{"id":"https://openalex.org/W4408722068","doi":"https://doi.org/10.1142/s0218194025500196","title":"VulnTrace: Tracking and Detecting Code Vulnerabilities with Historical Commits and Semantic Embeddings","display_name":"VulnTrace: Tracking and Detecting Code Vulnerabilities with Historical Commits and Semantic Embeddings","publication_year":2025,"publication_date":"2025-03-22","ids":{"openalex":"https://openalex.org/W4408722068","doi":"https://doi.org/10.1142/s0218194025500196"},"language":"en","primary_location":{"id":"doi:10.1142/s0218194025500196","is_oa":false,"landing_page_url":"https://doi.org/10.1142/s0218194025500196","pdf_url":null,"source":{"id":"https://openalex.org/S131442419","display_name":"International Journal of Software Engineering and Knowledge Engineering","issn_l":"0218-1940","issn":["0218-1940","1793-6403"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310319815","host_organization_name":"World Scientific","host_organization_lineage":["https://openalex.org/P4310319815"],"host_organization_lineage_names":["World Scientific"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"International Journal of Software Engineering and Knowledge Engineering","raw_type":"journal-article"},"type":"article","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":null,"display_name":"Qijie Song","orcid":null},"institutions":[{"id":"https://openalex.org/I55712492","display_name":"Zhejiang University of Technology","ror":"https://ror.org/02djqfd08","country_code":"CN","type":"education","lineage":["https://openalex.org/I55712492"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Qijie Song","raw_affiliation_strings":["College of Computer Science and Technology, Zhejiang University of Technology, 310014, China"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"College of Computer Science and Technology, Zhejiang University of Technology, 310014, China","institution_ids":["https://openalex.org/I55712492"]}]},{"author_position":"middle","author":{"id":null,"display_name":"Jiaobo Jin","orcid":null},"institutions":[{"id":"https://openalex.org/I55712492","display_name":"Zhejiang University of Technology","ror":"https://ror.org/02djqfd08","country_code":"CN","type":"education","lineage":["https://openalex.org/I55712492"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Jiaobo Jin","raw_affiliation_strings":["College of Computer Science and Technology, Zhejiang University of Technology, 310014, China"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"College of Computer Science and Technology, Zhejiang University of Technology, 310014, China","institution_ids":["https://openalex.org/I55712492"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5029428788","display_name":"Tiantian Zhu","orcid":"https://orcid.org/0000-0002-8657-662X"},"institutions":[{"id":"https://openalex.org/I55712492","display_name":"Zhejiang University of Technology","ror":"https://ror.org/02djqfd08","country_code":"CN","type":"education","lineage":["https://openalex.org/I55712492"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Tiantian Zhu","raw_affiliation_strings":["College of Computer Science and Technology, Zhejiang University of Technology, 310014, China"],"raw_orcid":"https://orcid.org/0000-0002-8657-662X","affiliations":[{"raw_affiliation_string":"College of Computer Science and Technology, Zhejiang University of Technology, 310014, China","institution_ids":["https://openalex.org/I55712492"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5056827411","display_name":"Tieming Chen","orcid":"https://orcid.org/0000-0003-4664-3311"},"institutions":[{"id":"https://openalex.org/I55712492","display_name":"Zhejiang University of Technology","ror":"https://ror.org/02djqfd08","country_code":"CN","type":"education","lineage":["https://openalex.org/I55712492"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Tieming Chen","raw_affiliation_strings":["College of Computer Science and Technology, Zhejiang University of Technology, 310014, China"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"College of Computer Science and Technology, Zhejiang University of Technology, 310014, China","institution_ids":["https://openalex.org/I55712492"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5068773146","display_name":"Mingqi Lv","orcid":"https://orcid.org/0000-0003-4810-7491"},"institutions":[{"id":"https://openalex.org/I55712492","display_name":"Zhejiang University of Technology","ror":"https://ror.org/02djqfd08","country_code":"CN","type":"education","lineage":["https://openalex.org/I55712492"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Mingqi Lv","raw_affiliation_strings":["College of Computer Science and Technology, Zhejiang University of Technology, 310014, China"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"College of Computer Science and Technology, Zhejiang University of Technology, 310014, China","institution_ids":["https://openalex.org/I55712492"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5021236062","display_name":"Licheng Pan","orcid":"https://orcid.org/0000-0003-3864-295X"},"institutions":[{"id":"https://openalex.org/I55712492","display_name":"Zhejiang University of Technology","ror":"https://ror.org/02djqfd08","country_code":"CN","type":"education","lineage":["https://openalex.org/I55712492"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Licheng Pan","raw_affiliation_strings":["College of Computer Science and Technology, Zhejiang University of Technology, 310014, China"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"College of Computer Science and Technology, Zhejiang University of Technology, 310014, China","institution_ids":["https://openalex.org/I55712492"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5046093778","display_name":"Jian-Ping Mei","orcid":"https://orcid.org/0000-0003-1678-6215"},"institutions":[{"id":"https://openalex.org/I55712492","display_name":"Zhejiang University of Technology","ror":"https://ror.org/02djqfd08","country_code":"CN","type":"education","lineage":["https://openalex.org/I55712492"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Jian-Ping Mei","raw_affiliation_strings":["College of Computer Science and Technology, Zhejiang University of Technology, 310014, China"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"College of Computer Science and Technology, Zhejiang University of Technology, 310014, China","institution_ids":["https://openalex.org/I55712492"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5103187204","display_name":"Xiang Pan","orcid":"https://orcid.org/0009-0009-8116-160X"},"institutions":[{"id":"https://openalex.org/I55712492","display_name":"Zhejiang University of Technology","ror":"https://ror.org/02djqfd08","country_code":"CN","type":"education","lineage":["https://openalex.org/I55712492"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Xiang Pan","raw_affiliation_strings":["College of Computer Science and Technology, Zhejiang University of Technology, 310014, China"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"College of Computer Science and Technology, Zhejiang University of Technology, 310014, China","institution_ids":["https://openalex.org/I55712492"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":1,"corresponding_author_ids":[],"corresponding_institution_ids":["https://openalex.org/I55712492"],"apc_list":null,"apc_paid":null,"fwci":0.0,"has_fulltext":false,"cited_by_count":0,"citation_normalized_percentile":{"value":0.06064008,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":null,"biblio":{"volume":"35","issue":"05","first_page":"679","last_page":"706"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10260","display_name":"Software Engineering Research","score":0.9883000254631042,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10260","display_name":"Software Engineering Research","score":0.9883000254631042,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T12479","display_name":"Web Application Security Vulnerabilities","score":0.9854000210762024,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T12423","display_name":"Software Reliability and Analysis Research","score":0.9767000079154968,"subfield":{"id":"https://openalex.org/subfields/1712","display_name":"Software"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.7238203287124634},{"id":"https://openalex.org/keywords/code","display_name":"Code (set theory)","score":0.5632878541946411},{"id":"https://openalex.org/keywords/tracking","display_name":"Tracking (education)","score":0.5323385000228882},{"id":"https://openalex.org/keywords/programming-language","display_name":"Programming language","score":0.38023990392684937},{"id":"https://openalex.org/keywords/computer-security","display_name":"Computer security","score":0.36274808645248413},{"id":"https://openalex.org/keywords/data-mining","display_name":"Data mining","score":0.3350040316581726}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.7238203287124634},{"id":"https://openalex.org/C2776760102","wikidata":"https://www.wikidata.org/wiki/Q5139990","display_name":"Code (set theory)","level":3,"score":0.5632878541946411},{"id":"https://openalex.org/C2775936607","wikidata":"https://www.wikidata.org/wiki/Q466845","display_name":"Tracking (education)","level":2,"score":0.5323385000228882},{"id":"https://openalex.org/C199360897","wikidata":"https://www.wikidata.org/wiki/Q9143","display_name":"Programming language","level":1,"score":0.38023990392684937},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.36274808645248413},{"id":"https://openalex.org/C124101348","wikidata":"https://www.wikidata.org/wiki/Q172491","display_name":"Data mining","level":1,"score":0.3350040316581726},{"id":"https://openalex.org/C177264268","wikidata":"https://www.wikidata.org/wiki/Q1514741","display_name":"Set (abstract data type)","level":2,"score":0.0},{"id":"https://openalex.org/C19417346","wikidata":"https://www.wikidata.org/wiki/Q7922","display_name":"Pedagogy","level":1,"score":0.0},{"id":"https://openalex.org/C15744967","wikidata":"https://www.wikidata.org/wiki/Q9418","display_name":"Psychology","level":0,"score":0.0}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1142/s0218194025500196","is_oa":false,"landing_page_url":"https://doi.org/10.1142/s0218194025500196","pdf_url":null,"source":{"id":"https://openalex.org/S131442419","display_name":"International Journal of Software Engineering and Knowledge Engineering","issn_l":"0218-1940","issn":["0218-1940","1793-6403"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310319815","host_organization_name":"World Scientific","host_organization_lineage":["https://openalex.org/P4310319815"],"host_organization_lineage_names":["World Scientific"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"International Journal of Software Engineering and Knowledge Engineering","raw_type":"journal-article"}],"best_oa_location":null,"sustainable_development_goals":[{"score":0.47999998927116394,"id":"https://metadata.un.org/sdg/10","display_name":"Reduced inequalities"}],"awards":[{"id":"https://openalex.org/G1317677795","display_name":null,"funder_award_id":"U1936215","funder_id":"https://openalex.org/F4320321001","funder_display_name":"National Natural Science Foundation of China"},{"id":"https://openalex.org/G3558286546","display_name":null,"funder_award_id":"62002324","funder_id":"https://openalex.org/F4320321001","funder_display_name":"National Natural Science Foundation of China"},{"id":"https://openalex.org/G4921909086","display_name":null,"funder_award_id":"2372410","funder_id":"https://openalex.org/F4320321001","funder_display_name":"National Natural Science Foundation of China"},{"id":"https://openalex.org/G5769466829","display_name":null,"funder_award_id":"62276234","funder_id":"https://openalex.org/F4320321001","funder_display_name":"National Natural Science Foundation of China"},{"id":"https://openalex.org/G8825203574","display_name":null,"funder_award_id":"U22B2028","funder_id":"https://openalex.org/F4320321001","funder_display_name":"National Natural Science Foundation of China"}],"funders":[{"id":"https://openalex.org/F4320321001","display_name":"National Natural Science Foundation of China","ror":"https://ror.org/01h0zpd94"}],"has_content":{"grobid_xml":false,"pdf":false},"content_urls":null,"referenced_works_count":38,"referenced_works":["https://openalex.org/W1971800255","https://openalex.org/W1997646511","https://openalex.org/W2003315002","https://openalex.org/W2003529494","https://openalex.org/W2004758929","https://openalex.org/W2043837581","https://openalex.org/W2069268700","https://openalex.org/W2079753286","https://openalex.org/W2105300539","https://openalex.org/W2137789775","https://openalex.org/W2139855137","https://openalex.org/W2151666086","https://openalex.org/W2154398797","https://openalex.org/W2162436321","https://openalex.org/W2165004968","https://openalex.org/W2166336492","https://openalex.org/W2294816372","https://openalex.org/W2740329368","https://openalex.org/W2762491430","https://openalex.org/W2962960733","https://openalex.org/W2963926786","https://openalex.org/W2964150020","https://openalex.org/W2999378142","https://openalex.org/W3033775865","https://openalex.org/W3176540316","https://openalex.org/W4205733352","https://openalex.org/W4236586490","https://openalex.org/W4391985110","https://openalex.org/W4392938508","https://openalex.org/W4396746146","https://openalex.org/W4396768989","https://openalex.org/W4399516134","https://openalex.org/W4399850667","https://openalex.org/W4400647844","https://openalex.org/W4401155368","https://openalex.org/W4402176088","https://openalex.org/W4402423971","https://openalex.org/W4402809959"],"related_works":["https://openalex.org/W2084086966","https://openalex.org/W2023861399","https://openalex.org/W2730915376","https://openalex.org/W2626306547","https://openalex.org/W2021396365","https://openalex.org/W2394134009","https://openalex.org/W2119515433","https://openalex.org/W2009561238","https://openalex.org/W1340065","https://openalex.org/W2764080676"],"abstract_inverted_index":{"Open":[0],"source":[1,91],"software":[2],"has":[3],"evolved":[4],"into":[5],"a":[6,58,78,95,125],"fundamental":[7],"element":[8],"of":[9,29,34,60,87,98,120,156],"the":[10,25,32,115],"contemporary":[11],"information":[12],"sector;":[13],"however,":[14],"security":[15,41],"threats":[16],"within":[17],"its":[18],"supply":[19],"chain":[20],"are":[21],"persistently":[22],"rising.":[23],"Within":[24],"collaborative":[26],"development":[27],"framework":[28],"open":[30,90],"source,":[31],"introduction":[33],"malicious":[35],"code":[36,121],"can":[37],"lead":[38],"to":[39,69,93,112],"significant":[40],"vulnerabilities.":[42],"Conventional":[43],"methods":[44],"for":[45,128],"detecting":[46],"these":[47,74],"vulnerabilities,":[48],"which":[49,83],"rely":[50],"on":[51],"machine":[52],"learning,":[53],"face":[54],"challenges":[55],"such":[56],"as":[57],"lack":[59],"sufficient":[61],"datasets,":[62],"inadequate":[63],"deep":[64],"semantic":[65,116],"understanding,":[66],"and":[67,117,123,135,152,166],"limitations":[68],"single-vulnerability":[70],"detection.":[71,138],"To":[72],"address":[73],"challenges,":[75],"we":[76],"introduce":[77],"novel":[79],"approach":[80],"named":[81],"VulnTrace,":[82],"analyzes":[84],"historical":[85],"records":[86],"submissions":[88],"in":[89,137,158],"projects":[92],"construct":[94],"high-quality":[96],"dataset":[97],"vulnerabilities":[99],"with":[100],"accurate":[101],"labels.":[102],"VulnTrace":[103,143],"employs":[104],"Word2Vec":[105],"alongside":[106],"Abstract":[107],"Syntax":[108],"Tree":[109],"(AST)":[110],"technologies":[111],"capture":[113],"both":[114],"structural":[118],"details":[119],"segments":[122],"utilizes":[124],"Transformer":[126],"model":[127],"precise":[129],"vulnerability":[130,159],"identification,":[131],"thereby":[132],"enhancing":[133],"accuracy":[134],"interpretability":[136],"Experimental":[139],"results":[140],"indicate":[141],"that":[142],"achieves":[144],"approximately":[145],"93%":[146],"accuracy,":[147],"95%":[148],"precision,":[149],"83%":[150],"recall":[151],"an":[153],"F1":[154],"score":[155],"88%":[157],"detection":[160],"tasks,":[161],"significantly":[162],"reducing":[163],"false":[164],"positives":[165],"demonstrating":[167],"remarkable":[168],"robustness.":[169]},"counts_by_year":[],"updated_date":"2026-05-21T06:26:12.895304","created_date":"2025-03-22T00:00:00"}