{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,7,9]],"date-time":"2026-07-09T06:13:29Z","timestamp":1783577609484,"version":"3.55.0"},"reference-count":49,"publisher":"IEEE","license":[{"start":{"date-parts":[[2026,6,22]],"date-time":"2026-06-22T00:00:00Z","timestamp":1782086400000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-029"},{"start":{"date-parts":[[2026,6,22]],"date-time":"2026-06-22T00:00:00Z","timestamp":1782086400000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-037"}],"funder":[{"DOI":"10.13039\/501100001809","name":"National Natural Science Foundation of China","doi-asserted-by":"publisher","id":[{"id":"10.13039\/501100001809","id-type":"DOI","asserted-by":"publisher"}]}],"content-domain":{"domain":[],"crossmark-restriction":false},"short-container-title":[],"published-print":{"date-parts":[[2026,6,22]]},"DOI":"10.1109\/dsn69566.2026.00064","type":"proceedings-article","created":{"date-parts":[[2026,7,8]],"date-time":"2026-07-08T19:41:43Z","timestamp":1783539703000},"page":"613-626","source":"Crossref","is-referenced-by-count":0,"title":["VulJSFormer: Learning to Detect JavaScript Vulnerabilities with Vulnerability-Relevant Graphs"],"prefix":"10.1109","author":[{"given":"Kunlun","family":"Ren","sequence":"first","affiliation":[{"name":"Huazhong University of Science and Technology,School of Cyber Science and Engineering,Wuhan,China,430074"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Haochen","family":"He","sequence":"additional","affiliation":[{"name":"Huazhong University of Science and Technology,School of Cyber Science and Engineering,Wuhan,China,430074"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Hang","family":"Wang","sequence":"additional","affiliation":[{"name":"Huazhong University of Science and Technology,School of Cyber Science and Engineering,Wuhan,China,430074"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Weizhong","family":"Qiang","sequence":"additional","affiliation":[{"name":"Huazhong University of Science and Technology,School of Cyber Science and Engineering,Wuhan,China,430074"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Yueming","family":"Wu","sequence":"additional","affiliation":[{"name":"Huazhong University of Science and Technology,School of Cyber Science and Engineering,Wuhan,China,430074"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Deqing","family":"Zou","sequence":"additional","affiliation":[{"name":"Huazhong University of Science and Technology,School of Cyber Science and Engineering,Wuhan,China,430074"}],"role":[{"vocabulary":"crossref","role":"author"}]}],"member":"263","reference":[{"key":"ref1","article-title":"npm"},{"key":"ref2","doi-asserted-by":"publisher","DOI":"10.1109\/sp.2014.44"},{"key":"ref3","doi-asserted-by":"publisher","DOI":"10.1145\/3088515.3088519"},{"key":"ref4","doi-asserted-by":"publisher","DOI":"10.1145\/3468264.3468542"},{"key":"ref5","doi-asserted-by":"publisher","DOI":"10.1145\/3338906.3338933"},{"key":"ref6","first-page":"143","article-title":"Mining node.js vulnerabilities via object dependence graph and query","volume-title":"31st USENIX Security Symposium, USENIX Security 2022, Boston, MA, USA, August 10-12, 2022","author":"Li"},{"key":"ref7","doi-asserted-by":"publisher","DOI":"10.1109\/sp46215.2023.10179352"},{"key":"ref8","doi-asserted-by":"crossref","DOI":"10.18653\/v1\/2020.findings-emnlp.139","article-title":"Codebert: A pre-trained model for programming and natural languages","author":"Feng","year":"2020"},{"key":"ref9","article-title":"Graphcodebert: Pre-training code representations with data flow","author":"Guo","year":"2021"},{"key":"ref10","article-title":"Snyk"},{"key":"ref11","article-title":"Devign: Effective vulnerability identification by learning comprehensive program semantics via graph neural networks","author":"Zhou","year":"2019"},{"key":"ref12","doi-asserted-by":"crossref","DOI":"10.1145\/3510454.3516865","article-title":"Regvd: Revisiting graph neural networks for vulnerability detection","author":"Nguyen","year":"2022"},{"key":"ref13","doi-asserted-by":"publisher","DOI":"10.1109\/EuroSP.2017.14"},{"key":"ref14","article-title":"Odgen","author":"Li"},{"key":"ref15","article-title":"A comprehensive survey on graph neural networks","volume-title":"CoRR","author":"Wu","year":"2019"},{"key":"ref16","article-title":"CodeSearchNet challenge: Evaluating the state of semantic code search","author":"Husain","year":"2019"},{"key":"ref17","doi-asserted-by":"publisher","DOI":"10.1145\/2837614.2837671"},{"key":"ref18","doi-asserted-by":"crossref","DOI":"10.18653\/v1\/2023.findings-acl.308","article-title":"Code execution with pre-trained language models","author":"Liu","year":"2023"},{"key":"ref19","doi-asserted-by":"crossref","DOI":"10.1145\/3540250.3549081","article-title":"Automating code review activities by large-scale pre-training","author":"Li","year":"2022"},{"key":"ref20","doi-asserted-by":"crossref","DOI":"10.18653\/v1\/2022.acl-long.499","article-title":"Unixcoder: Unified cross-modal pre-training for code representation","author":"Guo","year":"2022"},{"key":"ref21","article-title":"Longcoder: A long-range pre-trained language model for code completion","author":"Guo","year":"2023"},{"key":"ref22","article-title":"A simple framework for contrastive learning of visual representations","author":"Chen","year":"2020"},{"key":"ref23","article-title":"Multi-task learning using uncertainty to weigh losses for scene geometry and semantics","author":"Kendall","year":"2018"},{"key":"ref24","article-title":"Strategies for pre-training graph neural networks","author":"Hu","year":"2020"},{"key":"ref25","article-title":"Joern - the bug hunter\u2019s workbench"},{"key":"ref26","doi-asserted-by":"publisher","DOI":"10.1007\/s10207-020-00537-0"},{"key":"ref27","first-page":"2951","article-title":"Abusing hidden properties to attack the node.js ecosystem","volume-title":"30th USENIX Security Symposium, USENIX Security 2021, August 11-13, 2021","author":"Xiao"},{"key":"ref28","first-page":"5521","article-title":"Silent spring: Prototype pollution leads to remote code execution in node.js","volume-title":"32nd USENIX Security Symposium, USENIX Security 2023, Anaheim, CA, USA, August 9-11, 2023","author":"Shcherbakov"},{"key":"ref29","doi-asserted-by":"publisher","DOI":"10.1109\/sp54263.2024.00121"},{"key":"ref30","doi-asserted-by":"publisher","DOI":"10.1109\/sp.2017.68"},{"key":"ref31","doi-asserted-by":"publisher","DOI":"10.1145\/3656394"},{"key":"ref32","doi-asserted-by":"crossref","DOI":"10.14722\/ndss.2018.23071","article-title":"SYNODE: understanding and automatically preventing injection attacks on NODE.JS","volume-title":"25th Annual Network and Distributed System Security Symposium, NDSS 2018, San Diego, California, USA, February 18-21, 2018","author":"Staicu"},{"key":"ref33","first-page":"343","article-title":"A sense of time for javascript and node.js: First-class timeouts as a cure for event handler poisoning","volume-title":"27th USENIX Security Symposium, USENIX Security 2018, Baltimore, MD, USA, August 15-17, 2018","author":"Davis"},{"key":"ref34","doi-asserted-by":"publisher","DOI":"10.1145\/3180155.3180184"},{"key":"ref35","first-page":"995","article-title":"Small world with high risks: A study of security threats in the npm ecosystem","volume-title":"28th USENIX Security Symposium, USENIX Security 2019, Santa Clara, CA, USA, August 14-16, 2019","author":"Zimmermann"},{"key":"ref36","first-page":"121","article-title":"Mininode: Reducing the attack surface of node.js applications","volume-title":"23rd International Symposium on Research in Attacks, Intrusions and Defenses, RAID 2020, San Sebastian, Spain, October 14-15, 2020","author":"Koishybayev"},{"key":"ref37","doi-asserted-by":"publisher","DOI":"10.1109\/sp40001.2021.00032"},{"key":"ref38","doi-asserted-by":"publisher","DOI":"10.1109\/sp40001.2021.00077"},{"key":"ref39","doi-asserted-by":"publisher","DOI":"10.1145\/3460120.3484535"},{"key":"ref40","doi-asserted-by":"publisher","DOI":"10.1145\/3656424"},{"key":"ref41","doi-asserted-by":"crossref","DOI":"10.18653\/v1\/2021.naacl-main.211","article-title":"Unified pre-training for program understanding and generation","author":"Ahmad","year":"2021"},{"key":"ref42","doi-asserted-by":"crossref","DOI":"10.18653\/v1\/2021.emnlp-main.685","article-title":"Codet5: Identifier-aware unified pre-trained encoder-decoder models for code understanding and generation","author":"Wang","year":"2021"},{"key":"ref43","doi-asserted-by":"crossref","DOI":"10.18653\/v1\/2023.emnlp-main.68","article-title":"Codet5+: Open code large language models for code understanding and generation","author":"Wang","year":"2023"},{"key":"ref44","article-title":"Evaluating large language models trained on code","author":"Chen","year":"2021"},{"key":"ref45","doi-asserted-by":"publisher","DOI":"10.1126\/science.abq1158"},{"key":"ref46","article-title":"Starcoder: may the source be with you!","author":"Li","year":"2023"},{"key":"ref47","article-title":"Llmxcpg: Context-aware vulnerability detection through code property graph-guided large language models","author":"Lekssays","year":"2025"},{"key":"ref48","doi-asserted-by":"publisher","DOI":"10.14722\/ndss.2025.241636"},{"key":"ref49","doi-asserted-by":"publisher","DOI":"10.1145\/3729304"}],"event":{"name":"2026 56th Annual IEEE International Conference on Dependable Systems and Networks (DSN)","location":"Charlotte, NC, USA","start":{"date-parts":[[2026,6,22]]},"end":{"date-parts":[[2026,6,25]]}},"container-title":["2026 56th Annual IEEE International Conference on Dependable Systems and Networks (DSN)"],"original-title":[],"link":[{"URL":"http:\/\/xplorestaging.ieee.org\/ielx8\/11593123\/11593173\/11593324.pdf?arnumber=11593324","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2026,7,9]],"date-time":"2026-07-09T05:15:50Z","timestamp":1783574150000},"score":1,"resource":{"primary":{"URL":"https:\/\/ieeexplore.ieee.org\/document\/11593324\/"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2026,6,22]]},"references-count":49,"URL":"https:\/\/doi.org\/10.1109\/dsn69566.2026.00064","relation":{},"subject":[],"published":{"date-parts":[[2026,6,22]]}}}