arrow
Return

VULDA: Source Code Vulnerability Detection via Local Dependency Context Aggregation on Vulnerability-Aware Code Mapping Graph

delete2026-01-01
delete0
PRE
AI
彭
彭涛 (Peng Tao)
L
Lin Gui
蔡立军 cover
蔡立军 (Lijun Cai) *
汤俊伟 cover
汤俊伟 (Junwei Tang)
叶傲霜 cover
叶傲霜 (Aoshuang Ye)
F
Fei Zhu
DOI:10.1007/978-981-95-3537-8_12delete
deleteOriginal
deleteOriginal request for help
deleteShare
deleteSave
Abstract

Abstract

En 中文
Vulnerability detection is crucial in the field of software security. However, existing methods often suffer from interference caused by redundant information and insufficient cross-line semantic dependencies when handling large-scale and complex source code, which limits detection performance. To address these challenges, this paper proposes VULDA, a source code vulnerability detection method that integrates a Vulnerability-aware Code Mapping Graph (VCMG) with Local Dependency Context Aggregation (LDCA). VCMG significantly reduces redundancy in graph structures by aligning multi-granularity semantics to line-level nodes, thereby enhancing representational compactness. Additionally, it incorporates static heuristic rules and structural features to weight nodes, effectively improving the models sensitivity to key vulnerability-related code. Building upon this, the LDCA module aggregates both control-flow graph (CFG) and data-dependency graph (DDG) paths, achieving dual-context aggregation of logical and data semantics, which further enhances the models ability to express complex vulnerability patterns. Experimental results on multiple real-world datasets, including SARD, Reveal, and FFmpeg+Qemu, demonstrate that VULDA outperforms existing methods across various metrics, notably achieving a 23.09% improvement in F1 score on the Reveal dataset compared to the best baseline. Ablation studies further validate the effectiveness and complementarity of the VCMG and LDCA modules in boosting detection performance.
Keywords:
Vulnerability Detection
Software Security
Code Semantics
VulnerabilityPatterns
DeepLearning

Journal

I
INFORMATION AND COMMUNICATIONS SECURITY, ICICS 2025, PT III
IF:
0
Papers:
23
Citations:
0

Organization

H
hunan university
Scholars:
4.5W
Papers: 3.3W
Citations: 70
W
Wuhan Textile University
Scholars:
2.1K
Papers: 656
Citations: 7.9K
Cited Papers

Cited Papers

Learning Phrase Representations using RNN Encoder–Decoder for Statistical Machine Translation
err2014-01-01
err0
errOAAI
errKyunghyun Cho; Bart van Merrienboer; Caglar Gulcehre; Dzmitry Bahdanau; Fethi Bougares; Holger Schwenk; Yoshua Bengio
errShare
errSave
errShare
errSave
VulDeeLocator: A Deep Learning-Based Fine-Grained Vulnerability Detector
err2022-07-01
err87
errOAAI
errLi, Zhen; Zou, Deqing; Xu, Shouhuai; Chen, Zhaoxuan; Zhu, Yawei; Jin, Hai
errShare
errSave
SySeVR: A Framework for Using Deep Learning to Detect Software Vulnerabilities
err2022-07-01
err261
errOAAI
errLi, Zhen; Zou, Deqing; Xu, Shouhuai; Jin, Hai; Zhu, Yawei; Chen, Zhaoxuan
errShare
errSave
Long Short-Term Memory
err1997-11-01
err0
PREAI
errSepp Hochreiter; Jürgen Schmidhuber
errShare
errSave
A Survey on 360° Video Streaming: Acquisition, Transmission, and Display
err2019-08-30
err67
PREAI
errFan, Ching-Ling; Lo, Wen-Chih; Pai, Yu-Tung; Hsu, Cheng-Hsin
errShare
errSave
errShare
errSave
researcher View more