{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,10,30]],"date-time":"2026-10-30T07:04:51Z","timestamp":1793343891282,"version":"4.5.0"},"reference-count":52,"publisher":"Springer Science and Business Media LLC","issue":"5","license":[{"start":{"date-parts":[[2025,9,20]],"date-time":"2025-09-20T00:00:00Z","timestamp":1758326400000},"content-version":"tdm","delay-in-days":0,"URL":"https:\/\/www.springernature.com\/gp\/researchers\/text-and-data-mining"},{"start":{"date-parts":[[2025,9,20]],"date-time":"2025-09-20T00:00:00Z","timestamp":1758326400000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/www.springernature.com\/gp\/researchers\/text-and-data-mining"}],"funder":[{"DOI":"10.13039\/100000001","name":"National Science Foundation","doi-asserted-by":"publisher","award":["1820685 and 2101118"],"award-info":[{"award-number":["1820685 and 2101118"]}],"id":[{"id":"10.13039\/100000001","id-type":"DOI","asserted-by":"publisher"}]}],"content-domain":{"domain":["link.springer.com"],"crossmark-restriction":false},"short-container-title":["Int. J. Inf. Secur."],"published-print":{"date-parts":[[2025,10]]},"DOI":"10.1007\/s10207-025-01132-x","type":"journal-article","created":{"date-parts":[[2025,9,20]],"date-time":"2025-09-20T09:22:16Z","timestamp":1758360136000},"update-policy":"https:\/\/doi.org\/10.1007\/springer_crossmark_policy","source":"Crossref","is-referenced-by-count":10,"title":["Detecting code vulnerabilities with heterogeneous GNN training"],"prefix":"10.1007","volume":"24","author":[{"given":"Yu","family":"Luo","sequence":"first","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Weifeng","family":"Xu","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Dianxiang","family":"Xu","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]}],"member":"297","published-online":{"date-parts":[[2025,9,20]]},"reference":[{"key":"1132_CR1","unstructured":"Allamanis, M., Brockschmidt, M., Khademi, M.: Learning to represent programs with graphs. arXiv preprint arXiv:1711.00740, (2017)"},{"key":"1132_CR2","unstructured":"Bresson, X., Laurent, T.: Residual gated graph convnets. arXiv preprint arXiv:1711.07553, (2017)"},{"key":"1132_CR3","unstructured":"Brockschmidt, M.: Gnn-film: Graph neural networks with feature-wise linear modulation. In International Conference on Machine Learning, pages 1144\u20131152. PMLR, (2020)"},{"key":"1132_CR4","doi-asserted-by":"crossref","unstructured":"Cao, S., Sun, X., Bo, L., Wu, R., Li, B., Tao, C.: Mvd: memory-related vulnerability detection based on flow-sensitive graph neural networks. In Proceedings of the 44th International Conference on Software Engineering, pages 1456\u20131468, (2022)","DOI":"10.1145\/3510003.3510219"},{"issue":"3","key":"1132_CR5","doi-asserted-by":"crossref","first-page":"1","DOI":"10.1145\/3436877","volume":"30","author":"X Cheng","year":"2021","unstructured":"Cheng, X., Wang, H., Hua, J., Xu, G., Sui, Y.: Deepwukong: statically detecting software vulnerabilities using deep graph neural network. ACM Transactions on Software Engineering and Methodology (TOSEM) 30(3), 1\u201333 (2021)","journal-title":"ACM Transactions on Software Engineering and Methodology (TOSEM)"},{"key":"1132_CR6","unstructured":"CVE. Common vulnerabilities and exposures. https:\/\/cve.mitre.org, (2019)"},{"key":"1132_CR7","unstructured":"Dam, H.K., Tran, T., Pham, T., Ng, S.W., Grundy, J., Ghose, A.: Automatic feature learning for vulnerability prediction. arXiv preprint arXiv:1708.02368, (2017)"},{"key":"1132_CR8","unstructured":"Dataset and Code. Dataset and code. https:\/\/drive.google.com\/drive\/folders\/1rapAOuJd5O79_DQECNNgh6xcB470xbbd?usp=drive_link, (2024)"},{"key":"1132_CR9","unstructured":"Devlin, J., Chang, M., Lee, K., Toutanova, K: Bert: Pre-training of deep bidirectional transformers for language understanding, (2018)"},{"key":"1132_CR10","doi-asserted-by":"crossref","unstructured":"Ding, Y., Suneja, S., Zheng, Y., Laredo, J., Morari, A., Kaiser, G., Ray, B.: Velvet: a novel ensemble learning approach to automatically locate vulnerable statements. In 2022 IEEE International Conference on Software Analysis, Evolution and Reengineering (SANER), pages 959\u2013970. IEEE, (2022)","DOI":"10.1109\/SANER53432.2022.00114"},{"issue":"3","key":"1132_CR11","doi-asserted-by":"crossref","first-page":"2261","DOI":"10.1007\/s11277-017-5069-3","volume":"102","author":"F Dong","year":"2018","unstructured":"Dong, F., Wang, J., Li, Q., Xu, G., Zhang, S.: Defect prediction in android binary executables using deep neural network. Wireless Pers. Commun. 102(3), 2261\u20132285 (2018)","journal-title":"Wireless Pers. Commun."},{"key":"1132_CR12","doi-asserted-by":"crossref","unstructured":"Feng, Z., Guo, D., Tang, D., Duan, N., Feng, X., Gong, M., Shou, L., Qin, B., Liu, T., Jiang, D. et\u00a0al.: Codebert: A pre-trained model for programming and natural languages. arXiv preprint arXiv:2002.08155, (2020)","DOI":"10.18653\/v1\/2020.findings-emnlp.139"},{"key":"1132_CR13","unstructured":"Hamilton, W., Ying, Z., Leskovec, J.: Inductive representation learning on large graphs. Advances in neural information processing systems, 30, (2017)"},{"key":"1132_CR14","doi-asserted-by":"crossref","unstructured":"Hin, D., Kan, A., Chen, H., Babar, M.\u00a0A.: Linevd: statement-level vulnerability detection using graph neural networks. In Proceedings of the 19th International Conference on Mining Software Repositories, pages 596\u2013607, (2022)","DOI":"10.1145\/3524842.3527949"},{"key":"1132_CR15","unstructured":"Holmes, G., Donkin, A., Witten, I.H.: Weka: A machine learning workbench. In: Proceedings of ANZIIS\u201994-Australian New Zealnd Intelligent Information Systems Conference, pages 357\u2013361. IEEE, (1994)"},{"key":"1132_CR16","doi-asserted-by":"crossref","unstructured":"Hovsepyan, A., Scandariato, R., Joosen, W., Walden, J.: Software vulnerability prediction using text analysis techniques. In: Proceedings of the 4th international workshop on Security measurements and metrics, pages 7\u201310, (2012)","DOI":"10.1145\/2372225.2372230"},{"issue":"1","key":"1132_CR17","doi-asserted-by":"crossref","first-page":"14","DOI":"10.1007\/s10515-024-00484-3","volume":"32","author":"X Jia","year":"2025","unstructured":"Jia, X., Du, J., Fang, M., Liu, H., Li, Y., Jiang, F.: Vulnerability detection with graph enhancement and global dependency representation learning. Autom. Softw. Eng. 32(1), 14 (2025)","journal-title":"Autom. Softw. Eng."},{"key":"1132_CR18","unstructured":"Le, T., Nguyen, T., Le, T., Phung, D., Montague, P., De\u00a0Vel, O., Qu, L.: Maximal divergence sequential autoencoder for binary software vulnerability detection. In: International Conference on Learning Representations, (2018)"},{"key":"1132_CR19","unstructured":"Lee, Y., Choi, S., Kim, C., Lim, S., Park, K.: Learning binary code with deep learning to detect software weakness. In: KSII the 9th international conference on internet (ICONI) 2017 symposium, (2017)"},{"key":"1132_CR20","unstructured":"Li, Y., Tarlow, D., Brockschmidt, M., Zemel, R.: Gated graph sequence neural networks. arXiv preprint arXiv:1511.05493, (2015)"},{"key":"1132_CR21","doi-asserted-by":"crossref","unstructured":"Li, Z., Zou, D., Xu, S., Jin, H., Zhu, Y., Chen, Z.: Sysevr: A framework for using deep learning to detect software vulnerabilities. IEEE Transactions on Dependable and Secure Computing, (2021)","DOI":"10.1109\/TDSC.2021.3051525"},{"key":"1132_CR22","doi-asserted-by":"crossref","unstructured":"Li, Z., Zou, D., Xu, S., Ou, X., Zhong, Y.: Vuldeepecker: A deep learning-based system for vulnerability detection. In: Network and Distributed System Security Symposium, 2 (2018)","DOI":"10.14722\/ndss.2018.23158"},{"key":"1132_CR23","doi-asserted-by":"crossref","unstructured":"Lin, G., Zhang, J., Luo, W., Pan, L., Xiang, Y.: Poster: Vulnerability discovery with function representation learning from unlabeled projects. In: Proceedings of the 2017 ACM SIGSAC Conference on Computer and Communications Security, pages 2539\u20132541, (2017)","DOI":"10.1145\/3133956.3138840"},{"issue":"7","key":"1132_CR24","doi-asserted-by":"crossref","first-page":"3289","DOI":"10.1109\/TII.2018.2821768","volume":"14","author":"G Lin","year":"2018","unstructured":"Lin, G., Zhang, J., Luo, W., Pan, L., Xiang, Y., De Vel, O., Montague, P.: Cross-project transfer representation learning for vulnerable function discovery. IEEE Trans. Industr. Inf. 14(7), 3289\u20133297 (2018)","journal-title":"IEEE Trans. Industr. Inf."},{"issue":"2","key":"1132_CR25","first-page":"1296","volume":"35","author":"Z Liu","year":"2021","unstructured":"Liu, Z., Qian, P., Wang, X., Zhuang, Y., Qiu, L., Wang, X.: Combining graph neural networks with expert knowledge for smart contract vulnerability detection. IEEE Trans. Knowl. Data Eng. 35(2), 1296\u20131310 (2021)","journal-title":"IEEE Trans. Knowl. Data Eng."},{"key":"1132_CR26","doi-asserted-by":"crossref","unstructured":"Luo, Y., Xu, W., Xu, D.: Compact abstract graphs for detecting code vulnerability with gnn models. In: Proceedings of the 38th Annual Computer Security Applications Conference, pages 497\u2013507, (2022)","DOI":"10.1145\/3564625.3564655"},{"key":"1132_CR27","doi-asserted-by":"crossref","unstructured":"Luo, Y., Xu, W., Xu, D.: Detecting integer overflow errors in java source code via machine learning. 31(8), (2022)","DOI":"10.1142\/S0218213022500476"},{"key":"1132_CR28","doi-asserted-by":"crossref","unstructured":"Luo, Y., Xu, W., Xu, D.: Predicting code vulnerability types via heterogeneous gnn learning. In: European Symposium on Research in Computer Security, pages 67\u201387. Springer, (2024)","DOI":"10.1007\/978-3-031-70896-1_4"},{"key":"1132_CR29","doi-asserted-by":"crossref","unstructured":"Mokhov, S.\u00a0A., Paquet, J., Debbabi, M.: Marfcat: Fast code analysis for defects and vulnerabilities. In: 2015 IEEE 1st International Workshop on Software Analytics, pages 35\u201338. IEEE, (2015)","DOI":"10.1109\/SWAN.2015.7070488"},{"key":"1132_CR30","unstructured":"NVD. National vulnerability database. https:\/\/nvd.nist.gov, (2023)"},{"key":"1132_CR31","doi-asserted-by":"crossref","unstructured":"Pang, Y., Xue, X., Namin, A.: Predicting vulnerable software components through n-gram analysis and statistical feature selection. In: 2015 IEEE 14th International Conference on Machine Learning and Applications (ICMLA), pages 543\u2013548. IEEE, (2015)","DOI":"10.1109\/ICMLA.2015.99"},{"key":"1132_CR32","doi-asserted-by":"crossref","unstructured":"Peng, H., Mou, L., Li, G., Liu, Y., Zhang, L., Jin, Z.: Building program vector representations for deep learning. In: International conference on knowledge science, engineering and management, pages 547\u2013553. Springer, (2015)","DOI":"10.1007\/978-3-319-25159-2_49"},{"key":"1132_CR33","unstructured":"Peng, X., Wang, S., Qin, Y., Lin, B., Chen, L., Mao, X.: Keep it simple: Towards accurate vulnerability detection for large code graphs. arXiv preprint arXiv:2412.10164, (2024)"},{"key":"1132_CR34","doi-asserted-by":"crossref","unstructured":"Rabheru, R., Hanif, H., Maffeis, S.: A hybrid graph neural network approach for detecting php vulnerabilities. In: 2022 IEEE Conference on Dependable and Secure Computing (DSC), pages 1\u20139. IEEE, (2022)","DOI":"10.1109\/DSC54232.2022.9888816"},{"key":"1132_CR35","doi-asserted-by":"crossref","unstructured":"Russell, R., Kim, L., Hamilton, L., Lazovich, T., Harer, J., Ozdemir, O., Ellingwood, P., McConley, M.: Automated vulnerability detection in source code using deep representation learning. In: 2018 17th IEEE International Conference on Machine Learning and Applications (ICMLA), pages 757\u2013762. IEEE, (2018)","DOI":"10.1109\/ICMLA.2018.00120"},{"key":"1132_CR36","doi-asserted-by":"crossref","unstructured":"Sajnani, H., Saini, V., Svajlenko, J., Roy, C.K., Lopes, C.V.: Sourcerercc: Scaling code clone detection to big-code. In: Proceedings of the 38th International Conference on Software Engineering, pages 1157\u20131168, (2016)","DOI":"10.1145\/2884781.2884877"},{"key":"1132_CR37","unstructured":"SARD. Nist software assurance reference dataset project. https:\/\/samate.nist.gov\/SRD\/testsuite.php, (2019)"},{"issue":"10","key":"1132_CR38","doi-asserted-by":"crossref","first-page":"993","DOI":"10.1109\/TSE.2014.2340398","volume":"40","author":"R Scandariato","year":"2014","unstructured":"Scandariato, R., Walden, J., Hovsepyan, A., Joosen, W.: Predicting vulnerable software components via text mining. IEEE Trans. Software Eng. 40(10), 993\u20131006 (2014)","journal-title":"IEEE Trans. Software Eng."},{"key":"1132_CR39","unstructured":"Sestili, C.D., Snavely, W.S., VanHoudnos, N.M.: Towards security defect prediction with ai. arXiv preprint arXiv:1808.09897, (2018)"},{"issue":"1","key":"1132_CR40","doi-asserted-by":"crossref","first-page":"16","DOI":"10.1016\/j.istr.2009.03.003","volume":"14","author":"A Shabtai","year":"2009","unstructured":"Shabtai, A., Moskovitch, R., Elovici, Y., Glezer, C.: Detection of malicious code by applying machine learning classifiers on static features: A state-of-the-art survey. information security technical report 14(1), 16\u201329 (2009)","journal-title":"information security technical report"},{"key":"1132_CR41","doi-asserted-by":"crossref","unstructured":"Shi, Y., Huang, Z., Feng, S., Zhong, H., Wang, W., Sun, Y.: Masked label prediction: Unified message passing model for semi-supervised classification. arXiv preprint arXiv:2009.03509, (2020)","DOI":"10.24963\/ijcai.2021\/214"},{"key":"1132_CR42","first-page":"16857","volume":"33","author":"K Song","year":"2020","unstructured":"Song, K., Tan, X., Qin, T., Lu, J., Liu, T.: Mpnet: masked and permuted pre-training for language understanding. Adv. Neural. Inf. Process. Syst. 33, 16857\u201316867 (2020)","journal-title":"Adv. Neural. Inf. Process. Syst."},{"issue":"1","key":"1132_CR43","first-page":"1919907","volume":"2022","author":"Z Song","year":"2022","unstructured":"Song, Z., Wang, J., Liu, S., Fang, Z., Yang, K.: Hgvul: a code vulnerability detection method based on heterogeneous source-level intermediate representation. Security and Communication Networks 2022(1), 1919907 (2022)","journal-title":"Security and Communication Networks"},{"key":"1132_CR44","doi-asserted-by":"crossref","unstructured":"Sun, H., Liu, Y., Ding, Z., Xiao, Y., Hao, Z., Zhu, H.: An enhanced vulnerability detection in software using a heterogeneous encoding ensemble. In: 2023 IEEE Symposium on Computers and Communications (ISCC), pages 1214\u20131220. IEEE, (2023)","DOI":"10.1109\/ISCC58397.2023.10217978"},{"key":"1132_CR45","first-page":"1943","volume":"16","author":"H Wang","year":"2020","unstructured":"Wang, H., Ye, G., Tang, Z., Tan, S.H., Huang, S., Fang, D., Feng, Y., Bian, L., Wang, Z.: Combining graph-based learning with automated data collection for code vulnerability detection. IEEE TIFS 16, 1943\u20131958 (2020)","journal-title":"IEEE TIFS"},{"key":"1132_CR46","doi-asserted-by":"crossref","unstructured":"Wang, S., Liu, T., Tan, L.: Automatically learning semantic features for defect prediction. In: 2016 IEEE\/ACM 38th International Conference on Software Engineering (ICSE), pages 297\u2013308. IEEE, (2016)","DOI":"10.1145\/2884781.2884804"},{"key":"1132_CR47","doi-asserted-by":"crossref","unstructured":"Wen, X., Chen, Y., Gao, C., Zhang, H., Zhang, J., Liao, Q.: Vulnerability detection with graph simplification and enhanced graph representation learning. arXiv preprint arXiv:2302.04675, (2023)","DOI":"10.1109\/ICSE48619.2023.00191"},{"key":"1132_CR48","unstructured":"Yamaguchi, F., Lindner, F., Rieck, K.: Vulnerability extrapolation: Assisted discovery of vulnerabilities using machine learning. In: Proceedings of the 5th USENIX conference on Offensive technologies, pages 13\u201313, (2011)"},{"key":"1132_CR49","unstructured":"Yang, Z., Dai, Z., Yang, Y., Carbonell, J., Salakhutdinov, R., Le, Q.: Xlnet: Generalized autoregressive pretraining for language understanding. Advances in neural information processing systems, 32, (2019)"},{"key":"1132_CR50","doi-asserted-by":"crossref","unstructured":"Zhao, G., Huang, J.: Deepsim: deep learning code functional similarity. In: Proceedings of the 2018 26th ACM Joint Meeting on European Software Engineering Conference and Symposium on the Foundations of Software Engineering, pages 141\u2013151, (2018)","DOI":"10.1145\/3236024.3236068"},{"key":"1132_CR51","unstructured":"Zhou, Y., Liu, S., Siow, J., Du, X., Liu, Y.: Devign: Effective vulnerability identification by learning comprehensive program semantics via graph neural networks. Advances in neural information processing systems, 32, (2019)"},{"issue":"5","key":"1132_CR52","first-page":"2224","volume":"18","author":"D Zou","year":"2019","unstructured":"Zou, D., Wang, S., Xu, S., Li, Z., Jin, H.: $$\\mu $$vuldeepecker: a deep learning-based system for multiclass vulnerability detection. IEEE Trans. Dependable Secure Comput. 18(5), 2224\u20132236 (2019)","journal-title":"IEEE Trans. Dependable Secure Comput."}],"container-title":["International Journal of Information Security"],"original-title":[],"language":"en","link":[{"URL":"https:\/\/link.springer.com\/content\/pdf\/10.1007\/s10207-025-01132-x.pdf","content-type":"application\/pdf","content-version":"vor","intended-application":"text-mining"},{"URL":"https:\/\/link.springer.com\/article\/10.1007\/s10207-025-01132-x\/fulltext.html","content-type":"text\/html","content-version":"vor","intended-application":"text-mining"},{"URL":"https:\/\/link.springer.com\/content\/pdf\/10.1007\/s10207-025-01132-x.pdf","content-type":"application\/pdf","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2025,10,16]],"date-time":"2025-10-16T11:39:09Z","timestamp":1760614749000},"score":1,"resource":{"primary":{"URL":"https:\/\/link.springer.com\/10.1007\/s10207-025-01132-x"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2025,9,20]]},"references-count":52,"journal-issue":{"issue":"5","published-print":{"date-parts":[[2025,10]]}},"alternative-id":["1132"],"URL":"https:\/\/doi.org\/10.1007\/s10207-025-01132-x","relation":{"has-preprint":[{"id-type":"doi","id":"10.21203\/rs.3.rs-6397101\/v1","asserted-by":"object"}]},"ISSN":["1615-5262","1615-5270"],"issn-type":[{"value":"1615-5262","type":"print"},{"value":"1615-5270","type":"electronic"}],"subject":[],"published":{"date-parts":[[2025,9,20]]},"assertion":[{"value":"7 April 2025","order":1,"name":"received","label":"Received","group":{"name":"ArticleHistory","label":"Article History"}},{"value":"16 September 2025","order":2,"name":"accepted","label":"Accepted","group":{"name":"ArticleHistory","label":"Article History"}},{"value":"20 September 2025","order":3,"name":"first_online","label":"First Online","group":{"name":"ArticleHistory","label":"Article History"}},{"order":1,"name":"Ethics","group":{"name":"EthicsHeading","label":"Declarations"}},{"value":"The authors declare no competing interests.","order":2,"name":"Ethics","group":{"name":"EthicsHeading","label":"Competing interests"}}],"article-number":"213"}}