{"id":"https://openalex.org/W7159660450","doi":"https://doi.org/10.48550/arxiv.2604.27714","title":"How Code Representation Shapes False-Positive Dynamics in Cross-Language LLM Vulnerability Detection","display_name":"How Code Representation Shapes False-Positive Dynamics in Cross-Language LLM Vulnerability Detection","publication_year":2026,"publication_date":"2026-04-30","ids":{"openalex":"https://openalex.org/W7159660450","doi":"https://doi.org/10.48550/arxiv.2604.27714"},"language":null,"primary_location":{"id":"doi:10.48550/arxiv.2604.27714","is_oa":true,"landing_page_url":"https://doi.org/10.48550/arxiv.2604.27714","pdf_url":null,"source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":null,"issn":null,"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":null,"is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"Preprint"},"type":"preprint","indexed_in":["datacite"],"open_access":{"is_oa":true,"oa_status":"green","oa_url":"https://doi.org/10.48550/arxiv.2604.27714","any_repository_has_fulltext":true},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5134972416","display_name":"Maofei Chen","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Chen, Maofei","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5134960227","display_name":"Laifu Wang","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Wang, Laifu","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5134987789","display_name":"Yue Qin (634751)","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Qin, Yue","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5134977842","display_name":"Yuan Wang (14955)","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Wang, Yuan","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5134979078","display_name":"Bo Wu","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Wu, Bo","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"last","author":{"id":"https://openalex.org/A5130611486","display_name":"Dongxin Liu","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Liu, Dongxin","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]}],"institutions":[],"countries_distinct_count":0,"institutions_distinct_count":0,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":null,"has_fulltext":false,"cited_by_count":0,"citation_normalized_percentile":null,"cited_by_percentile_year":null,"biblio":{"volume":null,"issue":null,"first_page":null,"last_page":null},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10260","display_name":"Software Engineering Research","score":0.2840000092983246,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10260","display_name":"Software Engineering Research","score":0.2840000092983246,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10734","display_name":"Information and Cyber Security","score":0.1597999930381775,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T12479","display_name":"Web Application Security Vulnerabilities","score":0.14030000567436218,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/false-positive-paradox","display_name":"False positive paradox","score":0.6148999929428101},{"id":"https://openalex.org/keywords/false-positives-and-false-negatives","display_name":"False positives and false negatives","score":0.5385000109672546},{"id":"https://openalex.org/keywords/python","display_name":"Python (programming language)","score":0.5174000263214111},{"id":"https://openalex.org/keywords/representation","display_name":"Representation (politics)","score":0.48829999566078186},{"id":"https://openalex.org/keywords/consistency","display_name":"Consistency (knowledge bases)","score":0.48559999465942383},{"id":"https://openalex.org/keywords/inference","display_name":"Inference","score":0.4555000066757202},{"id":"https://openalex.org/keywords/code","display_name":"Code (set theory)","score":0.4422999918460846},{"id":"https://openalex.org/keywords/benchmark","display_name":"Benchmark (surveying)","score":0.4401000142097473},{"id":"https://openalex.org/keywords/nist","display_name":"NIST","score":0.40230000019073486},{"id":"https://openalex.org/keywords/java","display_name":"Java","score":0.3982999920845032}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.6309000253677368},{"id":"https://openalex.org/C64869954","wikidata":"https://www.wikidata.org/wiki/Q1859747","display_name":"False positive paradox","level":2,"score":0.6148999929428101},{"id":"https://openalex.org/C112789634","wikidata":"https://www.wikidata.org/wiki/Q18207010","display_name":"False positives and false negatives","level":3,"score":0.5385000109672546},{"id":"https://openalex.org/C519991488","wikidata":"https://www.wikidata.org/wiki/Q28865","display_name":"Python (programming language)","level":2,"score":0.5174000263214111},{"id":"https://openalex.org/C2776359362","wikidata":"https://www.wikidata.org/wiki/Q2145286","display_name":"Representation (politics)","level":3,"score":0.48829999566078186},{"id":"https://openalex.org/C2776436953","wikidata":"https://www.wikidata.org/wiki/Q5163215","display_name":"Consistency (knowledge bases)","level":2,"score":0.48559999465942383},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.47760000824928284},{"id":"https://openalex.org/C2776214188","wikidata":"https://www.wikidata.org/wiki/Q408386","display_name":"Inference","level":2,"score":0.4555000066757202},{"id":"https://openalex.org/C2776760102","wikidata":"https://www.wikidata.org/wiki/Q5139990","display_name":"Code (set theory)","level":3,"score":0.4422999918460846},{"id":"https://openalex.org/C185798385","wikidata":"https://www.wikidata.org/wiki/Q1161707","display_name":"Benchmark (surveying)","level":2,"score":0.4401000142097473},{"id":"https://openalex.org/C111219384","wikidata":"https://www.wikidata.org/wiki/Q6954384","display_name":"NIST","level":2,"score":0.40230000019073486},{"id":"https://openalex.org/C548217200","wikidata":"https://www.wikidata.org/wiki/Q251","display_name":"Java","level":2,"score":0.3982999920845032},{"id":"https://openalex.org/C2776240099","wikidata":"https://www.wikidata.org/wiki/Q327018","display_name":"Interrogation","level":2,"score":0.3978999853134155},{"id":"https://openalex.org/C127705205","wikidata":"https://www.wikidata.org/wiki/Q5748245","display_name":"Heuristics","level":2,"score":0.38339999318122864},{"id":"https://openalex.org/C43126263","wikidata":"https://www.wikidata.org/wiki/Q128751","display_name":"Source code","level":2,"score":0.3716999888420105},{"id":"https://openalex.org/C79581498","wikidata":"https://www.wikidata.org/wiki/Q1367530","display_name":"Suite","level":2,"score":0.3467999994754791},{"id":"https://openalex.org/C11413529","wikidata":"https://www.wikidata.org/wiki/Q8366","display_name":"Algorithm","level":1,"score":0.3400999903678894},{"id":"https://openalex.org/C153180895","wikidata":"https://www.wikidata.org/wiki/Q7148389","display_name":"Pattern recognition (psychology)","level":2,"score":0.3359000086784363},{"id":"https://openalex.org/C119857082","wikidata":"https://www.wikidata.org/wiki/Q2539","display_name":"Machine learning","level":1,"score":0.33219999074935913},{"id":"https://openalex.org/C150921843","wikidata":"https://www.wikidata.org/wiki/Q1170431","display_name":"Resampling","level":2,"score":0.3294999897480011},{"id":"https://openalex.org/C2776145971","wikidata":"https://www.wikidata.org/wiki/Q30673951","display_name":"Labeled data","level":2,"score":0.30480000376701355},{"id":"https://openalex.org/C63479239","wikidata":"https://www.wikidata.org/wiki/Q7353546","display_name":"Robustness (evolution)","level":3,"score":0.30320000648498535},{"id":"https://openalex.org/C124101348","wikidata":"https://www.wikidata.org/wiki/Q172491","display_name":"Data mining","level":1,"score":0.3025999963283539},{"id":"https://openalex.org/C169087156","wikidata":"https://www.wikidata.org/wiki/Q2131593","display_name":"Framing (construction)","level":2,"score":0.3025999963283539},{"id":"https://openalex.org/C95713431","wikidata":"https://www.wikidata.org/wiki/Q631425","display_name":"Vulnerability (computing)","level":2,"score":0.2955000102519989},{"id":"https://openalex.org/C204321447","wikidata":"https://www.wikidata.org/wiki/Q30642","display_name":"Natural language processing","level":1,"score":0.2913999855518341},{"id":"https://openalex.org/C179518139","wikidata":"https://www.wikidata.org/wiki/Q5140297","display_name":"Coding (social sciences)","level":2,"score":0.29030001163482666},{"id":"https://openalex.org/C154690210","wikidata":"https://www.wikidata.org/wiki/Q1668499","display_name":"Rewriting","level":2,"score":0.28619998693466187},{"id":"https://openalex.org/C51632099","wikidata":"https://www.wikidata.org/wiki/Q3985153","display_name":"Training set","level":2,"score":0.2768000066280365},{"id":"https://openalex.org/C60048249","wikidata":"https://www.wikidata.org/wiki/Q37437","display_name":"Syntax","level":2,"score":0.2750000059604645},{"id":"https://openalex.org/C2776836416","wikidata":"https://www.wikidata.org/wiki/Q1364844","display_name":"False alarm","level":2,"score":0.271699994802475},{"id":"https://openalex.org/C199360897","wikidata":"https://www.wikidata.org/wiki/Q9143","display_name":"Programming language","level":1,"score":0.26809999346733093},{"id":"https://openalex.org/C77801330","wikidata":"https://www.wikidata.org/wiki/Q1363413","display_name":"Auditory masking","level":3,"score":0.2612999975681305},{"id":"https://openalex.org/C2989486834","wikidata":"https://www.wikidata.org/wiki/Q3808900","display_name":"True positive rate","level":2,"score":0.2542000114917755},{"id":"https://openalex.org/C151552104","wikidata":"https://www.wikidata.org/wiki/Q7705809","display_name":"Test suite","level":4,"score":0.25369998812675476},{"id":"https://openalex.org/C58646249","wikidata":"https://www.wikidata.org/wiki/Q127380","display_name":"Abstract syntax tree","level":3,"score":0.25279998779296875},{"id":"https://openalex.org/C158600405","wikidata":"https://www.wikidata.org/wiki/Q5054566","display_name":"Causal inference","level":2,"score":0.25220000743865967}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.48550/arxiv.2604.27714","is_oa":true,"landing_page_url":"https://doi.org/10.48550/arxiv.2604.27714","pdf_url":null,"source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":null,"issn":null,"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":null,"is_accepted":false,"is_published":null,"raw_source_name":null,"raw_type":"Preprint"}],"best_oa_location":{"id":"doi:10.48550/arxiv.2604.27714","is_oa":true,"landing_page_url":"https://doi.org/10.48550/arxiv.2604.27714","pdf_url":null,"source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":null,"issn":null,"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":null,"is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"Preprint"},"sustainable_development_goals":[{"id":"https://metadata.un.org/sdg/16","display_name":"Peace, Justice and strong institutions","score":0.6133045554161072}],"awards":[],"funders":[],"has_content":{"pdf":false,"grobid_xml":false},"content_urls":null,"referenced_works_count":0,"referenced_works":[],"related_works":[],"abstract_inverted_index":{"How":[0],"code":[1,22],"representation":[2,23],"format":[3],"shapes":[4],"false":[5,155],"positive":[6],"behaviour":[7],"in":[8],"cross-language":[9],"LLM":[10],"vulnerability":[11,124],"detection":[12],"remains":[13,100],"poorly":[14],"understood.":[15],"We":[16,106],"systematically":[17],"vary":[18],"training":[19,36],"intensity":[20],"and":[21,38,46,60,67,79,120,152,230],"format,":[24],"comparing":[25],"raw":[26],"source":[27],"text":[28,114,229],"with":[29],"pruned":[30],"Abstract":[31],"Syntax":[32],"Trees":[33],"at":[34,174,240],"both":[35,191,228],"time":[37],"inference":[39],"time,":[40],"across":[41,190],"two":[42],"8B-parameter":[43],"LLMs":[44],"(Qwen3-8B":[45],"Llama":[47],"3.1-8B-Instruct)":[48],"fine-tuned":[49],"on":[50,62,129],"C/C++":[51],"data":[52],"from":[53,148],"the":[54,74,104,111,171,196,206,241],"NIST":[55],"Juliet":[56],"Test":[57],"Suite":[58],"(v1.3)":[59],"evaluated":[61],"Java":[63,207],"(OWASP":[64],"Benchmark":[65],"v1.2)":[66],"Python":[68],"(BenchmarkPython":[69],"v0.1).":[70],"Cross-language":[71],"FPR":[72,88,146],"reflects":[73],"joint":[75],"effect":[76],"of":[77,154,184,205,243],"training-time":[78],"inference-time":[80],"representation,":[81],"not":[82,169],"either":[83],"alone.":[84,164],"Text":[85],"fine-tuning":[86,115,167],"drives":[87],"upward":[89],"monotonically":[90],"(Qwen3-8B:":[91],"0.763":[92],"zero-shot,":[93],"0.866":[94,149],"pilot,":[95],"1.000":[96],"full-scale)":[97],"while":[98],"F1":[99],"stable":[101],"(0.637-0.688),":[102],"masking":[103],"collapse.":[105],"argue":[107],"surface-cue":[108],"memorisation":[109],"is":[110],"primary":[112],"mechanism:":[113],"encodes":[116],"C/C++-specific":[117],"API":[118],"names":[119],"syntactic":[121],"idioms":[122],"as":[123,177,233],"triggers":[125],"that":[126],"fire":[127],"indiscriminately":[128],"target-language":[130],"code.":[131],"A":[132],"cross-representation":[133],"probe,":[134],"applying":[135],"text-trained":[136],"weights":[137],"to":[138,150,158],"AST-encoded":[139],"input":[140,163],"without":[141],"retraining,":[142],"isolates":[143],"this:":[144],"Qwen3-8B":[145],"drops":[147],"0.583,":[151],"37.2%":[153],"positives":[156],"revert":[157],"true":[159],"negatives":[160],"under":[161],"AST":[162,166,197,231],"Direct":[165],"does":[168],"preserve":[170],"benefit":[172],"(FPR":[173],"least":[175],"0.970),":[176],"flat":[178],"linearisation":[179],"introduces":[180],"structural":[181],"surface":[182],"cues":[183],"its":[185],"own.":[186],"The":[187],"pattern":[188],"replicates":[189],"model":[192],"families.":[193],"On":[194],"BenchmarkPython":[195],"probe":[198],"yields":[199],"FPR=0.554,":[200],"within":[201],"2.9":[202],"percentage":[203],"points":[204],"result,":[208],"despite":[209],"maximal":[210],"surface-syntax":[211],"differences,":[212],"substantially":[213],"weakening":[214],"a":[215,221,234],"domain-shift":[216],"explanation.":[217],"These":[218],"findings":[219],"motivate":[220],"pre-deployment":[222],"consistency":[223],"gate,":[224],"running":[225],"alerts":[226],"through":[227],"paths,":[232],"retraining-free":[235],"filter":[236],"for":[237],"false-positive-sensitive":[238],"settings,":[239],"cost":[242],"reduced":[244],"recall.":[245]},"counts_by_year":[],"updated_date":"2026-07-01T06:00:48.157686","created_date":"2026-05-02T00:00:00"}