{"id":"https://openalex.org/W4411016400","doi":"https://doi.org/10.1145/3714393.3726509","title":"VulPatrol: Interprocedural Vulnerability Detection and Localization through Semantic Graph Learning","display_name":"VulPatrol: Interprocedural Vulnerability Detection and Localization through Semantic Graph Learning","publication_year":2024,"publication_date":"2024-06-19","ids":{"openalex":"https://openalex.org/W4411016400","doi":"https://doi.org/10.1145/3714393.3726509"},"language":"en","primary_location":{"id":"doi:10.1145/3714393.3726509","is_oa":true,"landing_page_url":"https://doi.org/10.1145/3714393.3726509","pdf_url":"https://dl.acm.org/doi/pdf/10.1145/3714393.3726509","source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the Fifteenth ACM Conference on Data and Application Security and Privacy","raw_type":"proceedings-article"},"type":"conference-paper","indexed_in":["crossref"],"open_access":{"is_oa":true,"oa_status":"gold","oa_url":"https://dl.acm.org/doi/pdf/10.1145/3714393.3726509","any_repository_has_fulltext":null},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5117825203","display_name":"Asmaa Hailane","orcid":null},"institutions":[{"id":"https://openalex.org/I153718931","display_name":"University of Ottawa","ror":"https://ror.org/03c4mmv16","country_code":"CA","type":"education","lineage":["https://openalex.org/I153718931"]}],"countries":["CA"],"is_corresponding":false,"raw_author_name":"Asmaa Hailane","raw_affiliation_strings":["University of Ottawa, Ottawa, Canada"],"raw_orcid":"https://orcid.org/0009-0007-3989-8320","affiliations":[{"raw_affiliation_string":"University of Ottawa, Ottawa, Canada","institution_ids":["https://openalex.org/I153718931"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5019530993","display_name":"Paria Shirani","orcid":"https://orcid.org/0000-0001-5592-1518"},"institutions":[{"id":"https://openalex.org/I153718931","display_name":"University of Ottawa","ror":"https://ror.org/03c4mmv16","country_code":"CA","type":"education","lineage":["https://openalex.org/I153718931"]}],"countries":["CA"],"is_corresponding":false,"raw_author_name":"Paria Shirani","raw_affiliation_strings":["University of Ottawa, Ottawa, Canada"],"raw_orcid":"https://orcid.org/0000-0001-5592-1518","affiliations":[{"raw_affiliation_string":"University of Ottawa, Ottawa, Canada","institution_ids":["https://openalex.org/I153718931"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5007509079","display_name":"Guy-Vincent Jourdan","orcid":"https://orcid.org/0000-0001-6067-6545"},"institutions":[{"id":"https://openalex.org/I153718931","display_name":"University of Ottawa","ror":"https://ror.org/03c4mmv16","country_code":"CA","type":"education","lineage":["https://openalex.org/I153718931"]}],"countries":["CA"],"is_corresponding":false,"raw_author_name":"Guy-Vincent Jourdan","raw_affiliation_strings":["University of Ottawa, Ottawa, Canada"],"raw_orcid":"https://orcid.org/0000-0001-6067-6545","affiliations":[{"raw_affiliation_string":"University of Ottawa, Ottawa, Canada","institution_ids":["https://openalex.org/I153718931"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":1,"corresponding_author_ids":[],"corresponding_institution_ids":["https://openalex.org/I153718931"],"apc_list":null,"apc_paid":null,"fwci":0.5224,"has_fulltext":true,"cited_by_count":1,"citation_normalized_percentile":{"value":0.72616979,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":{"min":94,"max":97},"biblio":{"volume":null,"issue":null,"first_page":"401","last_page":"412"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10260","display_name":"Software Engineering Research","score":0.9990000128746033,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10260","display_name":"Software Engineering Research","score":0.9990000128746033,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":0.9988999962806702,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T12423","display_name":"Software Reliability and Analysis Research","score":0.9936000108718872,"subfield":{"id":"https://openalex.org/subfields/1712","display_name":"Software"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.8092041611671448},{"id":"https://openalex.org/keywords/vulnerability","display_name":"Vulnerability (computing)","score":0.5557456016540527},{"id":"https://openalex.org/keywords/graph","display_name":"Graph","score":0.46942073106765747},{"id":"https://openalex.org/keywords/artificial-intelligence","display_name":"Artificial intelligence","score":0.3882145881652832},{"id":"https://openalex.org/keywords/natural-language-processing","display_name":"Natural language processing","score":0.3366108536720276},{"id":"https://openalex.org/keywords/theoretical-computer-science","display_name":"Theoretical computer science","score":0.1943730115890503},{"id":"https://openalex.org/keywords/computer-security","display_name":"Computer security","score":0.13476824760437012}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.8092041611671448},{"id":"https://openalex.org/C95713431","wikidata":"https://www.wikidata.org/wiki/Q631425","display_name":"Vulnerability (computing)","level":2,"score":0.5557456016540527},{"id":"https://openalex.org/C132525143","wikidata":"https://www.wikidata.org/wiki/Q141488","display_name":"Graph","level":2,"score":0.46942073106765747},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.3882145881652832},{"id":"https://openalex.org/C204321447","wikidata":"https://www.wikidata.org/wiki/Q30642","display_name":"Natural language processing","level":1,"score":0.3366108536720276},{"id":"https://openalex.org/C80444323","wikidata":"https://www.wikidata.org/wiki/Q2878974","display_name":"Theoretical computer science","level":1,"score":0.1943730115890503},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.13476824760437012}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1145/3714393.3726509","is_oa":true,"landing_page_url":"https://doi.org/10.1145/3714393.3726509","pdf_url":"https://dl.acm.org/doi/pdf/10.1145/3714393.3726509","source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the Fifteenth ACM Conference on Data and Application Security and Privacy","raw_type":"proceedings-article"}],"best_oa_location":{"id":"doi:10.1145/3714393.3726509","is_oa":true,"landing_page_url":"https://doi.org/10.1145/3714393.3726509","pdf_url":"https://dl.acm.org/doi/pdf/10.1145/3714393.3726509","source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the Fifteenth ACM Conference on Data and Application Security and Privacy","raw_type":"proceedings-article"},"sustainable_development_goals":[{"score":0.5699999928474426,"id":"https://metadata.un.org/sdg/10","display_name":"Reduced inequalities"}],"awards":[],"funders":[],"has_content":{"grobid_xml":true,"pdf":true},"content_urls":{"pdf":"https://content.openalex.org/works/W4411016400.pdf","grobid_xml":"https://content.openalex.org/works/W4411016400.grobid-xml"},"referenced_works_count":30,"referenced_works":["https://openalex.org/W1964962870","https://openalex.org/W1979852787","https://openalex.org/W2003529494","https://openalex.org/W2079753286","https://openalex.org/W2084971505","https://openalex.org/W2100945416","https://openalex.org/W2297774820","https://openalex.org/W2360967250","https://openalex.org/W2559935471","https://openalex.org/W2606202972","https://openalex.org/W2759071281","https://openalex.org/W2781491433","https://openalex.org/W2885030880","https://openalex.org/W2962960733","https://openalex.org/W2964150020","https://openalex.org/W2998879504","https://openalex.org/W3091588759","https://openalex.org/W3101228802","https://openalex.org/W3161071537","https://openalex.org/W3166095789","https://openalex.org/W3175096569","https://openalex.org/W3183469243","https://openalex.org/W3199249334","https://openalex.org/W4247464060","https://openalex.org/W4311165836","https://openalex.org/W4311246739","https://openalex.org/W4312436517","https://openalex.org/W4385975881","https://openalex.org/W4387298393","https://openalex.org/W4402264467"],"related_works":["https://openalex.org/W4391375266","https://openalex.org/W2899084033","https://openalex.org/W2748952813","https://openalex.org/W2390279801","https://openalex.org/W4391913857","https://openalex.org/W2358668433","https://openalex.org/W4396701345","https://openalex.org/W2376932109","https://openalex.org/W2001405890","https://openalex.org/W3204019825"],"abstract_inverted_index":{"The":[0],"growing":[1],"complexity":[2],"of":[3,9,17,20,33,82,90,121,247],"software":[4,194],"systems":[5],"and":[6,28,35,40,87,123,164,245],"the":[7,15,31,80,88,119,168,175,185,216,220,248],"management":[8],"large,":[10],"rapidly":[11],"evolving":[12],"codebases":[13],"necessitate":[14],"analysis":[16],"immense":[18],"volumes":[19],"lines":[21],"per":[22],"day":[23],"due":[24],"to":[25,48,106,130,160,178,195,225],"code":[26,42,96,114,148],"modifications":[27],"refactoring.":[29],"Despite":[30],"use":[32],"static":[34],"dynamic":[36,165],"analysis,":[37],"test":[38],"coverage,":[39],"rigorous":[41],"reviews,":[43],"traditional":[44],"methods":[45],"often":[46],"fail":[47],"accurately":[49,117],"detect":[50],"all":[51],"security":[52],"vulnerabilities,":[53],"resulting":[54],"in":[55,58,109],"significant":[56],"risks":[57],"production":[59],"software.":[60],"Recently,":[61],"deep":[62,84,140],"learning":[63,85],"models":[64],"have":[65],"shown":[66],"promising":[67],"possibilities":[68],"for":[69,93,227],"improving":[70,219],"vulnerability":[71,97],"detection.":[72,98],"Yet,":[73],"there":[74],"remains":[75],"a":[76,113,124,138,171],"clear":[77],"gap":[78],"between":[79],"abilities":[81],"current":[83],"approaches":[86],"level":[89],"performance":[91],"required":[92],"precise":[94],"source":[95,153],"To":[99],"bridge":[100],"this":[101,132],"gap,":[102],"it":[103,173],"is":[104],"crucial":[105],"develop":[107],"enhancements":[108],"two":[110],"fundamental":[111],"areas:":[112],"representation":[115,133],"that":[116,144,213],"captures":[118],"semantics":[120],"programs":[122],"model":[125],"architecture":[126],"with":[127,198],"adequate":[128],"expressiveness":[129],"analyze":[131],"effectively.":[134],"We":[135],"introduce":[136],"VulPatrol,":[137],"semantic-aware,":[139],"neural":[141,158],"network-based":[142],"system":[143],"constructs":[145],"LLVM-IR":[146],"interprocedural":[147],"property":[149],"graphs":[150],"from":[151],"C/C++":[152,192],"code.":[154,169],"VulPatrol":[155,214,234],"employs":[156],"message-passing":[157],"networks":[159],"capture":[161],"complex":[162],"dependencies":[163],"interactions":[166],"within":[167],"As":[170],"result,":[172],"enhances":[174],"model's":[176],"ability":[177],"classify":[179],"potential":[180],"vulnerabilities.":[181],"Furthermore,":[182],"we":[183,232],"generate":[184],"first":[186],"Vulnerability":[187],"database":[188],"based":[189],"on":[190,205,235],"compilable":[191],"open-source":[193],"LLVM-IR,":[196],"along":[197],"an":[199],"obfuscated":[200,236],"version.":[201],"Our":[202],"extensive":[203],"evaluation":[204],"different":[206],"benchmark":[207],"datasets,":[208],"including":[209],"real-world":[210],"programs,":[211],"shows":[212],"outperforms":[215],"state-of-the-art":[217],"baselines,":[218],"F1":[221],"measure":[222],"by":[223],"up":[224],"12%":[226],"identifying":[228],"vulnerable":[229],"functions.":[230],"Additionally,":[231],"evaluate":[233],"code,":[237],"which":[238],"yields":[239],"superior":[240],"results":[241],"regarding":[242],"string":[243],"variation":[244],"dissimilarity":[246],"original":[249],"codebase.":[250]},"counts_by_year":[{"year":2026,"cited_by_count":1}],"updated_date":"2026-07-29T14:22:42.915294","created_date":"2025-10-10T00:00:00"}