{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2025,10,18]],"date-time":"2025-10-18T00:33:31Z","timestamp":1760747611331,"version":"build-2065373602"},"publisher-location":"Cham","reference-count":51,"publisher":"Springer Nature Switzerland","isbn-type":[{"value":"9783032078933","type":"print"},{"value":"9783032078940","type":"electronic"}],"license":[{"start":{"date-parts":[[2025,10,18]],"date-time":"2025-10-18T00:00:00Z","timestamp":1760745600000},"content-version":"tdm","delay-in-days":0,"URL":"https:\/\/www.springernature.com\/gp\/researchers\/text-and-data-mining"},{"start":{"date-parts":[[2025,10,18]],"date-time":"2025-10-18T00:00:00Z","timestamp":1760745600000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/www.springernature.com\/gp\/researchers\/text-and-data-mining"}],"content-domain":{"domain":["link.springer.com"],"crossmark-restriction":false},"short-container-title":[],"published-print":{"date-parts":[[2026]]},"DOI":"10.1007\/978-3-032-07894-0_13","type":"book-chapter","created":{"date-parts":[[2025,10,17]],"date-time":"2025-10-17T19:06:45Z","timestamp":1760728005000},"page":"243-262","update-policy":"https:\/\/doi.org\/10.1007\/springer_crossmark_policy","source":"Crossref","is-referenced-by-count":0,"title":["WelkIR: Flow-Sensitive Pre-trained Embeddings from\u00a0Compiler IR for\u00a0Vulnerability Detection"],"prefix":"10.1007","author":[{"given":"Hao","family":"Huang","sequence":"first","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Xiuwei","family":"Shang","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Junqi","family":"Zhang","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Shaoyin","family":"Cheng","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Weiming","family":"Zhang","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Nenghai","family":"Yu","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]}],"member":"297","published-online":{"date-parts":[[2025,10,18]]},"reference":[{"key":"13_CR1","unstructured":"Cve details. https:\/\/www.cvedetails.com\/. Accessed 24 June 2025"},{"key":"13_CR2","unstructured":"Ben-Nun, T., Jakobovits, A.S., Hoefler, T.: Neural code comprehension: a learnable representation of code semantics. Adv. Neural Inf. Process. Syst. 31 (2018)"},{"key":"13_CR3","unstructured":"Bordes, A., Usunier, N., Garcia-Duran, A., Weston, J., Yakhnenko, O.: Translating embeddings for modeling multi-relational data. Adv. Neural Inf. Process. Syst. 26 (2013)"},{"key":"13_CR4","doi-asserted-by":"crossref","unstructured":"Brauckmann, A., Goens, A., Ertel, S., Castrillon, J.: Compiler-based graph representations for deep learning models of code. In: Proceedings of the 29th International Conference on Compiler Construction, pp. 201\u2013211 (2020)","DOI":"10.1145\/3377555.3377894"},{"key":"13_CR5","doi-asserted-by":"publisher","first-page":"106576","DOI":"10.1016\/j.infsof.2021.106576","volume":"136","author":"S Cao","year":"2021","unstructured":"Cao, S., Sun, X., Bo, L., Wei, Y., Li, B.: BGNN4VD: constructing bidirectional graph neural-network for vulnerability detection. Inf. Softw. Technol. 136, 106576 (2021)","journal-title":"Inf. Softw. Technol."},{"key":"13_CR6","doi-asserted-by":"crossref","unstructured":"Cao, S., Sun, X., Bo, L., Wu, R., Li, B., Tao, C.: MVD: memory-related vulnerability detection based on flow-sensitive graph neural networks. In: Proceedings of the 44th International Conference on Software Engineering, pp. 1456\u20131468 (2022)","DOI":"10.1145\/3510003.3510219"},{"issue":"3","key":"13_CR7","doi-asserted-by":"publisher","first-page":"1","DOI":"10.1145\/3436877","volume":"30","author":"X Cheng","year":"2021","unstructured":"Cheng, X., Wang, H., Hua, J., Xu, G., Sui, Y.: Deepwukong: statically detecting software vulnerabilities using deep graph neural network. ACM TOSEM 30(3), 1\u201333 (2021)","journal-title":"ACM TOSEM"},{"key":"13_CR8","doi-asserted-by":"crossref","unstructured":"Cheng, X., et al.: Static detection of control-flow-related vulnerabilities using graph embedding. In: 2019 24th International Conference on Engineering of Complex Computer Systems (ICECCS), pp. 41\u201350. IEEE (2019)","DOI":"10.1109\/ICECCS.2019.00012"},{"key":"13_CR9","doi-asserted-by":"crossref","unstructured":"Cheng, X., Zhang, G., Wang, H., Sui, Y.: Path-sensitive code embedding via contrastive learning for software vulnerability detection. In: Proceedings of the 31st ACM SIGSOFT International Symposium on Software Testing and Analysis, pp. 519\u2013531 (2022)","DOI":"10.1145\/3533767.3534371"},{"key":"13_CR10","unstructured":"Cummins, C., Fisches, Z.V., Ben-Nun, T., Hoefler, T., O\u2019Boyle, M.F., Leather, H.: ProGraML: a graph-based program representation for data flow analysis and compiler optimizations. In: International Conference on Machine Learning, pp. 2244\u20132253. PMLR (2021)"},{"key":"13_CR11","unstructured":"Dai, H., Dai, B., Song, L.: Discriminative embeddings of latent variable models for structured data. In: International Conference on Machine Learning, pp. 2702\u20132711. PMLR (2016)"},{"key":"13_CR12","unstructured":"Devlin, J., Chang, M.W., Lee, K., Toutanova, K.: Bert: pre-training of deep bidirectional transformers for language understanding. In: Proceedings of the 2019 Conference of the North American Chapter of the Association for Computational Linguistics: Human Language Technologies, Volume 1 (Long and Short Papers), pp. 4171\u20134186 (2019)"},{"key":"13_CR13","doi-asserted-by":"crossref","unstructured":"Ding, Y., Steenhoek, B., Pei, K., Kaiser, G., Le, W., Ray, B.: Traced: execution-aware pre-training for source code. In: Proceedings of the 46th IEEE\/ACM International Conference on Software Engineering, pp. 1\u201312 (2024)","DOI":"10.1145\/3597503.3608140"},{"key":"13_CR14","doi-asserted-by":"crossref","unstructured":"Fu, M., Tantithamthavorn, C.: LineVul: a transformer-based line-level vulnerability prediction. In: Proceedings of the 19th International Conference on Mining Software Repositories, pp. 608\u2013620 (2022)","DOI":"10.1145\/3524842.3528452"},{"issue":"2","key":"13_CR15","first-page":"23","volume":"12","author":"P Gage","year":"1994","unstructured":"Gage, P.: A new algorithm for data compression. C Users J. 12(2), 23\u201338 (1994)","journal-title":"C Users J."},{"key":"13_CR16","unstructured":"Guo, D., et\u00a0al.: Graphcodebert: Pre-training code representations with data flow. arXiv preprint arXiv:2009.08366 (2020)"},{"key":"13_CR17","doi-asserted-by":"crossref","unstructured":"Hanif, H., Maffeis, S.: Vulberta: Simplified source code pre-training for vulnerability detection. In: 2022 International Joint Conference on Neural Networks (IJCNN), pp.\u00a01\u20138. IEEE (2022)","DOI":"10.1109\/IJCNN55064.2022.9892280"},{"key":"13_CR18","doi-asserted-by":"crossref","unstructured":"Lattner, C., Adve, V.: LLVM: a compilation framework for lifelong program analysis & transformation. In: International Symposium on Code Generation and Optimization, 2004. CGO 2004, pp. 75\u201386. IEEE (2004)","DOI":"10.1109\/CGO.2004.1281665"},{"issue":"5","key":"13_CR19","doi-asserted-by":"publisher","first-page":"1692","DOI":"10.3390\/app10051692","volume":"10","author":"X Li","year":"2020","unstructured":"Li, X., Wang, L., Xin, Y., Yang, Y., Chen, Y.: Automated vulnerability detection in source code using minimum intermediate representation learning. Appl. Sci. 10(5), 1692 (2020)","journal-title":"Appl. Sci."},{"issue":"4","key":"13_CR20","doi-asserted-by":"publisher","first-page":"2821","DOI":"10.1109\/TDSC.2021.3076142","volume":"19","author":"Z Li","year":"2021","unstructured":"Li, Z., Zou, D., Xu, S., Chen, Z., Zhu, Y., Jin, H.: VulDeeLocator: a deep learning-based fine-grained vulnerability detector. IEEE Trans. Dependable Secure Comput. 19(4), 2821\u20132837 (2021)","journal-title":"IEEE Trans. Dependable Secure Comput."},{"issue":"4","key":"13_CR21","doi-asserted-by":"publisher","first-page":"2244","DOI":"10.1109\/TDSC.2021.3051525","volume":"19","author":"Z Li","year":"2021","unstructured":"Li, Z., Zou, D., Xu, S., Jin, H., Zhu, Y., Chen, Z.: SySeVR: a framework for using deep learning to detect software vulnerabilities. IEEE Trans. Dependable Secure Comput. 19(4), 2244\u20132258 (2021)","journal-title":"IEEE Trans. Dependable Secure Comput."},{"key":"13_CR22","doi-asserted-by":"crossref","unstructured":"Li, Z., et al.: VulDeePecker: a deep learning-based system for vulnerability detection. arXiv preprint arXiv:1801.01681 (2018)","DOI":"10.14722\/ndss.2018.23158"},{"key":"13_CR23","doi-asserted-by":"crossref","unstructured":"Li, Z., et al.: Unleashing the power of compiler intermediate representation to enhance neural program embeddings. In: Proceedings of the 44th International Conference on Software Engineering, pp. 2253\u20132265 (2022)","DOI":"10.1145\/3510003.3510217"},{"key":"13_CR24","first-page":"18762","volume":"34","author":"J Liu","year":"2021","unstructured":"Liu, J., Kawaguchi, K., Hooi, B., Wang, Y., Xiao, X.: EIGNN: efficient infinite-depth graph neural networks. Adv. Neural. Inf. Process. Syst. 34, 18762\u201318773 (2021)","journal-title":"Adv. Neural. Inf. Process. Syst."},{"key":"13_CR25","unstructured":"Liu, Y., et al.: Roberta: a robustly optimized BERT pretraining approach. arXiv preprint arXiv:1907.11692 (2019)"},{"key":"13_CR26","doi-asserted-by":"crossref","unstructured":"Liu, Z., Tang, Z., Zhang, J., Xia, X., Yang, X.: Pre-training by predicting program dependencies for vulnerability analysis tasks. In: Proceedings of the IEEE\/ACM 46th International Conference on Software Engineering, pp. 1\u201313 (2024)","DOI":"10.1145\/3597503.3639142"},{"key":"13_CR27","unstructured":"Loshchilov, I., Hutter, F.: Decoupled weight decay regularization. arXiv preprint arXiv:1711.05101 (2017)"},{"key":"13_CR28","unstructured":"Van\u00a0der Maaten, L., Hinton, G.: Visualizing data using t-sne. J. Mach. Learn. Res. 9(11) (2008)"},{"key":"13_CR29","unstructured":"Mei, X., et\u00a0al.: ARVO: atlas of reproducible vulnerabilities for open source software. arXiv preprint arXiv:2408.02153 (2024)"},{"key":"13_CR30","unstructured":"Mirsky, Y., et al.: $$\\{$$VulChecker$$\\}$$: graph-based vulnerability localization in source code. In: 32nd USENIX Security Symposium (USENIX Security 23), pp. 6557\u20136574 (2023)"},{"key":"13_CR31","doi-asserted-by":"crossref","unstructured":"Nguyen, V.A., Nguyen, D.Q., Nguyen, V., Le, T., Tran, Q.H., Phung, D.: ReGVD: revisiting graph neural networks for vulnerability detection. In: Proceedings of the ACM\/IEEE 44th International Conference on Software Engineering: Companion Proceedings, pp. 178\u2013182 (2022)","DOI":"10.1145\/3510454.3516865"},{"key":"13_CR32","doi-asserted-by":"crossref","unstructured":"Niu, C., Li, C., Ng, V., Lo, D., Luo, B.: Fair: flow type-aware pre-training of compiler intermediate representations. In: Proceedings of the 46th IEEE\/ACM International Conference on Software Engineering, pp. 1\u201312 (2024)","DOI":"10.1145\/3597503.3608136"},{"key":"13_CR33","unstructured":"Peng, D., Zheng, S., Li, Y., Ke, G., He, D., Liu, T.Y.: How could neural networks understand programs? In: International Conference on Machine Learning, pp. 8476\u20138486. PMLR (2021)"},{"key":"13_CR34","unstructured":"Powers, D.M.: Evaluation: from precision, recall and f-measure to roc, informedness, markedness and correlation. arXiv preprint arXiv:2010.16061 (2020)"},{"key":"13_CR35","unstructured":"Rizsotto: Bear. https:\/\/github.com\/rizsotto\/Bear. Accessed 30 Jan 2023"},{"key":"13_CR36","doi-asserted-by":"crossref","unstructured":"Russell, R., et al.: Automated vulnerability detection in source code using deep representation learning. In: 2018 17th IEEE International Conference on Machine Learning and Applications (ICMLA), pp. 757\u2013762. IEEE (2018)","DOI":"10.1109\/ICMLA.2018.00120"},{"issue":"11","key":"13_CR37","doi-asserted-by":"publisher","first-page":"2673","DOI":"10.1109\/78.650093","volume":"45","author":"M Schuster","year":"1997","unstructured":"Schuster, M., Paliwal, K.K.: Bidirectional recurrent neural networks. IEEE Trans. Sig. Process. 45(11), 2673\u20132681 (1997)","journal-title":"IEEE Trans. Sig. Process."},{"key":"13_CR38","unstructured":"Serebryany, K.: $$\\{$$OSS-Fuzz$$\\}$$-Google\u2019s continuous fuzzing service for open source software (2017)"},{"key":"13_CR39","doi-asserted-by":"crossref","unstructured":"Steenhoek, B., Gao, H., Le, W.: Dataflow analysis-inspired deep learning for efficient vulnerability detection. In: Proceedings of the 46th IEEE\/ACM International Conference on Software Engineering, pp. 1\u201313 (2024)","DOI":"10.1145\/3597503.3623345"},{"key":"13_CR40","unstructured":"Vaswani, A., et al.: Attention is all you need. Adv. Neural Inf. Process. Syst. 30 (2017)"},{"issue":"4","key":"13_CR41","doi-asserted-by":"publisher","first-page":"1","DOI":"10.1145\/3418463","volume":"17","author":"S VenkataKeerthy","year":"2020","unstructured":"VenkataKeerthy, S., Aggarwal, R., Jain, S., Desarkar, M.S., Upadrasta, R., Srikant, Y.: IR2Vec: LLVM IR based scalable program embeddings. ACM TACO 17(4), 1\u201327 (2020)","journal-title":"ACM TACO"},{"key":"13_CR42","doi-asserted-by":"publisher","first-page":"1943","DOI":"10.1109\/TIFS.2020.3044773","volume":"16","author":"H Wang","year":"2020","unstructured":"Wang, H., et al.: Combining graph-based learning with automated data collection for code vulnerability detection. IEEE Trans. Inf. Forensics Secur. 16, 1943\u20131958 (2020)","journal-title":"IEEE Trans. Inf. Forensics Secur."},{"key":"13_CR43","doi-asserted-by":"crossref","unstructured":"Wang, W., Nguyen, T.N., Wang, S., Li, Y., Zhang, J., Yadavally, A.: DeepVD: toward class-separation features for neural network vulnerability detection. In: 2023 IEEE\/ACM 45th International Conference on Software Engineering (ICSE), pp. 2249\u20132261. IEEE (2023)","DOI":"10.1109\/ICSE48619.2023.00189"},{"key":"13_CR44","unstructured":"WelkIR: Online package (2025). https:\/\/github.com\/HH-USTC\/WelkIR"},{"key":"13_CR45","doi-asserted-by":"crossref","unstructured":"Wu, Y., Lu, J., Zhang, Y., Jin, S.: Vulnerability detection in C\/C++ source code with graph representation learning. In: 2021 IEEE 11th Annual Computing and Communication Workshop and Conference (CCWC), pp. 1519\u20131524. IEEE (2021)","DOI":"10.1109\/CCWC51732.2021.9376145"},{"key":"13_CR46","doi-asserted-by":"crossref","unstructured":"Wu, Y., Zou, D., Dou, S., Yang, W., Xu, D., Jin, H.: VulCNN: an image-inspired scalable vulnerability detection system. In: Proceedings of the 44th International Conference on Software Engineering, pp. 2365\u20132376 (2022)","DOI":"10.1145\/3510003.3510229"},{"key":"13_CR47","doi-asserted-by":"crossref","unstructured":"Yuan, B., et al.: Enhancing deep learning-based vulnerability detection by building behavior graph model. In: 2023 IEEE\/ACM 45th International Conference on Software Engineering (ICSE), pp. 2262\u20132274. IEEE (2023)","DOI":"10.1109\/ICSE48619.2023.00190"},{"key":"13_CR48","doi-asserted-by":"publisher","first-page":"74562","DOI":"10.1109\/ACCESS.2020.2988557","volume":"8","author":"M Zagane","year":"2020","unstructured":"Zagane, M., Abdi, M.K., Alenezi, M.: Deep learning for software vulnerabilities detection using code metrics. IEEE Access 8, 74562\u201374570 (2020)","journal-title":"IEEE Access"},{"issue":"8","key":"13_CR49","doi-asserted-by":"publisher","first-page":"4196","DOI":"10.1109\/TSE.2023.3286586","volume":"49","author":"J Zhang","year":"2023","unstructured":"Zhang, J., Liu, Z., Hu, X., Xia, X., Li, S.: Vulnerability detection by learning from syntax-based execution paths of code. IEEE Trans. Softw. Eng. 49(8), 4196\u20134212 (2023)","journal-title":"IEEE Trans. Softw. Eng."},{"key":"13_CR50","unstructured":"Zhou, Y., Liu, S., Siow, J., Du, X., Liu, Y.: Devign: effective vulnerability identification by learning comprehensive program semantics via graph neural networks. Adv. Neural Inf. Process. Syst. 32 (2019)"},{"issue":"5","key":"13_CR51","first-page":"2224","volume":"18","author":"D Zou","year":"2019","unstructured":"Zou, D., Wang, S., Xu, S., Li, Z., Jin, H.: $$\\mu $$ VulDeePecker: a deep learning-based system for multiclass vulnerability detection. IEEE Trans. Dependable Secure Comput. 18(5), 2224\u20132236 (2019)","journal-title":"IEEE Trans. Dependable Secure Comput."}],"container-title":["Lecture Notes in Computer Science","Computer Security \u2013 ESORICS 2025"],"original-title":[],"language":"en","link":[{"URL":"https:\/\/link.springer.com\/content\/pdf\/10.1007\/978-3-032-07894-0_13","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2025,10,17]],"date-time":"2025-10-17T19:06:59Z","timestamp":1760728019000},"score":1,"resource":{"primary":{"URL":"https:\/\/link.springer.com\/10.1007\/978-3-032-07894-0_13"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2025,10,18]]},"ISBN":["9783032078933","9783032078940"],"references-count":51,"URL":"https:\/\/doi.org\/10.1007\/978-3-032-07894-0_13","relation":{},"ISSN":["0302-9743","1611-3349"],"issn-type":[{"value":"0302-9743","type":"print"},{"value":"1611-3349","type":"electronic"}],"subject":[],"published":{"date-parts":[[2025,10,18]]},"assertion":[{"value":"18 October 2025","order":1,"name":"first_online","label":"First Online","group":{"name":"ChapterHistory","label":"Chapter History"}},{"value":"ESORICS","order":1,"name":"conference_acronym","label":"Conference Acronym","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"European Symposium on Research in Computer Security","order":2,"name":"conference_name","label":"Conference Name","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"Toulouse","order":3,"name":"conference_city","label":"Conference City","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"France","order":4,"name":"conference_country","label":"Conference Country","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"2025","order":5,"name":"conference_year","label":"Conference Year","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"22 September 2025","order":7,"name":"conference_start_date","label":"Conference Start Date","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"24 September 2025","order":8,"name":"conference_end_date","label":"Conference End Date","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"30","order":9,"name":"conference_number","label":"Conference Number","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"esorics2025","order":10,"name":"conference_id","label":"Conference ID","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"https:\/\/www.esorics2025.org\/","order":11,"name":"conference_url","label":"Conference URL","group":{"name":"ConferenceInfo","label":"Conference Information"}}]}}