{"id":"https://openalex.org/W7166818667","doi":"https://doi.org/10.18653/v1/2026.findings-acl.928","title":"VulAgent: Hypothesis-Validation Driven Multi-Agent Architecture for Vulnerability Detection","display_name":"VulAgent: Hypothesis-Validation Driven Multi-Agent Architecture for Vulnerability Detection","publication_year":2026,"publication_date":"2026-01-01","ids":{"openalex":"https://openalex.org/W7166818667","doi":"https://doi.org/10.18653/v1/2026.findings-acl.928"},"language":null,"primary_location":{"id":"doi:10.18653/v1/2026.findings-acl.928","is_oa":true,"landing_page_url":"https://doi.org/10.18653/v1/2026.findings-acl.928","pdf_url":"https://aclanthology.org/2026.findings-acl.928.pdf","source":null,"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Findings of the Association for Computational Linguistics: ACL 2026","raw_type":"proceedings-article"},"type":"conference-paper","indexed_in":["crossref"],"open_access":{"is_oa":true,"oa_status":"gold","oa_url":"https://aclanthology.org/2026.findings-acl.928.pdf","any_repository_has_fulltext":null},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5100676331","display_name":"Ziliang Wang","orcid":"https://orcid.org/0000-0001-7534-0059"},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Ziliang Wang","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5139845338","display_name":"Ge Li","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Ge Li","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5139792842","display_name":"Jia Li","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Jia Li","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5139759003","display_name":"Hao Zhu","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Hao Zhu","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"last","author":{"id":"https://openalex.org/A5123501038","display_name":"Zhi Jin","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Zhi Jin","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]}],"institutions":[],"countries_distinct_count":0,"institutions_distinct_count":0,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":0.0,"has_fulltext":true,"cited_by_count":0,"citation_normalized_percentile":{"value":0.84682556,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":null,"biblio":{"volume":null,"issue":null,"first_page":"18598","last_page":"18616"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T12127","display_name":"Software System Performance and Reliability","score":0.30869999527931213,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T12127","display_name":"Software System Performance and Reliability","score":0.30869999527931213,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.1396999955177307,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10734","display_name":"Information and Cyber Security","score":0.07020000368356705,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/vulnerability","display_name":"Vulnerability (computing)","score":0.4047999978065491},{"id":"https://openalex.org/keywords/key","display_name":"Key (lock)","score":0.289900004863739},{"id":"https://openalex.org/keywords/architecture","display_name":"Architecture","score":0.2797999978065491},{"id":"https://openalex.org/keywords/component","display_name":"Component (thermodynamics)","score":0.2685999870300293},{"id":"https://openalex.org/keywords/context","display_name":"Context (archaeology)","score":0.26100000739097595}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.6082000136375427},{"id":"https://openalex.org/C95713431","wikidata":"https://www.wikidata.org/wiki/Q631425","display_name":"Vulnerability (computing)","level":2,"score":0.4047999978065491},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.31220000982284546},{"id":"https://openalex.org/C26517878","wikidata":"https://www.wikidata.org/wiki/Q228039","display_name":"Key (lock)","level":2,"score":0.289900004863739},{"id":"https://openalex.org/C123657996","wikidata":"https://www.wikidata.org/wiki/Q12271","display_name":"Architecture","level":2,"score":0.2797999978065491},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.2784000039100647},{"id":"https://openalex.org/C168167062","wikidata":"https://www.wikidata.org/wiki/Q1117970","display_name":"Component (thermodynamics)","level":2,"score":0.2685999870300293},{"id":"https://openalex.org/C2779343474","wikidata":"https://www.wikidata.org/wiki/Q3109175","display_name":"Context (archaeology)","level":2,"score":0.26100000739097595},{"id":"https://openalex.org/C9652623","wikidata":"https://www.wikidata.org/wiki/Q190109","display_name":"Field (mathematics)","level":2,"score":0.25589999556541443},{"id":"https://openalex.org/C98045186","wikidata":"https://www.wikidata.org/wiki/Q205663","display_name":"Process (computing)","level":2,"score":0.25029999017715454}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.18653/v1/2026.findings-acl.928","is_oa":true,"landing_page_url":"https://doi.org/10.18653/v1/2026.findings-acl.928","pdf_url":"https://aclanthology.org/2026.findings-acl.928.pdf","source":null,"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Findings of the Association for Computational Linguistics: ACL 2026","raw_type":"proceedings-article"}],"best_oa_location":{"id":"doi:10.18653/v1/2026.findings-acl.928","is_oa":true,"landing_page_url":"https://doi.org/10.18653/v1/2026.findings-acl.928","pdf_url":"https://aclanthology.org/2026.findings-acl.928.pdf","source":null,"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Findings of the Association for Computational Linguistics: ACL 2026","raw_type":"proceedings-article"},"sustainable_development_goals":[{"score":0.4962262809276581,"id":"https://metadata.un.org/sdg/13","display_name":"Climate action"}],"awards":[],"funders":[],"has_content":{"pdf":true,"grobid_xml":true},"content_urls":{"pdf":"https://content.openalex.org/works/W7166818667.pdf","grobid_xml":"https://content.openalex.org/works/W7166818667.grobid-xml"},"referenced_works_count":0,"referenced_works":[],"related_works":[],"abstract_inverted_index":{"Vulnerability":[0],"detection":[1,32],"with":[2,116],"language":[3],"models":[4],"is":[5,39],"challenging:":[6],"it":[7,93],"requires":[8],"(i)":[9],"precisely":[10],"localizing":[11],"security-sensitive":[12,85],"code":[13,74],"and":[14,64,83,104,125,133,139,161],"(ii)":[15],"reasoning":[16],"about":[17,56],"potential":[18,61],"vulnerability":[19,31,98],"conditions":[20],"under":[21],"complex,":[22],"partially":[23],"observed":[24],"program":[25],"context.We":[26],"present":[27],"VulAgent,":[28],"a":[29,49,54,57,73,105],"multi-agent":[30],"framework":[33],"based":[34],"on":[35,148,159],"hypothesis":[36,55,68,111],"validation.Our":[37],"design":[38,129],"inspired":[40],"by":[41,144,154,166],"how":[42],"human":[43],"auditors":[44],"review":[45],"code:":[46],"when":[47],"noticing":[48],"sensitive":[50,91],"operation,":[51,92],"they":[52],"form":[53],"possible":[58],"vulnerability,":[59],"consider":[60],"trigger":[62,107],"paths,":[63],"then":[65,94],"verify":[66],"the":[67,70,110,117],"against":[69],"project":[71,113],"context.Given":[72],"unit,":[75],"VulAgent":[76,141],"first":[77],"applies":[78],"multi-view":[79],"analyzers":[80],"to":[81,156,169],"identify":[82],"localize":[84],"operations":[86],"from":[87],"complementary":[88],"perspectives.For":[89],"each":[90],"constructs":[95],"an":[96],"explicit":[97],"hypothesis-including":[99],"triggering":[100],"(or":[101],"exploitation)":[102],"preconditions":[103],"candidate":[106],"path-and":[108],"validates":[109],"using":[112],"context":[114],"together":[115],"model's":[118],"general":[119],"knowledge":[120],"of":[121],"commonly":[122],"used":[123],"APIs":[124],"security":[126],"patterns.This":[127],"validation-oriented":[128],"reduces":[130,162],"speculative":[131],"reports":[132],"substantially":[134],"lowers":[135],"false":[136,163],"positives.Across":[137],"PrimeVul":[138],"SVEN,":[140],"improves":[142],"accuracy":[143],"6.6":[145],"percentage":[146],"points":[147],"average,":[149],"increases":[150],"vulnerable-fixed":[151],"pair":[152],"identification":[153],"up":[155],"4.5\u00d7":[157],"(2.46\u00d7":[158],"average),":[160],"positive":[164],"rate":[165],"36%":[167],"relative":[168],"recent":[170],"LLMbased":[171],"baselines.":[172]},"counts_by_year":[],"updated_date":"2026-07-29T14:22:42.915294","created_date":"2026-07-02T00:00:00"}