{"id":"https://openalex.org/W7133300548","doi":"https://doi.org/10.48550/arxiv.2603.01154","title":"vEcho: A Paradigm Shift from Vulnerability Verification to Proactive Discovery with Large Language Models","display_name":"vEcho: A Paradigm Shift from Vulnerability Verification to Proactive Discovery with Large Language Models","publication_year":2026,"publication_date":"2026-03-01","ids":{"openalex":"https://openalex.org/W7133300548","doi":"https://doi.org/10.48550/arxiv.2603.01154"},"language":null,"primary_location":{"id":"pmh:doi:10.48550/arxiv.2603.01154","is_oa":true,"landing_page_url":null,"pdf_url":null,"source":{"id":"https://openalex.org/S4406922384","display_name":"Open MIND","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":null,"host_organization_name":null,"host_organization_lineage":[],"host_organization_lineage_names":[],"type":"repository"},"license":"publisher-specific-oa","license_id":"https://openalex.org/licenses/publisher-specific-oa","version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"Article"},"type":"article","indexed_in":["datacite"],"open_access":{"is_oa":true,"oa_status":"green","oa_url":null,"any_repository_has_fulltext":true},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5013024249","display_name":"Mingcheng Jiang","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Jiang, Mingcheng","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5127972100","display_name":"Jiancheng Huang","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Huang, Jiancheng","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5127936459","display_name":"Jiangfei Wang","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Wang, Jiangfei","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5127925013","display_name":"Zhengzhu Xie","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Xie, Zhengzhu","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5127912635","display_name":"Nan Fang","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Fang, Nan","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5128029622","display_name":"Guang Cheng","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Cheng, Guang","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5127923127","display_name":"Xiaoyan Hu","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Hu, Xiaoyan","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"last","author":{"id":"https://openalex.org/A5032328549","display_name":"Hua Wu","orcid":"https://orcid.org/0000-0002-8829-0182"},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Wu, Hua","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]}],"institutions":[],"countries_distinct_count":0,"institutions_distinct_count":0,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":0.0,"has_fulltext":false,"cited_by_count":0,"citation_normalized_percentile":{"value":0.17026165,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":null,"biblio":{"volume":null,"issue":null,"first_page":null,"last_page":null},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T12479","display_name":"Web Application Security Vulnerabilities","score":0.3781000077724457,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T12479","display_name":"Web Application Security Vulnerabilities","score":0.3781000077724457,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10734","display_name":"Information and Cyber Security","score":0.15889999270439148,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11424","display_name":"Security and Verification in Computing","score":0.1177000030875206,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/paradigm-shift","display_name":"Paradigm shift","score":0.612500011920929},{"id":"https://openalex.org/keywords/vulnerability","display_name":"Vulnerability (computing)","score":0.5791000127792358},{"id":"https://openalex.org/keywords/context","display_name":"Context (archaeology)","score":0.5627999901771545},{"id":"https://openalex.org/keywords/filter","display_name":"Filter (signal processing)","score":0.38199999928474426},{"id":"https://openalex.org/keywords/language-model","display_name":"Language model","score":0.3725000023841858},{"id":"https://openalex.org/keywords/cognition","display_name":"Cognition","score":0.3560999929904938},{"id":"https://openalex.org/keywords/suite","display_name":"Suite","score":0.34139999747276306},{"id":"https://openalex.org/keywords/reduction","display_name":"Reduction (mathematics)","score":0.335999995470047}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.7656000256538391},{"id":"https://openalex.org/C43540301","wikidata":"https://www.wikidata.org/wiki/Q689971","display_name":"Paradigm shift","level":2,"score":0.612500011920929},{"id":"https://openalex.org/C95713431","wikidata":"https://www.wikidata.org/wiki/Q631425","display_name":"Vulnerability (computing)","level":2,"score":0.5791000127792358},{"id":"https://openalex.org/C2779343474","wikidata":"https://www.wikidata.org/wiki/Q3109175","display_name":"Context (archaeology)","level":2,"score":0.5627999901771545},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.430400013923645},{"id":"https://openalex.org/C106131492","wikidata":"https://www.wikidata.org/wiki/Q3072260","display_name":"Filter (signal processing)","level":2,"score":0.38199999928474426},{"id":"https://openalex.org/C137293760","wikidata":"https://www.wikidata.org/wiki/Q3621696","display_name":"Language model","level":2,"score":0.3725000023841858},{"id":"https://openalex.org/C169900460","wikidata":"https://www.wikidata.org/wiki/Q2200417","display_name":"Cognition","level":2,"score":0.3560999929904938},{"id":"https://openalex.org/C79581498","wikidata":"https://www.wikidata.org/wiki/Q1367530","display_name":"Suite","level":2,"score":0.34139999747276306},{"id":"https://openalex.org/C111335779","wikidata":"https://www.wikidata.org/wiki/Q3454686","display_name":"Reduction (mathematics)","level":2,"score":0.335999995470047},{"id":"https://openalex.org/C199521495","wikidata":"https://www.wikidata.org/wiki/Q181487","display_name":"Audit","level":2,"score":0.32089999318122864},{"id":"https://openalex.org/C64869954","wikidata":"https://www.wikidata.org/wiki/Q1859747","display_name":"False positive paradox","level":2,"score":0.3160000145435333},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.30570000410079956},{"id":"https://openalex.org/C149946192","wikidata":"https://www.wikidata.org/wiki/Q3235733","display_name":"Cognitive radio","level":3,"score":0.29179999232292175},{"id":"https://openalex.org/C2776576444","wikidata":"https://www.wikidata.org/wiki/Q303569","display_name":"Attack surface","level":2,"score":0.2816999852657318},{"id":"https://openalex.org/C150303390","wikidata":"https://www.wikidata.org/wiki/Q1983852","display_name":"Virtual actor","level":3,"score":0.2702000141143799},{"id":"https://openalex.org/C103613024","wikidata":"https://www.wikidata.org/wiki/Q230924","display_name":"Stateless protocol","level":3,"score":0.2669999897480011},{"id":"https://openalex.org/C2780980858","wikidata":"https://www.wikidata.org/wiki/Q110022","display_name":"Dual (grammatical number)","level":2,"score":0.2667999863624573},{"id":"https://openalex.org/C168065819","wikidata":"https://www.wikidata.org/wiki/Q845566","display_name":"Debugging","level":2,"score":0.26030001044273376},{"id":"https://openalex.org/C167063184","wikidata":"https://www.wikidata.org/wiki/Q1400839","display_name":"Vulnerability assessment","level":3,"score":0.2565999925136566}],"mesh":[],"locations_count":2,"locations":[{"id":"pmh:doi:10.48550/arxiv.2603.01154","is_oa":true,"landing_page_url":null,"pdf_url":null,"source":{"id":"https://openalex.org/S4406922384","display_name":"Open MIND","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":null,"host_organization_name":null,"host_organization_lineage":[],"host_organization_lineage_names":[],"type":"repository"},"license":"publisher-specific-oa","license_id":"https://openalex.org/licenses/publisher-specific-oa","version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"Article"},{"id":"doi:10.48550/arxiv.2603.01154","is_oa":true,"landing_page_url":"https://doi.org/10.48550/arxiv.2603.01154","pdf_url":null,"source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":null,"issn":null,"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":null,"is_accepted":false,"is_published":null,"raw_source_name":null,"raw_type":"Preprint"}],"best_oa_location":{"id":"pmh:doi:10.48550/arxiv.2603.01154","is_oa":true,"landing_page_url":null,"pdf_url":null,"source":{"id":"https://openalex.org/S4406922384","display_name":"Open MIND","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":null,"host_organization_name":null,"host_organization_lineage":[],"host_organization_lineage_names":[],"type":"repository"},"license":"publisher-specific-oa","license_id":"https://openalex.org/licenses/publisher-specific-oa","version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"Article"},"sustainable_development_goals":[{"score":0.4406277537345886,"id":"https://metadata.un.org/sdg/16","display_name":"Peace, Justice and strong institutions"}],"awards":[],"funders":[],"has_content":{"grobid_xml":false,"pdf":false},"content_urls":null,"referenced_works_count":0,"referenced_works":[],"related_works":[],"abstract_inverted_index":{"Static":[0],"Application":[1],"Security":[2],"Testing":[3],"(SAST)":[4],"tools":[5],"often":[6],"suffer":[7],"from":[8,52,72,129,142,196],"high":[9],"false":[10,187],"positive":[11,188],"rates,":[12],"leading":[13],"to":[14,50,54,127,145,190],"alert":[15,182],"fatigue":[16,183],"that":[17,68,120],"consumes":[18],"valuable":[19],"auditing":[20],"resources.":[21],"Recent":[22],"efforts":[23],"leveraging":[24],"Large":[25],"Language":[26],"Models":[27],"(LLMs)":[28],"as":[29,39],"filters":[30],"offer":[31],"limited":[32],"improvements;":[33],"however,":[34],"these":[35],"methods":[36],"treat":[37],"LLMs":[38],"passive,":[40],"stateless":[41],"classifiers,":[42],"which":[43],"lack":[44],"project-wide":[45],"context":[46],"and":[47,85,132,214],"the":[48,70,151,159,186,208,212],"ability":[49],"learn":[51,128],"analyses":[53],"discover":[55],"unknown,":[56,135],"similar":[57],"vulnerabilities.":[58],"In":[59],"this":[60],"paper,":[61],"we":[62,105],"propose":[63],"vEcho,":[64],"a":[65,73,77,94,107,116,139,166,171,192],"novel":[66,108,218],"framework":[67],"transforms":[69],"LLM":[71],"passive":[74,143],"filter":[75],"into":[76],"virtual":[78],"security":[79],"expert":[80],"capable":[81],"of":[82],"learning,":[83,123],"memory,":[84],"reasoning.":[86],"vEcho":[87,126,164,200],"equips":[88],"its":[89],"core":[90],"reasoning":[91],"engine":[92],"with":[93],"robust":[95],"developer":[96],"tool":[97],"suite":[98],"for":[99],"deep,":[100],"context-aware":[101],"verification.":[102],"More":[103],"importantly,":[104],"introduce":[106],"Echoic":[109],"Vulnerability":[110],"Propagation":[111],"(EVP)":[112],"mechanism.":[113],"Driven":[114],"by":[115,184],"Cognitive":[117],"Memory":[118],"Module":[119],"simulates":[121],"human":[122],"EVP":[124],"enables":[125],"verified":[130],"vulnerabilities":[131,206,220],"proactively":[133,201],"infer":[134],"analogous":[136],"flaws,":[137],"achieving":[138],"paradigm":[140],"shift":[141],"verification":[144],"active":[146],"discovery.":[147],"Extensive":[148],"experiments":[149],"on":[150],"CWE-Bench-Java":[152],"dataset":[153],"demonstrate":[154],"vEcho's":[155],"dual":[156],"advantages":[157],"over":[158,175],"state-of-the-art":[160],"baseline,":[161],"IRIS.":[162],"Specifically,":[163],"achieves":[165],"65%":[167],"detection":[168],"rate,":[169],"marking":[170],"41.8%":[172],"relative":[173,194],"improvement":[174],"IRIS's":[176,197],"45.83%.":[177],"Crucially,":[178],"it":[179],"simultaneously":[180],"addresses":[181],"reducing":[185],"rate":[189],"59.78%,":[191],"28.3%":[193],"reduction":[195],"84.82%.":[198],"Furthermore,":[199],"identified":[202],"37":[203],"additional":[204],"known":[205],"beyond":[207],"120":[209],"documented":[210],"in":[211,221],"dataset,":[213],"has":[215],"discovered":[216],"51":[217],"0-day":[219],"open-source":[222],"projects.":[223]},"counts_by_year":[],"updated_date":"2026-07-15T18:14:33.161393","created_date":"2026-03-04T00:00:00"}