{"id":"https://openalex.org/W4394769336","doi":"https://doi.org/10.1145/3597503.3639212","title":"Combining Structured Static Code Information and Dynamic Symbolic Traces for Software Vulnerability Prediction","display_name":"Combining Structured Static Code Information and Dynamic Symbolic Traces for Software Vulnerability Prediction","publication_year":2024,"publication_date":"2024-04-12","ids":{"openalex":"https://openalex.org/W4394769336","doi":"https://doi.org/10.1145/3597503.3639212"},"language":"en","primary_location":{"id":"doi:10.1145/3597503.3639212","is_oa":true,"landing_page_url":"https://doi.org/10.1145/3597503.3639212","pdf_url":"https://dl.acm.org/doi/pdf/10.1145/3597503.3639212","source":null,"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the IEEE/ACM 46th International Conference on Software Engineering","raw_type":"proceedings-article"},"type":"conference-paper","indexed_in":["crossref"],"open_access":{"is_oa":true,"oa_status":"gold","oa_url":"https://dl.acm.org/doi/pdf/10.1145/3597503.3639212","any_repository_has_fulltext":true},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5101484881","display_name":"Huanting Wang","orcid":"https://orcid.org/0000-0003-0579-4295"},"institutions":[{"id":"https://openalex.org/I130828816","display_name":"University of Leeds","ror":"https://ror.org/024mrxd33","country_code":"GB","type":"education","lineage":["https://openalex.org/I130828816"]}],"countries":["GB"],"is_corresponding":false,"raw_author_name":"Huanting Wang","raw_affiliation_strings":["University of Leeds, Leeds, United Kingdom"],"raw_orcid":"https://orcid.org/0000-0003-0579-4295","affiliations":[{"raw_affiliation_string":"University of Leeds, Leeds, United Kingdom","institution_ids":["https://openalex.org/I130828816"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5069158506","display_name":"Zhanyong Tang","orcid":"https://orcid.org/0000-0002-4333-2334"},"institutions":[{"id":"https://openalex.org/I37802460","display_name":"Northwest University","ror":"https://ror.org/00z3td547","country_code":"CN","type":"education","lineage":["https://openalex.org/I37802460"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Zhanyong Tang","raw_affiliation_strings":["Northwest University, Xi'an, China"],"raw_orcid":"https://orcid.org/0000-0002-4333-2334","affiliations":[{"raw_affiliation_string":"Northwest University, Xi'an, China","institution_ids":["https://openalex.org/I37802460"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5051957977","display_name":"Shin Hwei Tan","orcid":"https://orcid.org/0000-0001-8633-3372"},"institutions":[{"id":"https://openalex.org/I60158472","display_name":"Concordia University","ror":"https://ror.org/0420zvk78","country_code":"CA","type":"education","lineage":["https://openalex.org/I60158472"]}],"countries":["CA"],"is_corresponding":false,"raw_author_name":"Shin Hwei Tan","raw_affiliation_strings":["Concordia University, Montreal, Quebec, Canada"],"raw_orcid":"https://orcid.org/0000-0001-8633-3372","affiliations":[{"raw_affiliation_string":"Concordia University, Montreal, Quebec, Canada","institution_ids":["https://openalex.org/I60158472"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5006698480","display_name":"Jie Wang","orcid":"https://orcid.org/0009-0002-0434-7434"},"institutions":[{"id":"https://openalex.org/I37802460","display_name":"Northwest University","ror":"https://ror.org/00z3td547","country_code":"CN","type":"education","lineage":["https://openalex.org/I37802460"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Jie Wang","raw_affiliation_strings":["Northwest University, Xi'an, China"],"raw_orcid":"https://orcid.org/0009-0002-0434-7434","affiliations":[{"raw_affiliation_string":"Northwest University, Xi'an, China","institution_ids":["https://openalex.org/I37802460"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5073056884","display_name":"Yuzhe Liu","orcid":null},"institutions":[{"id":"https://openalex.org/I37802460","display_name":"Northwest University","ror":"https://ror.org/00z3td547","country_code":"CN","type":"education","lineage":["https://openalex.org/I37802460"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Yuzhe Liu","raw_affiliation_strings":["Northwest University, Xi'an, China"],"raw_orcid":"https://orcid.org/0009-0007-6301-6463","affiliations":[{"raw_affiliation_string":"Northwest University, Xi'an, China","institution_ids":["https://openalex.org/I37802460"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5042871191","display_name":"H. Eliot FANG","orcid":"https://orcid.org/0009-0001-9021-914X"},"institutions":[{"id":"https://openalex.org/I37802460","display_name":"Northwest University","ror":"https://ror.org/00z3td547","country_code":"CN","type":"education","lineage":["https://openalex.org/I37802460"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Hejun Fang","raw_affiliation_strings":["Northwest University, Xi'an, China"],"raw_orcid":"https://orcid.org/0009-0001-9021-914X","affiliations":[{"raw_affiliation_string":"Northwest University, Xi'an, China","institution_ids":["https://openalex.org/I37802460"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5095381671","display_name":"Chunwei Xia","orcid":"https://orcid.org/0000-0003-2014-5453"},"institutions":[{"id":"https://openalex.org/I130828816","display_name":"University of Leeds","ror":"https://ror.org/024mrxd33","country_code":"GB","type":"education","lineage":["https://openalex.org/I130828816"]}],"countries":["GB"],"is_corresponding":false,"raw_author_name":"Chunwei Xia","raw_affiliation_strings":["University of Leeds, Leeds, United Kingdom"],"raw_orcid":"https://orcid.org/0000-0003-2014-5453","affiliations":[{"raw_affiliation_string":"University of Leeds, Leeds, United Kingdom","institution_ids":["https://openalex.org/I130828816"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5100401045","display_name":"Zheng Wang","orcid":"https://orcid.org/0000-0001-6157-0662"},"institutions":[{"id":"https://openalex.org/I130828816","display_name":"University of Leeds","ror":"https://ror.org/024mrxd33","country_code":"GB","type":"education","lineage":["https://openalex.org/I130828816"]}],"countries":["GB"],"is_corresponding":false,"raw_author_name":"Zheng Wang","raw_affiliation_strings":["University of Leeds, Leeds, United Kingdom"],"raw_orcid":"https://orcid.org/0000-0001-6157-0662","affiliations":[{"raw_affiliation_string":"University of Leeds, Leeds, United Kingdom","institution_ids":["https://openalex.org/I130828816"]}]}],"institutions":[],"countries_distinct_count":3,"institutions_distinct_count":3,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":null,"has_fulltext":true,"cited_by_count":15,"citation_normalized_percentile":null,"cited_by_percentile_year":null,"biblio":{"volume":null,"issue":null,"first_page":"1","last_page":"13"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10260","display_name":"Software Engineering Research","score":0.9994000196456909,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10260","display_name":"Software Engineering Research","score":0.9994000196456909,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10743","display_name":"Software Testing and Debugging Techniques","score":0.9980000257492065,"subfield":{"id":"https://openalex.org/subfields/1712","display_name":"Software"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T12423","display_name":"Software Reliability and Analysis Research","score":0.996399998664856,"subfield":{"id":"https://openalex.org/subfields/1712","display_name":"Software"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.8528467416763306},{"id":"https://openalex.org/keywords/symbolic-execution","display_name":"Symbolic execution","score":0.7462966442108154},{"id":"https://openalex.org/keywords/scalability","display_name":"Scalability","score":0.629387617111206},{"id":"https://openalex.org/keywords/fuzz-testing","display_name":"Fuzz testing","score":0.6213310956954956},{"id":"https://openalex.org/keywords/overhead","display_name":"Overhead (engineering)","score":0.603326678276062},{"id":"https://openalex.org/keywords/code","display_name":"Code (set theory)","score":0.5870327353477478},{"id":"https://openalex.org/keywords/source-code","display_name":"Source code","score":0.5693960189819336},{"id":"https://openalex.org/keywords/programming-language","display_name":"Programming language","score":0.46171900629997253},{"id":"https://openalex.org/keywords/vulnerability","display_name":"Vulnerability (computing)","score":0.45456862449645996},{"id":"https://openalex.org/keywords/static-analysis","display_name":"Static analysis","score":0.4534197449684143},{"id":"https://openalex.org/keywords/semantics","display_name":"Semantics (computer science)","score":0.45172637701034546},{"id":"https://openalex.org/keywords/software","display_name":"Software","score":0.4443914592266083},{"id":"https://openalex.org/keywords/static-program-analysis","display_name":"Static program analysis","score":0.4365406632423401},{"id":"https://openalex.org/keywords/benchmark","display_name":"Benchmark (surveying)","score":0.4322283864021301},{"id":"https://openalex.org/keywords/artificial-intelligence","display_name":"Artificial intelligence","score":0.4300994277000427},{"id":"https://openalex.org/keywords/machine-learning","display_name":"Machine learning","score":0.41149604320526123},{"id":"https://openalex.org/keywords/database","display_name":"Database","score":0.239439457654953},{"id":"https://openalex.org/keywords/software-development","display_name":"Software development","score":0.21116670966148376},{"id":"https://openalex.org/keywords/computer-security","display_name":"Computer security","score":0.14506837725639343},{"id":"https://openalex.org/keywords/set","display_name":"Set (abstract data type)","score":0.10753458738327026}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.8528467416763306},{"id":"https://openalex.org/C2779639559","wikidata":"https://www.wikidata.org/wiki/Q7661178","display_name":"Symbolic execution","level":3,"score":0.7462966442108154},{"id":"https://openalex.org/C48044578","wikidata":"https://www.wikidata.org/wiki/Q727490","display_name":"Scalability","level":2,"score":0.629387617111206},{"id":"https://openalex.org/C111065885","wikidata":"https://www.wikidata.org/wiki/Q1189053","display_name":"Fuzz testing","level":3,"score":0.6213310956954956},{"id":"https://openalex.org/C2779960059","wikidata":"https://www.wikidata.org/wiki/Q7113681","display_name":"Overhead (engineering)","level":2,"score":0.603326678276062},{"id":"https://openalex.org/C2776760102","wikidata":"https://www.wikidata.org/wiki/Q5139990","display_name":"Code (set theory)","level":3,"score":0.5870327353477478},{"id":"https://openalex.org/C43126263","wikidata":"https://www.wikidata.org/wiki/Q128751","display_name":"Source code","level":2,"score":0.5693960189819336},{"id":"https://openalex.org/C199360897","wikidata":"https://www.wikidata.org/wiki/Q9143","display_name":"Programming language","level":1,"score":0.46171900629997253},{"id":"https://openalex.org/C95713431","wikidata":"https://www.wikidata.org/wiki/Q631425","display_name":"Vulnerability (computing)","level":2,"score":0.45456862449645996},{"id":"https://openalex.org/C97686452","wikidata":"https://www.wikidata.org/wiki/Q7604153","display_name":"Static analysis","level":2,"score":0.4534197449684143},{"id":"https://openalex.org/C184337299","wikidata":"https://www.wikidata.org/wiki/Q1437428","display_name":"Semantics (computer science)","level":2,"score":0.45172637701034546},{"id":"https://openalex.org/C2777904410","wikidata":"https://www.wikidata.org/wiki/Q7397","display_name":"Software","level":2,"score":0.4443914592266083},{"id":"https://openalex.org/C137287247","wikidata":"https://www.wikidata.org/wiki/Q1329550","display_name":"Static program analysis","level":4,"score":0.4365406632423401},{"id":"https://openalex.org/C185798385","wikidata":"https://www.wikidata.org/wiki/Q1161707","display_name":"Benchmark (surveying)","level":2,"score":0.4322283864021301},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.4300994277000427},{"id":"https://openalex.org/C119857082","wikidata":"https://www.wikidata.org/wiki/Q2539","display_name":"Machine learning","level":1,"score":0.41149604320526123},{"id":"https://openalex.org/C77088390","wikidata":"https://www.wikidata.org/wiki/Q8513","display_name":"Database","level":1,"score":0.239439457654953},{"id":"https://openalex.org/C529173508","wikidata":"https://www.wikidata.org/wiki/Q638608","display_name":"Software development","level":3,"score":0.21116670966148376},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.14506837725639343},{"id":"https://openalex.org/C177264268","wikidata":"https://www.wikidata.org/wiki/Q1514741","display_name":"Set (abstract data type)","level":2,"score":0.10753458738327026},{"id":"https://openalex.org/C13280743","wikidata":"https://www.wikidata.org/wiki/Q131089","display_name":"Geodesy","level":1,"score":0.0},{"id":"https://openalex.org/C205649164","wikidata":"https://www.wikidata.org/wiki/Q1071","display_name":"Geography","level":0,"score":0.0}],"mesh":[],"locations_count":2,"locations":[{"id":"doi:10.1145/3597503.3639212","is_oa":true,"landing_page_url":"https://doi.org/10.1145/3597503.3639212","pdf_url":"https://dl.acm.org/doi/pdf/10.1145/3597503.3639212","source":null,"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the IEEE/ACM 46th International Conference on Software Engineering","raw_type":"proceedings-article"},{"id":"pmh:oai:eprints.whiterose.ac.uk:208077","is_oa":true,"landing_page_url":null,"pdf_url":"https://eprints.whiterose.ac.uk/208077/8/Combining%20Structured%20Static%20Code%20Information%20and%20Dynamic.pdf","source":{"id":"https://openalex.org/S4306400854","display_name":"White Rose Research Online (University of Leeds, The University of Sheffield, University of York)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I2800616092","host_organization_name":"White Rose University Consortium","host_organization_lineage":["https://openalex.org/I2800616092"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"","raw_type":"Proceedings Paper"}],"best_oa_location":{"id":"doi:10.1145/3597503.3639212","is_oa":true,"landing_page_url":"https://doi.org/10.1145/3597503.3639212","pdf_url":"https://dl.acm.org/doi/pdf/10.1145/3597503.3639212","source":null,"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the IEEE/ACM 46th International Conference on Software Engineering","raw_type":"proceedings-article"},"sustainable_development_goals":[],"awards":[{"id":"https://openalex.org/G4120025490","display_name":"Modernise Compiler Technology With Deep Learning","funder_award_id":"EP/X018202/1","funder_id":"https://openalex.org/F4320334627","funder_display_name":"Engineering and Physical Sciences Research Council"},{"id":"https://openalex.org/G7527024692","display_name":"\u57fa\u4e8e\u5927\u578b\u5f00\u6e90\u4ed3\u5e93\u7684\u8f6f\u4ef6\u6e90\u4ee3\u7801\u6f0f\u6d1e\u6df1\u5ea6\u68c0\u6d4b\u4e0e\u4fee\u590d\u65b9\u6cd5\u7814\u7a76","funder_award_id":"61972314","funder_id":"https://openalex.org/F4320321001","funder_display_name":"National Natural Science Foundation of China"}],"funders":[{"id":"https://openalex.org/F4320321001","display_name":"National Natural Science Foundation of China","ror":"https://ror.org/01h0zpd94"},{"id":"https://openalex.org/F4320322675","display_name":"Mitacs","ror":"https://ror.org/00cjrc276"},{"id":"https://openalex.org/F4320334627","display_name":"Engineering and Physical Sciences Research Council","ror":"https://ror.org/0439y7842"}],"has_content":{"grobid_xml":true,"pdf":true},"content_urls":{"pdf":"https://content.openalex.org/works/W4394769336.pdf","grobid_xml":"https://content.openalex.org/works/W4394769336.grobid-xml"},"referenced_works_count":66,"referenced_works":["https://openalex.org/W51507023","https://openalex.org/W1480909796","https://openalex.org/W1666942233","https://openalex.org/W1710734607","https://openalex.org/W1987647365","https://openalex.org/W1996146601","https://openalex.org/W2054282473","https://openalex.org/W2069268700","https://openalex.org/W2095551048","https://openalex.org/W2102605133","https://openalex.org/W2107147876","https://openalex.org/W2153881107","https://openalex.org/W2167460663","https://openalex.org/W2270070752","https://openalex.org/W2405754747","https://openalex.org/W2501678966","https://openalex.org/W2528491735","https://openalex.org/W2559935471","https://openalex.org/W2618564128","https://openalex.org/W2634106992","https://openalex.org/W2735519117","https://openalex.org/W2766540688","https://openalex.org/W2781491433","https://openalex.org/W2909014315","https://openalex.org/W2962724414","https://openalex.org/W2963723316","https://openalex.org/W2979566992","https://openalex.org/W2999082198","https://openalex.org/W3008381189","https://openalex.org/W3030194725","https://openalex.org/W3033775865","https://openalex.org/W3033777149","https://openalex.org/W3035524453","https://openalex.org/W3036224891","https://openalex.org/W3042714377","https://openalex.org/W3043078865","https://openalex.org/W3090891670","https://openalex.org/W3101228802","https://openalex.org/W3110362426","https://openalex.org/W3111602563","https://openalex.org/W3114632476","https://openalex.org/W3127782461","https://openalex.org/W3135028703","https://openalex.org/W3154106427","https://openalex.org/W3156636935","https://openalex.org/W3163060204","https://openalex.org/W3164640227","https://openalex.org/W3169251294","https://openalex.org/W3176859472","https://openalex.org/W3178061567","https://openalex.org/W3211776794","https://openalex.org/W3212191335","https://openalex.org/W3213182664","https://openalex.org/W4206639582","https://openalex.org/W4214583996","https://openalex.org/W4220727415","https://openalex.org/W4220931352","https://openalex.org/W4285490489","https://openalex.org/W4285586714","https://openalex.org/W4287673430","https://openalex.org/W4287812705","https://openalex.org/W4307731867","https://openalex.org/W4312436517","https://openalex.org/W4312757223","https://openalex.org/W4312969325","https://openalex.org/W6776700526"],"related_works":["https://openalex.org/W2914996832","https://openalex.org/W4213243744","https://openalex.org/W4210653322","https://openalex.org/W2019168903","https://openalex.org/W3006945192","https://openalex.org/W2751940653","https://openalex.org/W2617035575","https://openalex.org/W2364777513","https://openalex.org/W3119585180","https://openalex.org/W3003055204"],"abstract_inverted_index":{"Deep":[0],"learning":[1,34,80],"(DL)":[2],"has":[3,146],"emerged":[4],"as":[5],"a":[6,22,84,97],"viable":[7],"means":[8],"for":[9,33],"identifying":[10,154],"software":[11],"bugs":[12],"and":[13,71,108,158,176],"vulnerabilities.":[14],"The":[15],"success":[16],"of":[17,25,86,106,140],"DL":[18,59],"relies":[19],"on":[20],"having":[21],"suitable":[23],"representation":[24],"the":[26,44,57,104,114],"problem":[27],"domain.":[28],"However,":[29],"existing":[30],"DL-based":[31],"solutions":[32],"program":[35,47,63,73],"representations":[36],"have":[37],"limitations":[38],"-":[39],"they":[40],"either":[41],"cannot":[42],"capture":[43],"deep,":[45],"precise":[46],"semantics":[48],"or":[49],"suffer":[50],"from":[51,133],"poor":[52],"scalability.":[53],"We":[54,119],"present":[55],"Concoction,":[56],"first":[58],"system":[60],"to":[61,82,89,125],"learn":[62],"presentations":[64],"by":[65,172],"combining":[66],"static":[67,107],"source":[68],"code":[69,110,128],"information":[70],"dynamic":[72,91,109],"execution":[74,93,100,117],"traces.":[75,94],"Concoction":[76,102,121,145,165],"employs":[77],"unsupervised":[78],"active":[79],"techniques":[81,124],"determine":[83],"subset":[85],"important":[87],"paths":[88],"collect":[90],"symbolic":[92,99,116],"By":[95],"implementing":[96],"focused":[98],"solution,":[101],"brings":[103],"benefits":[105],"features":[111],"while":[112],"reducing":[113],"expensive":[115],"overhead.":[118],"integrate":[120],"with":[122],"fuzzing":[123],"detect":[126],"function-level":[127],"vulnerabilities":[129,149,157],"in":[130,150],"C":[131],"programs":[132],"20":[134],"open-source":[135],"projects.":[136],"In":[137],"200":[138],"hours":[139],"automated":[141],"concurrent":[142],"test":[143],"runs,":[144],"successfully":[147],"uncovered":[148],"all":[151],"tested":[152],"projects,":[153],"54":[155],"unique":[156,162],"yielding":[159],"37":[160],"new,":[161],"CVE":[163],"IDs.":[164],"also":[166],"significantly":[167],"outperforms":[168],"16":[169],"prior":[170],"methods":[171],"providing":[173],"higher":[174],"accuracy":[175],"lower":[177],"false":[178],"positive":[179],"rates.":[180]},"counts_by_year":[{"year":2026,"cited_by_count":3},{"year":2025,"cited_by_count":10},{"year":2024,"cited_by_count":2}],"updated_date":"2026-07-14T23:27:15.235271","created_date":"2025-10-10T00:00:00"}