{"id":"https://openalex.org/W4411522999","doi":"https://doi.org/10.1145/3728906","title":"Bridging the Gaps between Graph Neural Networks and Data-Flow Analysis: The Closer, the Better","display_name":"Bridging the Gaps between Graph Neural Networks and Data-Flow Analysis: The Closer, the Better","publication_year":2025,"publication_date":"2025-06-22","ids":{"openalex":"https://openalex.org/W4411522999","doi":"https://doi.org/10.1145/3728906"},"language":"en","primary_location":{"id":"doi:10.1145/3728906","is_oa":true,"landing_page_url":"https://doi.org/10.1145/3728906","pdf_url":"https://dl.acm.org/doi/pdf/10.1145/3728906","source":{"id":"https://openalex.org/S4404663975","display_name":"Proceedings of the ACM on software engineering.","issn_l":"2994-970X","issn":["2994-970X"],"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/P4310319798","host_organization_name":"Association for Computing Machinery","host_organization_lineage":["https://openalex.org/P4310319798"],"host_organization_lineage_names":["Association for Computing Machinery"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the ACM on Software Engineering","raw_type":"journal-article"},"type":"article","indexed_in":["crossref"],"open_access":{"is_oa":true,"oa_status":"hybrid","oa_url":"https://dl.acm.org/doi/pdf/10.1145/3728906","any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5014546112","display_name":"Qingchen Yu","orcid":"https://orcid.org/0000-0001-8311-9370"},"institutions":[{"id":"https://openalex.org/I76130692","display_name":"Zhejiang University","ror":"https://ror.org/00a2xv884","country_code":"CN","type":"education","lineage":["https://openalex.org/I76130692"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Qingchen Yu","raw_affiliation_strings":["Zhejiang University, Hangzhou, China"],"raw_orcid":"https://orcid.org/0000-0001-8311-9370","affiliations":[{"raw_affiliation_string":"Zhejiang University, Hangzhou, China","institution_ids":["https://openalex.org/I76130692"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5100352330","display_name":"Xin Liu","orcid":"https://orcid.org/0000-0003-3685-4852"},"institutions":[{"id":"https://openalex.org/I76214153","display_name":"Lanzhou University","ror":"https://ror.org/01mkqqe32","country_code":"CN","type":"education","lineage":["https://openalex.org/I76214153"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Xin Liu","raw_affiliation_strings":["Lanzhou University, Lanzhou, China"],"raw_orcid":"https://orcid.org/0000-0003-3685-4852","affiliations":[{"raw_affiliation_string":"Lanzhou University, Lanzhou, China","institution_ids":["https://openalex.org/I76214153"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5100604365","display_name":"Qingguo Zhou","orcid":"https://orcid.org/0000-0001-8054-5446"},"institutions":[{"id":"https://openalex.org/I76214153","display_name":"Lanzhou University","ror":"https://ror.org/01mkqqe32","country_code":"CN","type":"education","lineage":["https://openalex.org/I76214153"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Qingguo Zhou","raw_affiliation_strings":["Lanzhou University, Lanzhou, China"],"raw_orcid":"https://orcid.org/0000-0001-8054-5446","affiliations":[{"raw_affiliation_string":"Lanzhou University, Lanzhou, China","institution_ids":["https://openalex.org/I76214153"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5078198240","display_name":"Chunming Wu","orcid":"https://orcid.org/0000-0001-7958-9687"},"institutions":[{"id":"https://openalex.org/I76130692","display_name":"Zhejiang University","ror":"https://ror.org/00a2xv884","country_code":"CN","type":"education","lineage":["https://openalex.org/I76130692"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Chunming Wu","raw_affiliation_strings":["Zhejiang University, Hangzhou, China"],"raw_orcid":"https://orcid.org/0000-0001-7958-9687","affiliations":[{"raw_affiliation_string":"Zhejiang University, Hangzhou, China","institution_ids":["https://openalex.org/I76130692"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":2,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":0.0,"has_fulltext":true,"cited_by_count":0,"citation_normalized_percentile":{"value":0.15325995,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":null,"biblio":{"volume":"2","issue":"ISSTA","first_page":"686","last_page":"706"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":0.996399998664856,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":0.996399998664856,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10743","display_name":"Software Testing and Debugging Techniques","score":0.9961000084877014,"subfield":{"id":"https://openalex.org/subfields/1712","display_name":"Software"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10260","display_name":"Software Engineering Research","score":0.9919000267982483,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.8001993894577026},{"id":"https://openalex.org/keywords/generalization","display_name":"Generalization","score":0.5686963200569153},{"id":"https://openalex.org/keywords/artificial-intelligence","display_name":"Artificial intelligence","score":0.522956907749176},{"id":"https://openalex.org/keywords/machine-learning","display_name":"Machine learning","score":0.5037278532981873},{"id":"https://openalex.org/keywords/artificial-neural-network","display_name":"Artificial neural network","score":0.48578789830207825},{"id":"https://openalex.org/keywords/robustness","display_name":"Robustness (evolution)","score":0.46456634998321533},{"id":"https://openalex.org/keywords/key","display_name":"Key (lock)","score":0.4464412331581116},{"id":"https://openalex.org/keywords/bridging","display_name":"Bridging (networking)","score":0.4434624910354614},{"id":"https://openalex.org/keywords/control-flow-graph","display_name":"Control flow graph","score":0.43305566906929016},{"id":"https://openalex.org/keywords/theoretical-computer-science","display_name":"Theoretical computer science","score":0.4202580153942108},{"id":"https://openalex.org/keywords/data-mining","display_name":"Data mining","score":0.388234943151474},{"id":"https://openalex.org/keywords/algorithm","display_name":"Algorithm","score":0.3326992392539978},{"id":"https://openalex.org/keywords/mathematics","display_name":"Mathematics","score":0.09496116638183594}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.8001993894577026},{"id":"https://openalex.org/C177148314","wikidata":"https://www.wikidata.org/wiki/Q170084","display_name":"Generalization","level":2,"score":0.5686963200569153},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.522956907749176},{"id":"https://openalex.org/C119857082","wikidata":"https://www.wikidata.org/wiki/Q2539","display_name":"Machine learning","level":1,"score":0.5037278532981873},{"id":"https://openalex.org/C50644808","wikidata":"https://www.wikidata.org/wiki/Q192776","display_name":"Artificial neural network","level":2,"score":0.48578789830207825},{"id":"https://openalex.org/C63479239","wikidata":"https://www.wikidata.org/wiki/Q7353546","display_name":"Robustness (evolution)","level":3,"score":0.46456634998321533},{"id":"https://openalex.org/C26517878","wikidata":"https://www.wikidata.org/wiki/Q228039","display_name":"Key (lock)","level":2,"score":0.4464412331581116},{"id":"https://openalex.org/C174348530","wikidata":"https://www.wikidata.org/wiki/Q188635","display_name":"Bridging (networking)","level":2,"score":0.4434624910354614},{"id":"https://openalex.org/C27458966","wikidata":"https://www.wikidata.org/wiki/Q1187693","display_name":"Control flow graph","level":2,"score":0.43305566906929016},{"id":"https://openalex.org/C80444323","wikidata":"https://www.wikidata.org/wiki/Q2878974","display_name":"Theoretical computer science","level":1,"score":0.4202580153942108},{"id":"https://openalex.org/C124101348","wikidata":"https://www.wikidata.org/wiki/Q172491","display_name":"Data mining","level":1,"score":0.388234943151474},{"id":"https://openalex.org/C11413529","wikidata":"https://www.wikidata.org/wiki/Q8366","display_name":"Algorithm","level":1,"score":0.3326992392539978},{"id":"https://openalex.org/C33923547","wikidata":"https://www.wikidata.org/wiki/Q395","display_name":"Mathematics","level":0,"score":0.09496116638183594},{"id":"https://openalex.org/C185592680","wikidata":"https://www.wikidata.org/wiki/Q2329","display_name":"Chemistry","level":0,"score":0.0},{"id":"https://openalex.org/C55493867","wikidata":"https://www.wikidata.org/wiki/Q7094","display_name":"Biochemistry","level":1,"score":0.0},{"id":"https://openalex.org/C31258907","wikidata":"https://www.wikidata.org/wiki/Q1301371","display_name":"Computer network","level":1,"score":0.0},{"id":"https://openalex.org/C104317684","wikidata":"https://www.wikidata.org/wiki/Q7187","display_name":"Gene","level":2,"score":0.0},{"id":"https://openalex.org/C134306372","wikidata":"https://www.wikidata.org/wiki/Q7754","display_name":"Mathematical analysis","level":1,"score":0.0},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.0}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1145/3728906","is_oa":true,"landing_page_url":"https://doi.org/10.1145/3728906","pdf_url":"https://dl.acm.org/doi/pdf/10.1145/3728906","source":{"id":"https://openalex.org/S4404663975","display_name":"Proceedings of the ACM on software engineering.","issn_l":"2994-970X","issn":["2994-970X"],"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/P4310319798","host_organization_name":"Association for Computing Machinery","host_organization_lineage":["https://openalex.org/P4310319798"],"host_organization_lineage_names":["Association for Computing Machinery"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the ACM on Software Engineering","raw_type":"journal-article"}],"best_oa_location":{"id":"doi:10.1145/3728906","is_oa":true,"landing_page_url":"https://doi.org/10.1145/3728906","pdf_url":"https://dl.acm.org/doi/pdf/10.1145/3728906","source":{"id":"https://openalex.org/S4404663975","display_name":"Proceedings of the ACM on software engineering.","issn_l":"2994-970X","issn":["2994-970X"],"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/P4310319798","host_organization_name":"Association for Computing Machinery","host_organization_lineage":["https://openalex.org/P4310319798"],"host_organization_lineage_names":["Association for Computing Machinery"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the ACM on Software Engineering","raw_type":"journal-article"},"sustainable_development_goals":[],"awards":[],"funders":[{"id":"https://openalex.org/F4320313889","display_name":"Lanzhou University","ror":"https://ror.org/01mkqqe32"}],"has_content":{"grobid_xml":true,"pdf":true},"content_urls":{"pdf":"https://content.openalex.org/works/W4411522999.pdf","grobid_xml":"https://content.openalex.org/works/W4411522999.grobid-xml"},"referenced_works_count":22,"referenced_works":["https://openalex.org/W2053152889","https://openalex.org/W2060692877","https://openalex.org/W2116098983","https://openalex.org/W2124153277","https://openalex.org/W2163563828","https://openalex.org/W2560674852","https://openalex.org/W2562731582","https://openalex.org/W2591794136","https://openalex.org/W2907492528","https://openalex.org/W2950898568","https://openalex.org/W3034846572","https://openalex.org/W3097300053","https://openalex.org/W3110666852","https://openalex.org/W3158330599","https://openalex.org/W4206214607","https://openalex.org/W4297581805","https://openalex.org/W4303426745","https://openalex.org/W4372046852","https://openalex.org/W4382239980","https://openalex.org/W4384345745","https://openalex.org/W4391558363","https://openalex.org/W4399695831"],"related_works":["https://openalex.org/W4408719353","https://openalex.org/W4388870064","https://openalex.org/W2210139803","https://openalex.org/W4235186151","https://openalex.org/W2054685365","https://openalex.org/W2056057048","https://openalex.org/W2667588871","https://openalex.org/W2964145245","https://openalex.org/W2595205408","https://openalex.org/W2422195048"],"abstract_inverted_index":{"Recent":[0],"advances":[1],"in":[2,14,18,51,102,151,219,232],"applying":[3],"deep":[4],"neural":[5,49],"networks":[6,50],"to":[7,44,69,186],"programming":[8],"tasks":[9,234],"have":[10],"achieved":[11],"remarkable":[12],"success":[13],"practice,":[15],"prompting":[16],"interest":[17],"exploring":[19],"how":[20],"well":[21],"these":[22,118,148],"models":[23,209],"can":[24,72,205],"perform":[25,206],"traditional":[26],"program":[27],"analysis":[28,31],"techniques.":[29],"Data-flow":[30],"(DFA),":[32],"a":[33,216],"classic":[34],"and":[35,60,104,130,181,228],"well-established":[36],"approach":[37],"for":[38],"analyzing":[39],"programs,":[40],"presents":[41],"an":[42],"opportunity":[43],"assess":[45],"the":[46,55,67,75,80,95,99,105,115,138,144,226,239],"capabilities":[47],"of":[48,82,98,108,114,147,230],"this":[52],"domain.":[53],"Given":[54],"structural":[56],"similarities":[57],"between":[58],"DFA":[59,76,103,139],"Graph":[61],"Neural":[62,86],"Networks":[63],"(GNNs),":[64],"we":[65,90,120,196],"explore":[66],"extent":[68],"which":[70],"GNNs":[71,168,199,231],"effectively":[73],"model":[74],"algorithm.":[77,116,140,241],"Building":[78],"on":[79,156,161],"concept":[81],"algorithmic":[83,171],"alignment":[84],"from":[85],"Algorithmic":[87],"Reasoning":[88],"(NAR),":[89],"identify":[91],"two":[92],"key":[93],"challenges:":[94],"noninterference":[96],"property":[97],"bit-vectors":[100],"used":[101],"complex":[106],"handling":[107],"external":[109],"information":[110],"at":[111],"different":[112],"stages":[113],"Addressing":[117],"gaps,":[119],"propose":[121],"three":[122],"GNN":[123],"architectures":[124],"\u2014":[125,133],"DFA-GNN":[126,131,175],"\u2212":[127],",":[128,177],"DFA-GNN,":[129],"+":[132,176],"that":[134,167,198],"progressively":[135],"align":[136],"with":[137,169,191,201,208,238],"Our":[141],"evaluations":[142],"emphasize":[143],"generalization":[145,180],"capacity":[146],"models,":[149],"particularly":[150],"scenarios":[152],"where":[153],"training":[154,193],"occurs":[155],"smaller":[157],"samples":[158],"while":[159],"testing":[160],"much":[162],"larger":[163,189],"inputs.":[164],"Results":[165],"demonstrate":[166],"higher":[170],"alignment,":[172],"such":[173],"as":[174],"exhibit":[178],"superior":[179],"sample":[182],"efficiency,":[183],"accurately":[184],"scaling":[185],"10":[187],"times":[188],"inputs":[190],"minimal":[192],"data.":[194],"Notably,":[195],"show":[197],"trained":[200,210],"only":[202],"input-output":[203],"pairs":[204],"competitively":[207],"using":[211],"full":[212],"execution":[213],"trajectory":[214],"supervision,":[215],"common":[217],"practice":[218],"recent":[220],"NAR":[221],"studies.":[222],"This":[223],"finding":[224],"highlights":[225],"efficiency":[227],"robustness":[229],"reasoning":[233],"when":[235],"algorithmically":[236],"aligned":[237],"target":[240]},"counts_by_year":[],"updated_date":"2026-08-01T09:00:35.917206","created_date":"2025-10-10T00:00:00"}
