1
Return

Vulnerability identification by harnessing inter-connected multi-source information

delete2026-06-12
delete0
PRE
AI
L
Liyou Chen
H
Hailong Sun *
X
Xiang Gao *
L
Lin Shi
Y
Yixin Yang
Y
Yi Xu
DOI:10.1016/j.jss.2026.113001delete
deleteOriginal
deleteOriginal request for help
deleteShare
deleteSave
Abstract

Abstract

En 中文
• We propose VPFinder, a deep learning based method that identifies vulnerabilities by harnessing interconnected multi-source information. By learning and fusing the high-level semantic information from bug reports, commit messages and patches. VPFinder could effectively recognize vulnerabilities and their corresponding types. • We evaluate VPFinder and the experimental results show that VPFinder achieves an F1 score of 0.941 in vulnerability prediction and 0.610 in vulnerability type prediction, outperforming state-of-the-art approaches. • We make our dataset, tool, and model publicly accessible at: https://anonymous.4open.science/r/VPFinder-5CE4

Journal

Journal of Systems and Software cover
Journal of Systems and Software
IF:
4.1
Papers:
5.4K
Citations:
8.4K

Organization

B
Beihang University
Scholars:
5.0W
Papers: 4.0W
Citations: 37
Cited Papers

Cited Papers

Citing Papers

Citing Papers