{"id":"pmh:oai:ink.library.smu.edu.sg:sis_research-12040","is_oa":true,"landing_page_url":"https://ink.library.smu.edu.sg/sis_research/11038","pdf_url":null,"source":{"id":"https://openalex.org/S4306401925","display_name":"Singapore Management University Institutional Knowledge (InK) (Singapore Management University)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I79891267","host_organization_name":"Singapore Management University","host_organization_lineage":["https://openalex.org/I79891267"],"host_organization_lineage_names":[],"type":"repository"},"license":"other-oa","license_id":"https://openalex.org/licenses/other-oa","version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"https://doi.org/10.1109/TSE.2026.3663143","raw_type":"Journal Article"}],"best_oa_location":{"id":"pmh:oai:ink.library.smu.edu.sg:sis_research-12040","is_oa":true,"landing_page_url":"https://ink.library.smu.edu.sg/sis_research/11038","pdf_url":null,"source":{"id":"https://openalex.org/S4306401925","display_name":"Singapore Management University Institutional Knowledge (InK) (Singapore Management University)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I79891267","host_organization_name":"Singapore Management University","host_organization_lineage":["https://openalex.org/I79891267"],"host_organization_lineage_names":[],"type":"repository"},"license":"other-oa","license_id":"https://openalex.org/licenses/other-oa","version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"https://doi.org/10.1109/TSE.2026.3663143","raw_type":"Journal Article"},"sustainable_development_goals":[],"awards":[{"id":"https://openalex.org/G6075304589","display_name":null,"funder_award_id":"2022CDJDX-005","funder_id":"https://openalex.org/F4320335787","funder_display_name":"Fundamental Research Funds for the Central Universities"},{"id":"https://openalex.org/G6572571148","display_name":null,"funder_award_id":"62372071","funder_id":"https://openalex.org/F4320321001","funder_display_name":"National Natural Science Foundation of China"}],"funders":[{"id":"https://openalex.org/F4320321001","display_name":"National Natural Science Foundation of China","ror":"https://ror.org/01h0zpd94"},{"id":"https://openalex.org/F4320335787","display_name":"Fundamental Research Funds for the Central Universities","ror":null}],"has_content":{"grobid_xml":false,"pdf":false},"content_urls":null,"referenced_works_count":0,"referenced_works":[],"related_works":[],"abstract_inverted_index":{"Code":[0],"LLMs":[1],"(CLLMs)":[2],"are":[3],"vulnerable":[4],"to":[5,46,120,205],"adversarial":[6,21,29,124,164,188,297],"attacks,":[7,83],"where":[8],"semantically":[9],"identical":[10],"code":[11],"mutations":[12],"mislead":[13],"models":[14,27,229],"into":[15],"incorrect":[16,223],"predictions.":[17,224],"To":[18,107],"address":[19],"this,":[20,109],"training":[22],"has":[23],"been":[24],"proposed,":[25],"retraining":[26],"with":[28,170,230],"examples":[30,165],"generated":[31],"by":[32],"attack":[33,37,54,65,101,132,177,189,232,245,257,264],"methods.":[34],"Among":[35],"various":[36],"approaches,":[38],"black-box":[39,53,82],"methods":[40,55,102,133,258],"have":[41],"attracted":[42],"increasing":[43],"attention":[44,145,168,203,219],"due":[45],"their":[47,105],"flexibility":[48],"and":[49,67,69,125,157,209,255,280],"applicability.":[50],"However,":[51],"existing":[52,100,231],"face":[56],"two":[57,135,192],"key":[58],"challenges:":[59],"1)":[60],"vast":[61],"mutation":[62],"spaces":[63],"limit":[64],"efficiency":[66,98],"effectiveness,":[68],"2)":[70],"resource-intensive":[71],"model":[72,276],"queries":[73,277],"constrain":[74],"scalability.":[75],"These":[76],"challenges":[77],"hinder":[78],"the":[79,89,97,139,151,171,195,210],"practicality":[80],"of":[81,99,141,173,271],"especially":[84],"under":[85],"resource":[86,285],"constraints,":[87,286],"prompting":[88],"critical":[90],"question:":[91],"<italic":[92,142],"xmlns:mml=\"http://www.w3.org/1998/Math/MathML\"":[93,143,235,237],"xmlns:xlink=\"http://www.w3.org/1999/xlink\">Can":[94],"we":[95,110,137,183],"enhance":[96],"without":[103],"compromising":[104],"effectiveness?</i>":[106],"answer":[108],"conduct":[111],"an":[112,186],"empirical":[113],"study":[114],"using":[115],"Explainable":[116],"AI":[117],"(XAI)":[118],"techniques":[119],"investigate":[121],"differences":[122,149],"between":[123,154],"non-adversarial":[126],"(failure)":[127],"examples.":[128],"After":[129],"analyzing":[130],"state-of-the-art":[131],"against":[134],"CLLMs,":[136,251],"introduce":[138],"concept":[140],"xmlns:xlink=\"http://www.w3.org/1999/xlink\">model":[144],"deviation</i>,":[146],"which":[147,200,216],"quantifies":[148],"in":[150,295],"model\u2019s":[152],"focus":[153],"unmutated":[155],"(original)":[156],"mutated":[158],"code.":[159],"Our":[160],"findings":[161],"reveal":[162],"that":[163,260],"exhibit":[166],"significant":[167],"deviations,":[169],"direction":[172],"deviation":[174],"critically":[175],"affecting":[176],"success.":[178],"Building":[179],"on":[180],"these":[181,227],"insights,":[182],"propose":[184],"ADVSEL,":[185],"efficient":[187],"framework":[190],"comprising":[191],"proxy":[193,228],"components:":[194],"Attention":[196],"Proxy":[197,213],"Model":[198,214],"(APM),":[199],"quickly":[201],"estimates":[202],"deviations":[204],"filter":[206],"unpromising":[207],"mutations,":[208,242],"Deviation":[211],"Direction":[212],"(DDPM),":[215],"assesses":[217],"whether":[218],"shifts":[220],"lead":[221],"toward":[222],"By":[225],"integrating":[226],"methods,":[233],"A<sc":[234],"xmlns:xlink=\"http://www.w3.org/1999/xlink\">DV</small>S<sc":[236],"xmlns:xlink=\"http://www.w3.org/1999/xlink\">EL</small>":[238],"effectively":[239],"prioritizes":[240],"promising":[241],"significantly":[243,274],"improving":[244],"efficiency.":[246],"Experimental":[247],"evaluations":[248],"across":[249],"five":[250],"four":[252],"downstream":[253],"tasks,":[254],"three":[256],"demonstrate":[259],"ADVSEL":[261,287],"maintains":[262],"comparable":[263],"success":[265],"rates":[266],"(a":[267],"slight":[268],"ASR":[269],"reduction":[270],"0.62%\u20130.70%)":[272],"while":[273],"reducing":[275],"(by":[278,282],"34.98%\u201342.91%)":[279],"runtime":[281],"20.84%\u201321.45%).":[283],"Under":[284],"consistently":[288],"outperforms":[289],"baselines,":[290],"highlighting":[291],"its":[292],"practical":[293],"advantage":[294],"cost-effective":[296],"evaluation.":[298]},"counts_by_year":[{"year":2026,"cited_by_count":1}],"updated_date":"2026-04-21T06:05:55.347736","created_date":"2026-02-17T00:00:00"}