SySeVR: A Framework for Using Deep Learning to Detect Software Vulnerabilities
Not on the map. Why?
Abstract (arXiv)
The detection of software vulnerabilities (or vulnerabilities for short) is an important problem that has yet to be tackled, as manifested by the many vulnerabilities reported on a daily basis. This calls for machine learning methods for vulnerability detection. Deep learning is attractive for this purpose because it alleviates the requirement to manually define features. Despite the tremendous success of deep learning in other application domains, its applicability to vulnerability detection is not systematically understood. In order to fill this void, we propose the first systematic framework for using deep learning to detect vulnerabilities in C/C++ programs with source code. The framework, dubbed Syntax-based, Semantics-based, and Vector Representations (SySeVR), focuses on obtaining program representations that can accommodate syntax and semantic information pertinent to vulnerabilities. Our experiments with 4 software products demonstrate the usefulness of the framework: we detect 15 vulnerabilities that are not reported in the National Vulnerability Database. Among these 15 vulnerabilities, 7 are unknown and have been reported to the vendors, and the other 8 have been "silently" patched by the vendors when releasing newer versions of the pertinent software products.
Key facts. Cited by 91 papers in the map (data through 7 Oct 2026). First posted on arXiv 18 Jul 2018.
Builds on
No reference list yet.
Built on by
Citing papers per year: 2021: 7; 2022: 11; 2023: 17; 2024: 22; 2025: 22; 2026: 12.
91 papers.
Sort:
By area:
- 2024Large Language Model-Based Agents for Software Engineering: A Surveycited by 173
- 2023Large Language Models for Code: Security Hardening and Adversarial Testingcited by 149
- 2024Vulnerability Detection with Code Language Models: How Far Are We?cited by 133
- 2023DiverseVul: A New Vulnerable Source Code Dataset for Deep Learning Based Vulnerability Detectioncited by 98
- 2022VulBERTa: Simplified Source Code Pre-Training for Vulnerability Detectioncited by 51
- 2022An Empirical Study of Deep Learning Models for Vulnerability Detectioncited by 44
- 2025LLMs in Software Security: A Survey of Vulnerability Detection Techniques and Insightscited by 44
- 2022Transformer-Based Language Models for Software Vulnerability Detectioncited by 39
- 2024An LLM-Assisted Easy-to-Trigger Backdoor Attack on Code Completion Models: Injecting Disguised Vulnerabilities against Strong Detectioncited by 32
- 2024Generalization-Enhanced Code Vulnerability Detection via Multi-Task Instruction Fine-Tuningcited by 30
- 2024NoFunEval: Funny How Code LMs Falter on Requirements Beyond Functional Correctnesscited by 23
- 2023Deep Learning for Code Intelligence: Survey, Benchmark and Toolkitcited by 22
38 more
- 2021VELVET: a noVel Ensemble Learning approach to automatically locate VulnErable sTatementscited by 20
- 2024Multi-role Consensus through LLMs Discussions for Vulnerability Detectioncited by 19
- 2021Towards Learning (Dis)-Similarity of Source Code from Program Contrastscited by 17
- 2025Correctness Assessment of Code Generated by Large Language Models Using Internal Representationscited by 17
- 2025From CVE Entries to Verifiable Exploits: An Automated Multi-Agent Framework for Reproducing CVEscited by 17
- 2025A Framework for Evaluating Emerging Cyberattack Capabilities of AIcited by 15
- 2023Transformer-based Vulnerability Detection in Code at EditTime: Zero-shot, Few-shot, or Fine-tuning?cited by 13
- 2023SecureFalcon: Are We There Yet in Automated Software Vulnerability Detection with LLMs?cited by 13
- 2024VulDetectBench: Evaluating the Deep Capability of Vulnerability Detection with Large Language Modelscited by 11
- 2024Investigating Large Language Models for Code Vulnerability Detection: An Experimental Studycited by 11
- 2021On using distributed representations of source code for the detection of C security vulnerabilitiescited by 10
- 2025Large Language Models for Security Operations Centers: A Comprehensive Surveycited by 9
- 2022Poison Attack and Defense on Deep Source Code Processing Modelscited by 8
- 2023When Less is Enough: Positive and Unlabeled Learning Model for Vulnerability Detectioncited by 8
- 2025VulAgent: Hypothesis-Validation based Multi-Agent Vulnerability Detectioncited by 8
- 2023Just-in-Time Detection of Silent Security Patchescited by 7
- 2025Vulnerability Detection: From Formal Verification to Large Language Models and Hybrid Approaches: A Comprehensive Overviewcited by 7
- 2025A Comprehensive Empirical Evaluation of Agent Frameworks on Code-centric Software Engineering Taskscited by 7
- 2022Pre-Training Representations of Binary Code Using Contrastive Learningcited by 6
- 2024Revisiting the Performance of Deep Learning-Based Vulnerability Detection on Realistic Datasetscited by 6
- 2024Harnessing the Power of LLMs in Source Code Vulnerability Detectioncited by 6
- 2026MulVul: Retrieval-augmented Multi-Agent Code Vulnerability Detection via Cross-Model Prompt Evolutioncited by 6
- 2021Software Vulnerability Detection via Deep Learning over Disaggregated Code Graph Representationcited by 5
- 2022On the Use of Fine-grained Vulnerable Code Statements for Software Vulnerability Assessment Modelscited by 5
- 2023An Unbiased Transformer Source Code Learning with Semantic Vulnerability Graphcited by 5
- 2024Data Quality Issues in Vulnerability Detection Datasetscited by 5
- 2025Trace Gadgets: Minimizing Code Context for Machine Learning-Based Vulnerability Predictioncited by 5
- 2021Towards Making Deep Learning-based Vulnerability Detectors Robustcited by 4
- 2023XGV-BERT: Leveraging Contextualized Language Model and Graph Neural Network for Efficient Software Vulnerability Detectioncited by 4
- 2024A Survey of Source Code Representations for Machine Learning-Based Cybersecurity Taskscited by 4
- 2024EnStack: An Ensemble Stacking Framework of Large Language Models for Enhanced Vulnerability Detection in Source Codecited by 4
- 2025Improving LLM Reasoning for Vulnerability Detection via Group Relative Policy Optimizationcited by 4
- 2021Multi-context Attention Fusion Neural Network for Software Vulnerability Identificationcited by 3
- 2023LIVABLE: Exploring Long-Tailed Classification of Software Vulnerability Typescited by 3
- 2024RealVul: Can We Detect Vulnerabilities in Web Applications with LLM?cited by 3
- 2025Evaluating LLaMA 3.2 for Software Vulnerability Detectioncited by 3
- 2025Towards Practical Defect-Focused Automated Code Reviewcited by 3
- 2025Revisiting Pre-trained Language Models for Vulnerability Detectioncited by 3
50 most cited of 91 All 91 (JSON)
- 2026The History Is the Detector: Executing CVE Patch History, End-to-End4 Sep 2026
- 2026AutoTrace: From Patches to Triggers via Agentic Interprocedural Exploration13 Jul 2026
- 2026Benchmarking Mythos-Linked Bug Rediscovery17 May 2026
- 2026XSearch: Explainable Code Search via Concept-to-Code Alignment15 May 2026
- 2026MARGIN: Margin-Aware Regularized Geometry for Imbalanced Vulnerability Detection11 May 2026
- 2026VulStyle: A Multi-Modal Pre-Training for Code Stylometry-Augmented Vulnerability Detection29 Apr 2026
- 2026Efficient Software Vulnerability Detection Using Transformer-based Models31 Mar 2026
- 2026Robust Smart Contract Vulnerability Detection via Contrastive Learning-Enhanced Granular-ball Training29 Mar 2026
- 2026VulnAgent-R2: Evidence-Calibrated Multi-Agent Auditing for Repository-Level Vulnerability Detection11 Mar 2026
- 2026An Empirical Study of the Imbalance Issue in Software Vulnerability Detection12 Feb 2026
- 2026MulVul: Retrieval-augmented Multi-Agent Code Vulnerability Detection via Cross-Model Prompt Evolution26 Jan 2026
- 2026Focus on What Matters: Fisher-Guided Adaptive Multimodal Fusion for Vulnerability Detection5 Jan 2026
38 more
- 2025A Comprehensive Empirical Evaluation of Agent Frameworks on Code-centric Software Engineering Tasks2 Nov 2025
- 2025On the Difficulty of Selecting Few-Shot Examples for Effective LLM-based Vulnerability Detection31 Oct 2025
- 2025Bridging Semantics & Structure for Software Vulnerability Detection using Hybrid Network Models11 Oct 2025
- 2025MulVuln: Enhancing Pre-trained LMs with Shared and Language-Specific Knowledge for Multilingual Vulnerability Detection5 Oct 2025
- 2025LLaVul: A Multimodal LLM for Interpretable Vulnerability Reasoning about Source Code22 Sep 2025
- 2025VulAgent: Hypothesis-Validation based Multi-Agent Vulnerability Detection15 Sep 2025
- 2025Weakly Supervised Vulnerability Localization via Multiple Instance Learning14 Sep 2025
- 2025Large Language Models for Security Operations Centers: A Comprehensive Survey13 Sep 2025
- 2025From CVE Entries to Verifiable Exploits: An Automated Multi-Agent Framework for Reproducing CVEs1 Sep 2025
- 2025AVIATOR: Towards AI-Agentic Vulnerability Injection Workflow for High-Fidelity, Large-Scale Code Security Dataset28 Aug 2025
- 2025Data and Context Matter: Towards Generalizing AI-based Software Vulnerability Detection14 Aug 2025
- 2025Revisiting Pre-trained Language Models for Vulnerability Detection22 Jul 2025
- 2025Improving LLM Reasoning for Vulnerability Detection via Group Relative Policy Optimization3 Jul 2025
- 2025Today's Cat Is Tomorrow's Dog: Accounting for Time-Based Changes in the Labels of ML Vulnerability Detection Approaches13 Jun 2025
- 2025Towards Practical Defect-Focused Automated Code Review23 May 2025
- 2025Trace Gadgets: Minimizing Code Context for Machine Learning-Based Vulnerability Prediction18 Apr 2025
- 2025A Framework for Evaluating Emerging Cyberattack Capabilities of AI14 Mar 2025
- 2025Vulnerability Detection: From Formal Verification to Large Language Models and Hybrid Approaches: A Comprehensive Overview13 Mar 2025
- 2025You Only Train Once: A Flexible Training Framework for Code Vulnerability Detection Driven by Vul-Vector12 Mar 2025
- 2025Evaluating LLaMA 3.2 for Software Vulnerability Detection10 Mar 2025
- 2025LLMs in Software Security: A Survey of Vulnerability Detection Techniques and Insights10 Feb 2025
- 2025Correctness Assessment of Code Generated by Large Language Models Using Internal Representations22 Jan 2025
- 2024Investigating Large Language Models for Code Vulnerability Detection: An Experimental Study24 Dec 2024
- 2024Direction for Detection: A Survey of Automated Vulnerability Detection and all of its Pain Points15 Dec 2024
- 2024MVD: A Multi-Lingual Software Vulnerability Detection Framework9 Dec 2024
- 2024EnStack: An Ensemble Stacking Framework of Large Language Models for Enhanced Vulnerability Detection in Source Code25 Nov 2024
- 2024RealVul: Can We Detect Vulnerabilities in Web Applications with LLM?10 Oct 2024
- 2024Data Quality Issues in Vulnerability Detection Datasets8 Oct 2024
- 2024CLNX: Bridging Code and Natural Language for C/C++ Vulnerability-Contributing Commits Identification11 Sep 2024
- 2024Large Language Model-Based Agents for Software Engineering: A Survey4 Sep 2024
- 2024VulCatch: Enhancing Binary Vulnerability Detection through CodeT5 Decompilation and KAN Advanced Feature Extraction13 Aug 2024
- 2024Harnessing the Power of LLMs in Source Code Vulnerability Detection7 Aug 2024
- 2024Revisiting the Performance of Deep Learning-Based Vulnerability Detection on Realistic Datasets3 Jul 2024
- 2024VulDetectBench: Evaluating the Deep Capability of Vulnerability Detection with Large Language Models11 Jun 2024
- 2024An LLM-Assisted Easy-to-Trigger Backdoor Attack on Code Completion Models: Injecting Disguised Vulnerabilities against Strong Detection10 Jun 2024
- 2024Generalization-Enhanced Code Vulnerability Detection via Multi-Task Instruction Fine-Tuning6 Jun 2024
- 2024Vulnerability Detection in C/C++ Code with Deep Learning20 May 2024
- 2024Machine Learning Techniques for Python Source Code Vulnerability Detection15 Apr 2024
50 newest of 91 All 91 (JSON)
- 2024Large Language Model-Based Agents for Software Engineering: A Surveycited by 173
- 2025From CVE Entries to Verifiable Exploits: An Automated Multi-Agent Framework for Reproducing CVEscited by 17
- 2025VulAgent: Hypothesis-Validation based Multi-Agent Vulnerability Detectioncited by 8
- 2025A Comprehensive Empirical Evaluation of Agent Frameworks on Code-centric Software Engineering Taskscited by 7
- 2026VulnAgent-R2: Evidence-Calibrated Multi-Agent Auditing for Repository-Level Vulnerability Detectioncited by 1
- 2026AutoTrace: From Patches to Triggers via Agentic Interprocedural Explorationcited by 1
- 2025AVIATOR: Towards AI-Agentic Vulnerability Injection Workflow for High-Fidelity, Large-Scale Code Security Datasetcited by 0
- 2026AutoTrace: From Patches to Triggers via Agentic Interprocedural Exploration13 Jul 2026
- 2026VulnAgent-R2: Evidence-Calibrated Multi-Agent Auditing for Repository-Level Vulnerability Detection11 Mar 2026
- 2025A Comprehensive Empirical Evaluation of Agent Frameworks on Code-centric Software Engineering Tasks2 Nov 2025
- 2025VulAgent: Hypothesis-Validation based Multi-Agent Vulnerability Detection15 Sep 2025
- 2025From CVE Entries to Verifiable Exploits: An Automated Multi-Agent Framework for Reproducing CVEs1 Sep 2025
- 2025AVIATOR: Towards AI-Agentic Vulnerability Injection Workflow for High-Fidelity, Large-Scale Code Security Dataset28 Aug 2025
- 2024Large Language Model-Based Agents for Software Engineering: A Survey4 Sep 2024
- 2023Large Language Models for Code: Security Hardening and Adversarial Testingcited by 149
- 2024Vulnerability Detection with Code Language Models: How Far Are We?cited by 133
- 2023DiverseVul: A New Vulnerable Source Code Dataset for Deep Learning Based Vulnerability Detectioncited by 98
- 2022VulBERTa: Simplified Source Code Pre-Training for Vulnerability Detectioncited by 51
- 2022An Empirical Study of Deep Learning Models for Vulnerability Detectioncited by 44
- 2025LLMs in Software Security: A Survey of Vulnerability Detection Techniques and Insightscited by 44
- 2022Transformer-Based Language Models for Software Vulnerability Detectioncited by 39
- 2024Generalization-Enhanced Code Vulnerability Detection via Multi-Task Instruction Fine-Tuningcited by 30
- 2024NoFunEval: Funny How Code LMs Falter on Requirements Beyond Functional Correctnesscited by 23
- 2023Deep Learning for Code Intelligence: Survey, Benchmark and Toolkitcited by 22
- 2021VELVET: a noVel Ensemble Learning approach to automatically locate VulnErable sTatementscited by 20
- 2024Multi-role Consensus through LLMs Discussions for Vulnerability Detectioncited by 19
12 most cited of 79 All 79 (JSON)
- 2026The History Is the Detector: Executing CVE Patch History, End-to-End4 Sep 2026
- 2026Benchmarking Mythos-Linked Bug Rediscovery17 May 2026
- 2026XSearch: Explainable Code Search via Concept-to-Code Alignment15 May 2026
- 2026MARGIN: Margin-Aware Regularized Geometry for Imbalanced Vulnerability Detection11 May 2026
- 2026VulStyle: A Multi-Modal Pre-Training for Code Stylometry-Augmented Vulnerability Detection29 Apr 2026
- 2026Efficient Software Vulnerability Detection Using Transformer-based Models31 Mar 2026
- 2026Robust Smart Contract Vulnerability Detection via Contrastive Learning-Enhanced Granular-ball Training29 Mar 2026
- 2026An Empirical Study of the Imbalance Issue in Software Vulnerability Detection12 Feb 2026
- 2026Focus on What Matters: Fisher-Guided Adaptive Multimodal Fusion for Vulnerability Detection5 Jan 2026
- 2025On the Difficulty of Selecting Few-Shot Examples for Effective LLM-based Vulnerability Detection31 Oct 2025
- 2025Bridging Semantics & Structure for Software Vulnerability Detection using Hybrid Network Models11 Oct 2025
- 2025MulVuln: Enhancing Pre-trained LMs with Shared and Language-Specific Knowledge for Multilingual Vulnerability Detection5 Oct 2025
12 newest of 79 All 79 (JSON)