{"id":"https://openalex.org/W4412898693","doi":"https://doi.org/10.1145/3749370","title":"Just-in-Time Detection of Silent Security Patches","display_name":"Just-in-Time Detection of Silent Security Patches","publication_year":2025,"publication_date":"2025-07-29","ids":{"openalex":"https://openalex.org/W4412898693","doi":"https://doi.org/10.1145/3749370"},"language":"en","primary_location":{"id":"doi:10.1145/3749370","is_oa":true,"landing_page_url":"https://doi.org/10.1145/3749370","pdf_url":null,"source":{"id":"https://openalex.org/S142627899","display_name":"ACM Transactions on Software Engineering and Methodology","issn_l":"1049-331X","issn":["1049-331X","1557-7392"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310319798","host_organization_name":"Association for Computing Machinery","host_organization_lineage":["https://openalex.org/P4310319798"],"host_organization_lineage_names":["Association for Computing Machinery"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"ACM Transactions on Software Engineering and Methodology","raw_type":"journal-article"},"type":"article","indexed_in":["crossref"],"open_access":{"is_oa":true,"oa_status":"hybrid","oa_url":"https://doi.org/10.1145/3749370","any_repository_has_fulltext":true},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5052969638","display_name":"Xunzhu Tang","orcid":"https://orcid.org/0000-0002-6377-0884"},"institutions":[{"id":"https://openalex.org/I186903577","display_name":"University of Luxembourg","ror":"https://ror.org/036x5ad56","country_code":"LU","type":"education","lineage":["https://openalex.org/I186903577"]}],"countries":["LU"],"is_corresponding":false,"raw_author_name":"Xunzhu Tang","raw_affiliation_strings":["University of Luxembourg, Esch-sur-Alzette, Luxembourg","University of Luxembourg, Luxembourg"],"raw_orcid":"https://orcid.org/0000-0002-6377-0884","affiliations":[{"raw_affiliation_string":"University of Luxembourg, Esch-sur-Alzette, Luxembourg","institution_ids":["https://openalex.org/I186903577"]},{"raw_affiliation_string":"University of Luxembourg, Luxembourg","institution_ids":["https://openalex.org/I186903577"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5074029092","display_name":"Kisub Kim","orcid":"https://orcid.org/0000-0002-4462-6916"},"institutions":[{"id":"https://openalex.org/I193352282","display_name":"Daegu Gyeongbuk Institute of Science and Technology","ror":"https://ror.org/03frjya69","country_code":"KR","type":"education","lineage":["https://openalex.org/I193352282"]},{"id":"https://openalex.org/I21028721","display_name":"Eulji University","ror":"https://ror.org/005bty106","country_code":"KR","type":"education","lineage":["https://openalex.org/I21028721"]}],"countries":["KR"],"is_corresponding":false,"raw_author_name":"Kisub Kim","raw_affiliation_strings":["DGIST, Daegu, Republic of Korea","DGIST, Repulic of Korea"],"raw_orcid":"https://orcid.org/0000-0002-4462-6916","affiliations":[{"raw_affiliation_string":"DGIST, Daegu, Republic of Korea","institution_ids":["https://openalex.org/I193352282"]},{"raw_affiliation_string":"DGIST, Repulic of Korea","institution_ids":["https://openalex.org/I21028721"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5009803558","display_name":"Saad Ezzini","orcid":"https://orcid.org/0000-0001-7657-4738"},"institutions":[{"id":"https://openalex.org/I134085113","display_name":"King Fahd University of Petroleum and Minerals","ror":"https://ror.org/03yez3163","country_code":"SA","type":"education","lineage":["https://openalex.org/I134085113"]}],"countries":["SA"],"is_corresponding":false,"raw_author_name":"Saad Ezzini","raw_affiliation_strings":["King Fahd University of Petroleum and Minerals, Dhahran, Saudi Arabia","King Fahd University of Petroleum & Minerals, Saudi Arabia"],"raw_orcid":"https://orcid.org/0000-0001-7657-4738","affiliations":[{"raw_affiliation_string":"King Fahd University of Petroleum and Minerals, Dhahran, Saudi Arabia","institution_ids":["https://openalex.org/I134085113"]},{"raw_affiliation_string":"King Fahd University of Petroleum & Minerals, Saudi Arabia","institution_ids":["https://openalex.org/I134085113"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5070561037","display_name":"Yewei Song","orcid":"https://orcid.org/0000-0002-6314-7515"},"institutions":[{"id":"https://openalex.org/I186903577","display_name":"University of Luxembourg","ror":"https://ror.org/036x5ad56","country_code":"LU","type":"education","lineage":["https://openalex.org/I186903577"]}],"countries":["LU"],"is_corresponding":false,"raw_author_name":"Yewei Song","raw_affiliation_strings":["University of Luxembourg, Esch-sur-Alzette, Luxembourg","University of Luxembourg, Luxembourg"],"raw_orcid":"https://orcid.org/0000-0002-6314-7515","affiliations":[{"raw_affiliation_string":"University of Luxembourg, Esch-sur-Alzette, Luxembourg","institution_ids":["https://openalex.org/I186903577"]},{"raw_affiliation_string":"University of Luxembourg, Luxembourg","institution_ids":["https://openalex.org/I186903577"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5101397373","display_name":"Haoye Tian","orcid":"https://orcid.org/0000-0002-8049-3997"},"institutions":[{"id":"https://openalex.org/I165779595","display_name":"The University of Melbourne","ror":"https://ror.org/01ej9dk98","country_code":"AU","type":"education","lineage":["https://openalex.org/I165779595"]}],"countries":["AU"],"is_corresponding":false,"raw_author_name":"Haoye Tian","raw_affiliation_strings":["University of Melbourne, Melbourne, Australia","University of Melbourne, Australia"],"raw_orcid":"https://orcid.org/0000-0002-8049-3997","affiliations":[{"raw_affiliation_string":"University of Melbourne, Melbourne, Australia","institution_ids":["https://openalex.org/I165779595"]},{"raw_affiliation_string":"University of Melbourne, Australia","institution_ids":["https://openalex.org/I165779595"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5040326968","display_name":"Jacques Klein","orcid":"https://orcid.org/0000-0003-4052-475X"},"institutions":[{"id":"https://openalex.org/I186903577","display_name":"University of Luxembourg","ror":"https://ror.org/036x5ad56","country_code":"LU","type":"education","lineage":["https://openalex.org/I186903577"]}],"countries":["LU"],"is_corresponding":false,"raw_author_name":"Jacques Klein","raw_affiliation_strings":["University of Luxembourg, Esch-sur-Alzette, Luxembourg","University of Luxembourg, Luxembourg"],"raw_orcid":"https://orcid.org/0000-0003-4052-475X","affiliations":[{"raw_affiliation_string":"University of Luxembourg, Esch-sur-Alzette, Luxembourg","institution_ids":["https://openalex.org/I186903577"]},{"raw_affiliation_string":"University of Luxembourg, Luxembourg","institution_ids":["https://openalex.org/I186903577"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5082835974","display_name":"Tegawend\u00e9 F. Bissyand\u00e9","orcid":"https://orcid.org/0000-0001-7270-9869"},"institutions":[{"id":"https://openalex.org/I186903577","display_name":"University of Luxembourg","ror":"https://ror.org/036x5ad56","country_code":"LU","type":"education","lineage":["https://openalex.org/I186903577"]}],"countries":["LU"],"is_corresponding":false,"raw_author_name":"Tegawend\u00e9 Bissyand\u00e9","raw_affiliation_strings":["University of Luxembourg, Esch-sur-Alzette, Luxembourg","University of Luxembourg, Luxembourg"],"raw_orcid":"https://orcid.org/0000-0001-7270-9869","affiliations":[{"raw_affiliation_string":"University of Luxembourg, Esch-sur-Alzette, Luxembourg","institution_ids":["https://openalex.org/I186903577"]},{"raw_affiliation_string":"University of Luxembourg, Luxembourg","institution_ids":["https://openalex.org/I186903577"]}]}],"institutions":[],"countries_distinct_count":4,"institutions_distinct_count":5,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":2.018,"has_fulltext":true,"cited_by_count":1,"citation_normalized_percentile":{"value":0.89053183,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":{"min":94,"max":97},"biblio":{"volume":"35","issue":"6","first_page":"1","last_page":"34"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10260","display_name":"Software Engineering Research","score":0.9998999834060669,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10260","display_name":"Software Engineering Research","score":0.9998999834060669,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":0.9972000122070312,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T12423","display_name":"Software Reliability and Analysis Research","score":0.996399998664856,"subfield":{"id":"https://openalex.org/subfields/1712","display_name":"Software"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.8213479518890381},{"id":"https://openalex.org/keywords/computer-security","display_name":"Computer security","score":0.42755356431007385}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.8213479518890381},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.42755356431007385}],"mesh":[],"locations_count":2,"locations":[{"id":"doi:10.1145/3749370","is_oa":true,"landing_page_url":"https://doi.org/10.1145/3749370","pdf_url":null,"source":{"id":"https://openalex.org/S142627899","display_name":"ACM Transactions on Software Engineering and Methodology","issn_l":"1049-331X","issn":["1049-331X","1557-7392"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310319798","host_organization_name":"Association for Computing Machinery","host_organization_lineage":["https://openalex.org/P4310319798"],"host_organization_lineage_names":["Association for Computing Machinery"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"ACM Transactions on Software Engineering and Methodology","raw_type":"journal-article"},{"id":"pmh:oai:orbilu.uni.lu:10993/65669","is_oa":true,"landing_page_url":"https://orbilu.uni.lu/handle/10993/65669","pdf_url":"https://orbilu.uni.lu/bitstream/10993/65669/1/TOSEM25-LLMDA.pdf","source":{"id":"https://openalex.org/S4306401815","display_name":"Open Repository and Bibliography (University of Luxembourg)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I186903577","host_organization_name":"University of Luxembourg","host_organization_lineage":["https://openalex.org/I186903577"],"host_organization_lineage_names":[],"type":"repository"},"license":"other-oa","license_id":"https://openalex.org/licenses/other-oa","version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"ACM Transactions on Software Engineering and Methodology (2025-07-29)","raw_type":"http://purl.org/coar/resource_type/c_6501"}],"best_oa_location":{"id":"doi:10.1145/3749370","is_oa":true,"landing_page_url":"https://doi.org/10.1145/3749370","pdf_url":null,"source":{"id":"https://openalex.org/S142627899","display_name":"ACM Transactions on Software Engineering and Methodology","issn_l":"1049-331X","issn":["1049-331X","1557-7392"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310319798","host_organization_name":"Association for Computing Machinery","host_organization_lineage":["https://openalex.org/P4310319798"],"host_organization_lineage_names":["Association for Computing Machinery"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"ACM Transactions on Software Engineering and Methodology","raw_type":"journal-article"},"sustainable_development_goals":[],"awards":[{"id":"https://openalex.org/G1956222819","display_name":null,"funder_award_id":"949014","funder_id":"https://openalex.org/F4320320300","funder_display_name":"European Commission"}],"funders":[{"id":"https://openalex.org/F4320320300","display_name":"European Commission","ror":"https://ror.org/00k4n6c32"}],"has_content":{"pdf":false,"grobid_xml":false},"content_urls":null,"referenced_works_count":16,"referenced_works":["https://openalex.org/W2606555609","https://openalex.org/W2907544140","https://openalex.org/W2911270308","https://openalex.org/W3127736190","https://openalex.org/W3167276542","https://openalex.org/W3202579690","https://openalex.org/W4232172926","https://openalex.org/W4307079201","https://openalex.org/W4308469411","https://openalex.org/W4312543924","https://openalex.org/W4315746341","https://openalex.org/W4378713557","https://openalex.org/W4385884967","https://openalex.org/W4388826738","https://openalex.org/W4398239361","https://openalex.org/W4401011546"],"related_works":["https://openalex.org/W4391375266","https://openalex.org/W2899084033","https://openalex.org/W2748952813","https://openalex.org/W2390279801","https://openalex.org/W4391913857","https://openalex.org/W2358668433","https://openalex.org/W4396701345","https://openalex.org/W2376932109","https://openalex.org/W2001405890","https://openalex.org/W4396696052"],"abstract_inverted_index":{"Open":[0],"source":[1],"code":[2,120],"is":[3,89],"pervasive.":[4],"In":[5],"this":[6],"setting,":[7],"embedded":[8],"vulnerabilities":[9,21],"are":[10,22,87],"spreading":[11],"to":[12,35,64,73,107,114],"downstream":[13],"software":[14],"at":[15],"an":[16],"alarming":[17],"rate.":[18],"Although":[19],"such":[20,54],"generally":[23],"identified":[24],"and":[25,95,99,153,177,181],"addressed":[26],"rapidly,":[27],"inconsistent":[28],"maintenance":[29,101],"policies":[30],"can":[31,41],"cause":[32],"security":[33,39,66,80,151,169],"patches":[34,40,81],"go":[36],"unnoticed.":[37],"Indeed,":[38],"be":[42],"silent":[43,79],",":[44],"i.e.,":[45],"they":[46,86],"do":[47],"not":[48],"always":[49],"come":[50],"with":[51,118,142],"comprehensive":[52],"advisories":[53],"as":[55],"CVEs.":[56],"This":[57],"lack":[58],"of":[59,168,191,200],"transparency":[60],"leaves":[61],"users":[62],"oblivious":[63],"available":[65],"updates,":[67],"providing":[68],"ample":[69],"opportunity":[70],"for":[71,91,96,134,145,163],"attackers":[72],"exploit":[74],"unpatched":[75],"vulnerabilities.":[76],"Consequently,":[77],"identifying":[78],"just":[82],"in":[83,198],"time":[84],"when":[85],"released":[88],"essential":[90],"preventing":[92],"n-day":[93],"attacks":[94],"ensuring":[97],"robust":[98],"secure":[100],"practices.":[102],"With":[103],"llmda":[104,173],"we":[105],"propose":[106],"(1)":[108],"leverage":[109],"large":[110],"language":[111],"models":[112],"(LLMs)":[113],"augment":[115],"patch":[116],"information":[117],"generated":[119],"change":[121],"explanations,":[122],"(2)":[123],"design":[124],"a":[125,139,157,165],"representation":[126],"learning":[127,161],"approach":[128,185],"that":[129,183],"explores":[130],"code-text":[131],"alignment":[132],"methodologies":[133],"feature":[135],"combination,":[136],"(3)":[137],"implement":[138],"label-wise":[140],"training":[141],"labeled":[143],"instructions":[144],"guiding":[146],"the":[147,175,189,192,203],"embedding":[148],"based":[149],"on":[150,156,174,202],"relevance,":[152],"(4)":[154],"rely":[155],"probabilistic":[158],"batch":[159],"contrastive":[160],"mechanism":[162],"building":[164],"high-precision":[166],"identifier":[167],"patches.":[170],"We":[171],"evaluate":[172],"PatchDB":[176],"SPI-DB":[178,204],"literature":[179],"datasets":[180],"show":[182],"our":[184],"substantially":[186],"improves":[187],"over":[188],"state":[190],"art,":[193],"notably":[194],"GraphSPD":[195],"by":[196],"20%":[197],"terms":[199],"F-Measure":[201],"benchmark.":[205]},"counts_by_year":[{"year":2026,"cited_by_count":1}],"updated_date":"2026-07-15T18:14:33.161393","created_date":"2025-10-10T00:00:00"}