{"id":"https://openalex.org/W4311165706","doi":"https://doi.org/10.1145/3564625.3564655","title":"Compact Abstract Graphs for Detecting Code Vulnerability with GNN Models","display_name":"Compact Abstract Graphs for Detecting Code Vulnerability with GNN Models","publication_year":2022,"publication_date":"2022-12-02","ids":{"openalex":"https://openalex.org/W4311165706","doi":"https://doi.org/10.1145/3564625.3564655"},"language":"en","primary_location":{"id":"doi:10.1145/3564625.3564655","is_oa":false,"landing_page_url":"https://doi.org/10.1145/3564625.3564655","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the 38th Annual Computer Security Applications Conference","raw_type":"proceedings-article"},"type":"conference-paper","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5101705538","display_name":"Yu Luo","orcid":"https://orcid.org/0000-0002-6543-8885"},"institutions":[{"id":"https://openalex.org/I75421653","display_name":"University of Missouri\u2013Kansas City","ror":"https://ror.org/01w0d5g70","country_code":"US","type":"education","lineage":["https://openalex.org/I75421653"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Yu Luo","raw_affiliation_strings":["Division of Computing, Analytics and Mathematics, University of Missouri - Kansas City, USA"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Division of Computing, Analytics and Mathematics, University of Missouri - Kansas City, USA","institution_ids":["https://openalex.org/I75421653"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5031477814","display_name":"Weifeng Xu","orcid":"https://orcid.org/0000-0002-1313-1136"},"institutions":[{"id":"https://openalex.org/I6059380","display_name":"University of Baltimore","ror":"https://ror.org/024gw2733","country_code":"US","type":"education","lineage":["https://openalex.org/I6059380"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Weifeng Xu","raw_affiliation_strings":["School of Criminal Justice, The University of Baltimore, USA"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"School of Criminal Justice, The University of Baltimore, USA","institution_ids":["https://openalex.org/I6059380"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5080541939","display_name":"Dianxiang Xu","orcid":"https://orcid.org/0000-0003-4529-3540"},"institutions":[{"id":"https://openalex.org/I75421653","display_name":"University of Missouri\u2013Kansas City","ror":"https://ror.org/01w0d5g70","country_code":"US","type":"education","lineage":["https://openalex.org/I75421653"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Dianxiang Xu","raw_affiliation_strings":["Division of Computing, Analytics and Mathematics, University of Missouri - Kansas City, United States of America"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Division of Computing, Analytics and Mathematics, University of Missouri - Kansas City, United States of America","institution_ids":["https://openalex.org/I75421653"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":2,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":2.7843,"has_fulltext":false,"cited_by_count":14,"citation_normalized_percentile":{"value":0.92420528,"is_in_top_1_percent":false,"is_in_top_10_percent":true},"cited_by_percentile_year":{"min":97,"max":99},"biblio":{"volume":null,"issue":null,"first_page":"497","last_page":"507"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10260","display_name":"Software Engineering Research","score":0.9995999932289124,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10260","display_name":"Software Engineering Research","score":0.9995999932289124,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T12423","display_name":"Software Reliability and Analysis Research","score":0.9939000010490417,"subfield":{"id":"https://openalex.org/subfields/1712","display_name":"Software"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":0.9818000197410583,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.8244770765304565},{"id":"https://openalex.org/keywords/java","display_name":"Java","score":0.7133916616439819},{"id":"https://openalex.org/keywords/vulnerability","display_name":"Vulnerability (computing)","score":0.6467341184616089},{"id":"https://openalex.org/keywords/source-code","display_name":"Source code","score":0.6105865836143494},{"id":"https://openalex.org/keywords/vulnerability-assessment","display_name":"Vulnerability assessment","score":0.5079393982887268},{"id":"https://openalex.org/keywords/code","display_name":"Code (set theory)","score":0.49560678005218506},{"id":"https://openalex.org/keywords/graph","display_name":"Graph","score":0.4458167552947998},{"id":"https://openalex.org/keywords/control-flow-graph","display_name":"Control flow graph","score":0.44304782152175903},{"id":"https://openalex.org/keywords/software","display_name":"Software","score":0.42984628677368164},{"id":"https://openalex.org/keywords/programming-language","display_name":"Programming language","score":0.2604140639305115},{"id":"https://openalex.org/keywords/theoretical-computer-science","display_name":"Theoretical computer science","score":0.24008649587631226},{"id":"https://openalex.org/keywords/computer-security","display_name":"Computer security","score":0.13554731011390686}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.8244770765304565},{"id":"https://openalex.org/C548217200","wikidata":"https://www.wikidata.org/wiki/Q251","display_name":"Java","level":2,"score":0.7133916616439819},{"id":"https://openalex.org/C95713431","wikidata":"https://www.wikidata.org/wiki/Q631425","display_name":"Vulnerability (computing)","level":2,"score":0.6467341184616089},{"id":"https://openalex.org/C43126263","wikidata":"https://www.wikidata.org/wiki/Q128751","display_name":"Source code","level":2,"score":0.6105865836143494},{"id":"https://openalex.org/C167063184","wikidata":"https://www.wikidata.org/wiki/Q1400839","display_name":"Vulnerability assessment","level":3,"score":0.5079393982887268},{"id":"https://openalex.org/C2776760102","wikidata":"https://www.wikidata.org/wiki/Q5139990","display_name":"Code (set theory)","level":3,"score":0.49560678005218506},{"id":"https://openalex.org/C132525143","wikidata":"https://www.wikidata.org/wiki/Q141488","display_name":"Graph","level":2,"score":0.4458167552947998},{"id":"https://openalex.org/C27458966","wikidata":"https://www.wikidata.org/wiki/Q1187693","display_name":"Control flow graph","level":2,"score":0.44304782152175903},{"id":"https://openalex.org/C2777904410","wikidata":"https://www.wikidata.org/wiki/Q7397","display_name":"Software","level":2,"score":0.42984628677368164},{"id":"https://openalex.org/C199360897","wikidata":"https://www.wikidata.org/wiki/Q9143","display_name":"Programming language","level":1,"score":0.2604140639305115},{"id":"https://openalex.org/C80444323","wikidata":"https://www.wikidata.org/wiki/Q2878974","display_name":"Theoretical computer science","level":1,"score":0.24008649587631226},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.13554731011390686},{"id":"https://openalex.org/C177264268","wikidata":"https://www.wikidata.org/wiki/Q1514741","display_name":"Set (abstract data type)","level":2,"score":0.0},{"id":"https://openalex.org/C15744967","wikidata":"https://www.wikidata.org/wiki/Q9418","display_name":"Psychology","level":0,"score":0.0},{"id":"https://openalex.org/C542102704","wikidata":"https://www.wikidata.org/wiki/Q183257","display_name":"Psychotherapist","level":1,"score":0.0},{"id":"https://openalex.org/C137176749","wikidata":"https://www.wikidata.org/wiki/Q4105337","display_name":"Psychological resilience","level":2,"score":0.0}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1145/3564625.3564655","is_oa":false,"landing_page_url":"https://doi.org/10.1145/3564625.3564655","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the 38th Annual Computer Security Applications Conference","raw_type":"proceedings-article"}],"best_oa_location":null,"sustainable_development_goals":[{"display_name":"Reduced inequalities","id":"https://metadata.un.org/sdg/10","score":0.41999998688697815}],"awards":[],"funders":[],"has_content":{"pdf":false,"grobid_xml":false},"content_urls":null,"referenced_works_count":45,"referenced_works":["https://openalex.org/W127238549","https://openalex.org/W133470593","https://openalex.org/W1485912969","https://openalex.org/W1531991464","https://openalex.org/W1566376227","https://openalex.org/W1857789879","https://openalex.org/W1987684126","https://openalex.org/W2003529494","https://openalex.org/W2070515606","https://openalex.org/W2079753286","https://openalex.org/W2163010250","https://openalex.org/W2244807774","https://openalex.org/W2294816372","https://openalex.org/W2360967250","https://openalex.org/W2519887557","https://openalex.org/W2592125937","https://openalex.org/W2743517242","https://openalex.org/W2765574772","https://openalex.org/W2765858138","https://openalex.org/W2770227012","https://openalex.org/W2781491433","https://openalex.org/W2791092480","https://openalex.org/W2796200341","https://openalex.org/W2888698761","https://openalex.org/W2889225139","https://openalex.org/W2896457183","https://openalex.org/W2899171197","https://openalex.org/W2906579670","https://openalex.org/W2912115214","https://openalex.org/W2912636151","https://openalex.org/W2962960733","https://openalex.org/W2970862273","https://openalex.org/W2976184969","https://openalex.org/W2999905431","https://openalex.org/W3016473712","https://openalex.org/W3084428871","https://openalex.org/W3098605233","https://openalex.org/W3101228802","https://openalex.org/W3104849875","https://openalex.org/W3111602563","https://openalex.org/W3127736190","https://openalex.org/W3182763642","https://openalex.org/W4200486127","https://openalex.org/W4301168982","https://openalex.org/W6606430823"],"related_works":["https://openalex.org/W1883246888","https://openalex.org/W2370114625","https://openalex.org/W1756374135","https://openalex.org/W2062873522","https://openalex.org/W2947584067","https://openalex.org/W2280562859","https://openalex.org/W230721595","https://openalex.org/W3157230915","https://openalex.org/W1496728123","https://openalex.org/W2789975780"],"abstract_inverted_index":{"Source":[0],"code":[1,11,22,33,45],"representation":[2,46],"is":[3,157],"critical":[4],"to":[5,9,59,74,112,121,137],"the":[6,43,49,56,67,101,115,124,177,183],"machine-learning-based":[7],"approach":[8],"detecting":[10],"vulnerability.":[12],"This":[13],"paper":[14],"proposes":[15],"Compact":[16],"Abstract":[17],"Graphs":[18],"(CAGs)":[19],"of":[20,32,51],"source":[21,44],"in":[23,86,93],"different":[24],"programming":[25],"languages":[26],"for":[27,154,186],"predicting":[28],"a":[29],"broad":[30],"range":[31],"vulnerabilities":[34,141],"with":[35,48,63,82,107],"Graph":[36],"Neural":[37],"Network":[38],"(GNN)":[39],"models.":[40],"CAGs":[41,73,153],"make":[42],"aligned":[47],"task":[50],"vulnerability":[52,84,91,189],"classification":[53],"and":[54,78,89,118,166],"reduce":[55],"graph":[57],"size":[58],"accelerate":[60],"model":[61],"training":[62],"minimum":[64],"impact":[65],"on":[66,114,123],"prediction":[68],"performance.":[69],"We":[70],"have":[71,104,131],"applied":[72,136],"six":[75],"GNN":[76,102,129,155,179],"models":[77,103,130,156,180],"large":[79],"Java/C":[80],"datasets":[81],"114":[83],"types":[85,92],"Java":[87,116],"programs":[88],"106":[90],"C":[94,125],"programs.":[95],"The":[96,127,147],"experiment":[97],"results":[98,148],"show":[99,150],"that":[100,151,176],"performed":[105],"well,":[106],"accuracy":[108],"ranging":[109],"from":[110,119,143],"94.7%":[111],"96.3%":[113],"dataset":[117],"91.6%":[120],"93.2%":[122],"dataset.":[126],"resultant":[128],"achieved":[132],"promising":[133],"performance":[134],"when":[135],"more":[138],"than":[139,160],"2,500":[140],"collected":[142],"real-world":[144],"software":[145],"projects.":[146],"also":[149],"using":[152],"significantly":[158],"better":[159],"ASTs,":[161],"CFGs":[162],"(Control":[163],"Flow":[164],"Graphs),":[165],"PDGs":[167],"(Program":[168],"Dependence":[169],"Graphs).":[170],"A":[171],"comparative":[172],"study":[173],"has":[174],"demonstrated":[175],"CAG-based":[178],"can":[181],"outperform":[182],"existing":[184],"methods":[185],"machine":[187],"learning-based":[188],"detection.":[190]},"counts_by_year":[{"year":2026,"cited_by_count":3},{"year":2025,"cited_by_count":7},{"year":2024,"cited_by_count":4}],"updated_date":"2026-08-24T07:32:12.397491","created_date":"2025-10-10T00:00:00"}