Studying Vulnerable Code Entities in R
Not on the map. Why?
Abstract (arXiv)
Pre-trained Code Language Models (Code-PLMs) have shown many advancements and achieved state-of-the-art results for many software engineering tasks in the past few years. These models are mainly targeted for popular programming languages such as Java and Python, leaving out many other ones like R. Though R has a wide community of developers and users, there is little known about the applicability of Code-PLMs for R. In this preliminary study, we aim to investigate the vulnerability of Code-PLMs for code entities in R. For this purpose, we use an R dataset of code and comment pairs and then apply CodeAttack, a black-box attack model that uses the structure of code to generate adversarial code samples. We investigate how the model can attack different entities in R. This is the first step towards understanding the importance of R token types, compared to popular programming languages (e.g., Java). We limit our study to code summarization. Our results show that the most vulnerable code entity is the identifier, followed by some syntax tokens specific to R. The results can shed light on the importance of token types and help in developing models for code summarization and method name prediction for the R language.
Key facts. No citing papers in the map yet (data through 14 Oct 2026). Builds on 19 of its 30 references that are in the map. First posted on arXiv 6 Feb 2024.
Builds on
19 of 30 references.
References · 19
- 2017Attention Is All You Needcited by 60,361
- 2014Explaining and Harnessing Adversarial Examplescited by 7,364
- 2015DeepFool: a simple and accurate method to fool deep neural networkscited by 1,318
- 2020CodeBERT: A Pre-Trained Model for Programming and Natural Languagescited by 1,310
- 2021CodeT5: Identifier-aware Unified Pre-trained Encoder-Decoder Models for Code Understanding and Generationcited by 906
- 2023StarCoder: may the source be with you!cited by 799
- 2021CodeXGLUE: A Machine Learning Benchmark Dataset for Code Understanding and Generationcited by 744
- 2019CodeSearchNet Challenge: Evaluating the State of Semantic Code Searchcited by 654
- 2020GraphCodeBERT: Pre-training Code Representations with Data Flowcited by 609
- 2022UniXcoder: Unified Cross-Modal Pre-training for Code Representationcited by 361
- 2022Natural Attack for Pre-trained Models of Codecited by 75
- 2019Adversarial Examples for Models of Codecited by 63
7 more
- 2022CodeAttack: Code-Based Adversarial Attacks for Pre-trained Programming Language Modelscited by 53
- 2021Multilingual training for Software Engineeringcited by 43
- 2020A Closer Look at the Robustness of Vision-and-Language Pre-trained Modelscited by 37
- 2023An Empirical Comparison of Pre-Trained Models of Source Codecited by 25
- 2021Adversarial Robustness of Deep Code Comment Generationcited by 22
- 2023Characterizing Bugs in Python and R Data Analytics Programscited by 3
- 2013Possible Directions for Improving Dependency Versioning in Rcited by 2
Built on by
Not cited yet.