{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,7,17]],"date-time":"2026-07-17T13:08:26Z","timestamp":1784293706963,"version":"3.55.0"},"reference-count":35,"publisher":"Springer Science and Business Media LLC","issue":"9","license":[{"start":{"date-parts":[[2023,4,16]],"date-time":"2023-04-16T00:00:00Z","timestamp":1681603200000},"content-version":"tdm","delay-in-days":0,"URL":"https:\/\/www.springernature.com\/gp\/researchers\/text-and-data-mining"},{"start":{"date-parts":[[2023,4,16]],"date-time":"2023-04-16T00:00:00Z","timestamp":1681603200000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/www.springernature.com\/gp\/researchers\/text-and-data-mining"}],"funder":[{"name":"Nature Science Foundation of China","award":["61872104"],"award-info":[{"award-number":["61872104"]}]},{"name":"Fundamental Research Funds for the Central Universities in China","award":["3072020CF0603"],"award-info":[{"award-number":["3072020CF0603"]}]},{"name":"CAAC Key Laboratory of Civil Aviation Wide Surveillance and Safety Operation Management and Control Technology","award":["202102"],"award-info":[{"award-number":["202102"]}]},{"name":"CCF-NSFOCUS","award":["2021001"],"award-info":[{"award-number":["2021001"]}]},{"DOI":"10.13039\/501100001809","name":"National Natural Science Foundation of China","doi-asserted-by":"publisher","award":["62106150"],"award-info":[{"award-number":["62106150"]}],"id":[{"id":"10.13039\/501100001809","id-type":"DOI","asserted-by":"publisher"}]}],"content-domain":{"domain":["link.springer.com"],"crossmark-restriction":false},"short-container-title":["Int. J. Mach. Learn. & Cyber."],"published-print":{"date-parts":[[2023,9]]},"DOI":"10.1007\/s13042-023-01824-7","type":"journal-article","created":{"date-parts":[[2023,4,16]],"date-time":"2023-04-16T10:01:57Z","timestamp":1681639317000},"page":"3113-3127","update-policy":"https:\/\/doi.org\/10.1007\/springer_crossmark_policy","source":"Crossref","is-referenced-by-count":16,"title":["An attention-based automatic vulnerability detection approach with GGNN"],"prefix":"10.1007","volume":"14","author":[{"given":"Gaigai","family":"Tang","sequence":"first","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Lin","family":"Yang","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Long","family":"Zhang","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Weipeng","family":"Cao","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Lianxiao","family":"Meng","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Hongbin","family":"He","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Hongyu","family":"Kuang","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Feng","family":"Yang","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-1007-5589","authenticated-orcid":false,"given":"Huiqiang","family":"Wang","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]}],"member":"297","published-online":{"date-parts":[[2023,4,16]]},"reference":[{"key":"1824_CR1","unstructured":"National vulnerability database. In: https:\/\/nvd.nist.gov\/"},{"key":"1824_CR2","unstructured":"Common vulnerabilities and exposures. In: https:\/\/cve.mitre.org"},{"key":"1824_CR3","unstructured":"Flawfinder. In: http:\/\/www.dwheeler.com\/flawfinder"},{"key":"1824_CR4","doi-asserted-by":"crossref","unstructured":"Viega J, Bloch JT, McGraw G (2000) ITS4: a static vulnerability scanner for C and C++ code. In: 16th Annual Computer Security Applications Conference (ACSAC), 11\u201315 December 2000, New Orleans, Louisiana, USA, p 257","DOI":"10.1109\/ACSAC.2000.898880"},{"key":"1824_CR5","unstructured":"Rough-auditing-tool-for-security. In: https:\/\/code.google.com\/archive\/p\/rough-auditing-tool-for-security"},{"key":"1824_CR6","unstructured":"Checkmarx: In: https:\/\/www.checkmarx.com\/"},{"key":"1824_CR7","unstructured":"Hp fortify. In: https:\/\/www.hpfod.com\/"},{"key":"1824_CR8","doi-asserted-by":"crossref","unstructured":"Kim S, Woo S, Lee H, Oh H (2017) VUDDY: a scalable approach for vulnerable code clone discovery. In: 2017 IEEE Symposium on Security and Privacy, SP 2017, San Jose, CA, USA, May 22\u201326, pp 595\u2013614","DOI":"10.1109\/SP.2017.62"},{"key":"1824_CR9","doi-asserted-by":"crossref","unstructured":"Li Z, Zou D, Xu S, et al (2016) Vulpecker: an automated vulnerability detection system based on code similarity analysis. In: Proceedings of the 32nd Annual Conference on Computer Security Applications, ACSAC, Los Angeles, CA, USA, December 5\u20139, pp 201\u2013213","DOI":"10.1145\/2991079.2991102"},{"key":"1824_CR10","doi-asserted-by":"crossref","unstructured":"Yamaguchi F, Golde N, Arp D, Rieck K (2014) Modeling and discovering vulnerabilities with code property graphs. In: 2014 IEEE Symposium on Security and Privacy, SP 2014, Berkeley, CA, USA, May 18\u201321, pp 590\u2013604","DOI":"10.1109\/SP.2014.44"},{"key":"1824_CR11","doi-asserted-by":"crossref","unstructured":"Perl, H., Dechand, S., et al (2015) Vccfinder: Finding potential vulnerabilities in open-source projects to assist code audits. In: Proceedings of the 22nd ACM SIGSAC Conference on Computer and Communications Security, Denver, CO, USA, October 12\u201316, 2015, pp 426\u2013437","DOI":"10.1145\/2810103.2813604"},{"key":"1824_CR12","doi-asserted-by":"crossref","unstructured":"Grieco G, Grinblat GL et al (2016) Toward large-scale vulnerability discovery using machine learning. In: Proceedings of the Sixth ACM on Conference on Data and Application Security and Privacy, CODASPY, New Orleans, LA, USA, March 9\u201311, pp 85\u201396","DOI":"10.1145\/2857705.2857720"},{"key":"1824_CR13","doi-asserted-by":"crossref","unstructured":"Wu F, Wang J, Liu J, Wang W (2017) Vulnerability detection with deep learning. In: 2017 3rd IEEE International Conference on Computer and Communications (ICCC), pp 1298\u20131302","DOI":"10.1109\/CompComm.2017.8322752"},{"key":"1824_CR14","unstructured":"Li Z, Zou D, et al. (2018) Sysevr: a framework for using deep learning to detect software vulnerabilities"},{"key":"1824_CR15","doi-asserted-by":"crossref","unstructured":"Li Z, Zou D, et al. (2018) Vuldeepecker: a deep learning-based system for vulnerability detection. In: 25th Annual Network and Distributed System Security Symposium, NDSS, San Diego, California, USA, February 18\u201321","DOI":"10.14722\/ndss.2018.23158"},{"key":"1824_CR16","unstructured":"Srikant S, Lesimple N, O\u2019Reilly U (2020) Dependency-based neural representations for classifying lines of programs"},{"key":"1824_CR17","unstructured":"Li Y, Tarlow D, Brockschmidt M, Zemel RS (2016) Gated graph sequence neural networks. In: Bengio Y, LeCun Y (eds) 4th International Conference on Learning Representations, ICLR, San Juan, Puerto Rico, May 2\u20134"},{"key":"1824_CR18","unstructured":"Kipf TN, Welling M (2017) Semi-supervised classification with graph convolutional networks. In: 5th International Conference on Learning Representations, ICLR, Toulon, France, April 24\u201326"},{"key":"1824_CR19","doi-asserted-by":"crossref","unstructured":"Long J, Shelhamer E, Darrell T (2015) Fully convolutional networks for semantic segmentation. In: IEEE Conference on Computer Vision and Pattern Recognition, CVPR, Boston, MA, USA, June 7\u201312, pp 3431\u20133440","DOI":"10.1109\/CVPR.2015.7298965"},{"key":"1824_CR20","doi-asserted-by":"crossref","unstructured":"Zheng W, Gao J et al (2020) The impact factors on the performance of machine learning-based vulnerability detection: a comparative study. J Syst Softw 110659","DOI":"10.1016\/j.jss.2020.110659"},{"key":"1824_CR21","doi-asserted-by":"crossref","unstructured":"Cho K, van Merrienboer B et al. (2014) Learning phrase representations using RNN encoder-decoder for statistical machine translation. In: Moschitti A, Pang B, Daelemans W (eds) Proceedings of the 2014 Conference on Empirical Methods in Natural Language Processing, EMNLP 2014, October 25\u201329, 2014, Doha, Qatar, A Meeting of SIGDAT, a Special Interest Group of The ACL, pp. 1724\u20131734","DOI":"10.3115\/v1\/D14-1179"},{"key":"1824_CR22","unstructured":"Allamanis M, Brockschmidt M, Khademi M (2018) Learning to represent programs with graphs. In: 6th International Conference on Learning Representations, ICLR, Vancouver, BC, Canada, April 30\u2013May 3"},{"key":"1824_CR23","unstructured":"Zhou Y, Liu S, et al. (2019) Devign: Effective vulnerability identification by learning comprehensive program semantics via graph neural networks. In: Advances in Neural Information Processing Systems 32: Annual Conference on Neural Information Processing Systems, NeurIPS 2019, December 8\u201314, 2019, Vancouver, BC, Canada, pp 10197\u201310207"},{"key":"1824_CR24","unstructured":"Rabheru R, Hanif H, Maffeis S (2020) A hybrid graph neural network approach for detecting PHP vulnerabilities"},{"key":"1824_CR25","doi-asserted-by":"publisher","first-page":"1943","DOI":"10.1109\/TIFS.2020.3044773","volume":"16","author":"H Wang","year":"2021","unstructured":"Wang H, Ye G et al (2021) Combining graph-based learning with automated data collection for code vulnerability detection. IEEE Trans Inf Forensics Secur 16:1943\u20131958","journal-title":"IEEE Trans Inf Forensics Secur"},{"key":"1824_CR26","doi-asserted-by":"crossref","unstructured":"Cheng X, Wang H et al (2019) Static detection of control-flow-related vulnerabilities using graph embedding. In: Pang J, Sun J (eds) 24th International Conference on Engineering of Complex Computer Systems. ICECCS 2019, Guangzhou, China, November 10\u201313, pp 41\u201350","DOI":"10.1109\/ICECCS.2019.00012"},{"key":"1824_CR27","doi-asserted-by":"publisher","DOI":"10.1016\/j.infsof.2021.106576","volume":"136","author":"S Cao","year":"2021","unstructured":"Cao S, Sun X, Bo L, Wei Y, Li B (2021) Bgnn4vd: constructing bidirectional graph neural-network for vulnerability detection. Inf Softw Technol 136:106576","journal-title":"Inf Softw Technol"},{"key":"1824_CR28","doi-asserted-by":"crossref","unstructured":"Wu Y, Lu J, Zhang Y, Jin S (2021) Vulnerability detection in C\/C++ source code with graph representation learning. In: 11th IEEE Annual Computing and Communication Workshop and Conference, CCWC, Las Vegas, NV, USA, January 27\u201330, pp 1519\u20131524","DOI":"10.1109\/CCWC51732.2021.9376145"},{"key":"1824_CR29","unstructured":"Lee J, Lee I, Kang J (2019) Self-attention graph pooling. In: Proceedings of the 36th International Conference on Machine Learning, ICML, 9\u201315 June 2019, Long Beach, California, USA, vol. 97, pp 3734\u20133743"},{"key":"1824_CR30","unstructured":"Yamaguchi F. Joern. In: https:\/\/joern.io\/"},{"key":"1824_CR31","unstructured":"Russell LKR. Common vulnerabilities and exposures. In: https:\/\/osf.io\/d45bw\/"},{"key":"1824_CR32","doi-asserted-by":"crossref","unstructured":"Russell RL, Kim LY, Hamilton LH, Lazovich T, Harer J, Ozdemir O, Ellingwood PM, McConley MW (2018) Automated vulnerability detection in source code using deep representation learning. In: Wani MA, Kantardzic MM, Mouchaweh MS, Gama J, Lughofer E (eds) 17th IEEE International Conference on Machine Learning and Applications. ICMLA 2018, Orlando, FL, USA, December 17\u201320, pp 757\u2013762","DOI":"10.1109\/ICMLA.2018.00120"},{"key":"1824_CR33","doi-asserted-by":"crossref","unstructured":"Yang Z, Yang D, et al. (2016) Hierarchical attention networks for document classification. In: NAACL HLT, The 2016 Conference of the North American Chapter of the Association for Computational Linguistics: Human Language Technologies, San Diego California, USA, June 12\u201317, pp 1480\u20131489","DOI":"10.18653\/v1\/N16-1174"},{"issue":"5","key":"1824_CR34","doi-asserted-by":"publisher","first-page":"2469","DOI":"10.1109\/TDSC.2019.2954088","volume":"18","author":"G Lin","year":"2021","unstructured":"Lin G, Zhang J, Luo W, Pan L, de Vel OY, Montague P, Xiang Y (2021) Software vulnerability discovery via learning multi-domain knowledge bases. IEEE Trans Depend Secur Comput 18(5):2469\u20132485","journal-title":"IEEE Trans Depend Secur Comput"},{"key":"1824_CR35","unstructured":"Cppcheck. In: http:\/\/cppcheck.net"}],"container-title":["International Journal of Machine Learning and Cybernetics"],"original-title":[],"language":"en","link":[{"URL":"https:\/\/link.springer.com\/content\/pdf\/10.1007\/s13042-023-01824-7.pdf","content-type":"application\/pdf","content-version":"vor","intended-application":"text-mining"},{"URL":"https:\/\/link.springer.com\/article\/10.1007\/s13042-023-01824-7\/fulltext.html","content-type":"text\/html","content-version":"vor","intended-application":"text-mining"},{"URL":"https:\/\/link.springer.com\/content\/pdf\/10.1007\/s13042-023-01824-7.pdf","content-type":"application\/pdf","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2023,7,21]],"date-time":"2023-07-21T04:31:17Z","timestamp":1689913877000},"score":1,"resource":{"primary":{"URL":"https:\/\/link.springer.com\/10.1007\/s13042-023-01824-7"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2023,4,16]]},"references-count":35,"journal-issue":{"issue":"9","published-print":{"date-parts":[[2023,9]]}},"alternative-id":["1824"],"URL":"https:\/\/doi.org\/10.1007\/s13042-023-01824-7","relation":{},"ISSN":["1868-8071","1868-808X"],"issn-type":[{"value":"1868-8071","type":"print"},{"value":"1868-808X","type":"electronic"}],"subject":[],"published":{"date-parts":[[2023,4,16]]},"assertion":[{"value":"6 May 2022","order":1,"name":"received","label":"Received","group":{"name":"ArticleHistory","label":"Article History"}},{"value":"16 March 2023","order":2,"name":"accepted","label":"Accepted","group":{"name":"ArticleHistory","label":"Article History"}},{"value":"16 April 2023","order":3,"name":"first_online","label":"First Online","group":{"name":"ArticleHistory","label":"Article History"}}]}}