{"id":"https://openalex.org/W4400798831","doi":"https://doi.org/10.1145/3671016.3674807","title":"MatsVD: Boosting Statement-Level Vulnerability Detection via Dependency-Based Attention","display_name":"MatsVD: Boosting Statement-Level Vulnerability Detection via Dependency-Based Attention","publication_year":2024,"publication_date":"2024-07-17","ids":{"openalex":"https://openalex.org/W4400798831","doi":"https://doi.org/10.1145/3671016.3674807"},"language":"en","primary_location":{"id":"doi:10.1145/3671016.3674807","is_oa":false,"landing_page_url":"https://doi.org/10.1145/3671016.3674807","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the 15th Asia-Pacific Symposium on Internetware","raw_type":"proceedings-article"},"type":"conference-paper","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5104682230","display_name":"Cheng Weng","orcid":null},"institutions":[{"id":"https://openalex.org/I170215575","display_name":"National University of Defense Technology","ror":"https://ror.org/05d2yfz11","country_code":"CN","type":"education","lineage":["https://openalex.org/I170215575"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Cheng Weng","raw_affiliation_strings":["National University of Defense Technology, China"],"raw_orcid":"https://orcid.org/0009-0005-1886-7109","affiliations":[{"raw_affiliation_string":"National University of Defense Technology, China","institution_ids":["https://openalex.org/I170215575"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5108957348","display_name":"Yihao Qin","orcid":"https://orcid.org/0009-0001-3440-9520"},"institutions":[{"id":"https://openalex.org/I170215575","display_name":"National University of Defense Technology","ror":"https://ror.org/05d2yfz11","country_code":"CN","type":"education","lineage":["https://openalex.org/I170215575"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Yihao Qin","raw_affiliation_strings":["National University of Defense Technology, China"],"raw_orcid":"https://orcid.org/0009-0001-3440-9520","affiliations":[{"raw_affiliation_string":"National University of Defense Technology, China","institution_ids":["https://openalex.org/I170215575"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5083554622","display_name":"Bo Lin","orcid":"https://orcid.org/0000-0001-5905-4677"},"institutions":[{"id":"https://openalex.org/I170215575","display_name":"National University of Defense Technology","ror":"https://ror.org/05d2yfz11","country_code":"CN","type":"education","lineage":["https://openalex.org/I170215575"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Bo Lin","raw_affiliation_strings":["National University of Defense Technology, China"],"raw_orcid":"https://orcid.org/0000-0001-5905-4677","affiliations":[{"raw_affiliation_string":"National University of Defense Technology, China","institution_ids":["https://openalex.org/I170215575"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5017731871","display_name":"Pei Liu","orcid":"https://orcid.org/0000-0003-1460-1467"},"institutions":[{"id":"https://openalex.org/I170215575","display_name":"National University of Defense Technology","ror":"https://ror.org/05d2yfz11","country_code":"CN","type":"education","lineage":["https://openalex.org/I170215575"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Pei Liu","raw_affiliation_strings":["National University of Defense Technology, China"],"raw_orcid":"https://orcid.org/0000-0003-1460-1467","affiliations":[{"raw_affiliation_string":"National University of Defense Technology, China","institution_ids":["https://openalex.org/I170215575"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5075676848","display_name":"Liqian Chen","orcid":"https://orcid.org/0000-0001-8084-8009"},"institutions":[{"id":"https://openalex.org/I170215575","display_name":"National University of Defense Technology","ror":"https://ror.org/05d2yfz11","country_code":"CN","type":"education","lineage":["https://openalex.org/I170215575"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Liqian Chen","raw_affiliation_strings":["National University of Defense Technology, China"],"raw_orcid":"https://orcid.org/0000-0001-8084-8009","affiliations":[{"raw_affiliation_string":"National University of Defense Technology, China","institution_ids":["https://openalex.org/I170215575"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":1,"corresponding_author_ids":[],"corresponding_institution_ids":["https://openalex.org/I170215575"],"apc_list":null,"apc_paid":null,"fwci":1.5673,"has_fulltext":false,"cited_by_count":3,"citation_normalized_percentile":{"value":0.83930481,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":{"min":90,"max":96},"biblio":{"volume":null,"issue":null,"first_page":"115","last_page":"124"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10260","display_name":"Software Engineering Research","score":0.9973999857902527,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10260","display_name":"Software Engineering Research","score":0.9973999857902527,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T12479","display_name":"Web Application Security Vulnerabilities","score":0.9918000102043152,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10743","display_name":"Software Testing and Debugging Techniques","score":0.9916999936103821,"subfield":{"id":"https://openalex.org/subfields/1712","display_name":"Software"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/boosting","display_name":"Boosting (machine learning)","score":0.8088804483413696},{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.6690149903297424},{"id":"https://openalex.org/keywords/dependency","display_name":"Dependency (UML)","score":0.6581952571868896},{"id":"https://openalex.org/keywords/statement","display_name":"Statement (logic)","score":0.48853859305381775},{"id":"https://openalex.org/keywords/vulnerability","display_name":"Vulnerability (computing)","score":0.427558958530426},{"id":"https://openalex.org/keywords/artificial-intelligence","display_name":"Artificial intelligence","score":0.39261743426322937},{"id":"https://openalex.org/keywords/computer-security","display_name":"Computer security","score":0.18745481967926025},{"id":"https://openalex.org/keywords/political-science","display_name":"Political science","score":0.05415037274360657}],"concepts":[{"id":"https://openalex.org/C46686674","wikidata":"https://www.wikidata.org/wiki/Q466303","display_name":"Boosting (machine learning)","level":2,"score":0.8088804483413696},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.6690149903297424},{"id":"https://openalex.org/C19768560","wikidata":"https://www.wikidata.org/wiki/Q320727","display_name":"Dependency (UML)","level":2,"score":0.6581952571868896},{"id":"https://openalex.org/C2777026412","wikidata":"https://www.wikidata.org/wiki/Q2684591","display_name":"Statement (logic)","level":2,"score":0.48853859305381775},{"id":"https://openalex.org/C95713431","wikidata":"https://www.wikidata.org/wiki/Q631425","display_name":"Vulnerability (computing)","level":2,"score":0.427558958530426},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.39261743426322937},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.18745481967926025},{"id":"https://openalex.org/C17744445","wikidata":"https://www.wikidata.org/wiki/Q36442","display_name":"Political science","level":0,"score":0.05415037274360657},{"id":"https://openalex.org/C199539241","wikidata":"https://www.wikidata.org/wiki/Q7748","display_name":"Law","level":1,"score":0.0}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1145/3671016.3674807","is_oa":false,"landing_page_url":"https://doi.org/10.1145/3671016.3674807","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the 15th Asia-Pacific Symposium on Internetware","raw_type":"proceedings-article"}],"best_oa_location":null,"sustainable_development_goals":[{"score":0.44999998807907104,"id":"https://metadata.un.org/sdg/10","display_name":"Reduced inequalities"}],"awards":[],"funders":[],"has_content":{"pdf":false,"grobid_xml":false},"content_urls":null,"referenced_works_count":18,"referenced_works":["https://openalex.org/W1832693441","https://openalex.org/W2144344516","https://openalex.org/W2781491433","https://openalex.org/W2912500072","https://openalex.org/W2962784628","https://openalex.org/W2972135640","https://openalex.org/W2998496395","https://openalex.org/W3083954092","https://openalex.org/W3091588759","https://openalex.org/W3101228802","https://openalex.org/W3163206498","https://openalex.org/W3198685994","https://openalex.org/W4207068100","https://openalex.org/W4225673889","https://openalex.org/W4312436517","https://openalex.org/W4312969325","https://openalex.org/W4384345641","https://openalex.org/W6745537798"],"related_works":["https://openalex.org/W2125652721","https://openalex.org/W1540371141","https://openalex.org/W4231274751","https://openalex.org/W1549363203","https://openalex.org/W2154063878","https://openalex.org/W2556012038","https://openalex.org/W1489772951","https://openalex.org/W1538046993","https://openalex.org/W4239293476","https://openalex.org/W1566995892"],"abstract_inverted_index":{"Software":[0],"vulnerabilities":[1,20],"inevitably":[2],"arise":[3],"during":[4],"software":[5],"development":[6],"and":[7,18,103,118,194,206,219],"may":[8],"leave":[9],"behind":[10],"huge":[11],"security":[12],"risks.":[13],"In":[14,72,197],"order":[15],"to":[16,38,84,122,134,162,222],"detect":[17],"mitigate":[19],"before":[21],"they":[22,62],"can":[23],"be":[24],"exploited,":[25],"various":[26],"fine-grained":[27],"deep":[28],"learning":[29],"(DL)-based":[30],"vulnerablity":[31],"detection":[32],"(VD)":[33],"approaches":[34,55],"have":[35,47],"been":[36],"proposed":[37],"locate":[39],"vulnerable":[40],"statements,":[41,102,141],"among":[42],"which":[43,82,214],"the":[44,64,70,86,95,125,137,144,149,163,172,223],"Transformer-based":[45,53,79,109],"methods":[46,189],"shown":[48],"promising":[49],"performances.":[50],"However,":[51],"existing":[52],"statement-level":[54,188],"still":[56],"suffer":[57],"from":[58,89],"a":[59,77,152,207],"crucial":[60],"limitation:":[61],"ignore":[63],"intrinsic":[65],"data/control":[66,138],"dependency":[67,165],"relations":[68],"between":[69,140],"statements.":[71],"this":[73],"work,":[74],"we":[75,142],"propose":[76],"novel":[78,153],"model":[80],"MatsVD,":[81],"aims":[83],"address":[85],"above":[87],"challenge":[88],"two":[90],"aspects:":[91],"Firstly,":[92],"inspired":[93],"by":[94,156,216],"hierarchical":[96],"structure":[97],"of":[98,148,204,210],"code":[99,127],"(i.e.,":[100,111],"tokens,":[101],"functions),":[104],"MatsVD":[105,170,183,199],"comprises":[106],"three":[107],"different":[108],"layers":[110],"statement":[112,115],"embedding":[113],"layer,":[114,117],"representation":[116,120],"function":[119],"layer)":[121],"gradually":[123],"aggregate":[124],"basic":[126],"tokens":[128],"into":[129],"meaningful":[130],"statement/function":[131],"representations;":[132],"Secondly,":[133],"further":[135],"exploit":[136],"dependencies":[139],"replace":[143],"original":[145],"attention":[146,155,159],"mechanism":[147],"Transformer":[150],"with":[151],"dependency-based":[154],"masking":[157],"irrelevant":[158],"scores":[160],"according":[161],"program":[164],"graph.":[166],"We":[167],"comprehensively":[168],"evaluate":[169],"on":[171,190,212],"widely":[173],"used":[174],"C/C++":[175],"vulnerability":[176],"dataset":[177],"Big-Vul.":[178],"The":[179],"results":[180],"show":[181],"that":[182],"significantly":[184],"outperforms":[185],"6":[186],"other":[187],"both":[191],"binary":[192],"classification":[193],"ranking":[195],"metrics.":[196],"particular,":[198],"obtains":[200],"an":[201],"F1":[202],"score":[203],"86%":[205],"Top-1":[208],"Accuracy":[209],"93%":[211],"statement-le,":[213],"improves":[215],"respectively":[217],"22.97%":[218],"7.76%":[220],"compared":[221],"state-of-the-art":[224],"method":[225],"VELVET.":[226]},"counts_by_year":[{"year":2025,"cited_by_count":2},{"year":2024,"cited_by_count":1}],"updated_date":"2026-07-29T14:22:42.915294","created_date":"2025-10-10T00:00:00"}
