{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,6,27]],"date-time":"2026-06-27T19:12:26Z","timestamp":1782587546777,"version":"3.54.5"},"reference-count":66,"publisher":"Institute of Electrical and Electronics Engineers (IEEE)","issue":"4","license":[{"start":{"date-parts":[[2025,12,1]],"date-time":"2025-12-01T00:00:00Z","timestamp":1764547200000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/ieeexplore.ieee.org\/Xplorehelp\/downloads\/license-information\/IEEE.html"},{"start":{"date-parts":[[2025,12,1]],"date-time":"2025-12-01T00:00:00Z","timestamp":1764547200000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-029"},{"start":{"date-parts":[[2025,12,1]],"date-time":"2025-12-01T00:00:00Z","timestamp":1764547200000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-037"}],"funder":[{"name":"ARC’s DECRA Fellowship","award":["DE200100941"],"award-info":[{"award-number":["DE200100941"]}]}],"content-domain":{"domain":[],"crossmark-restriction":false},"short-container-title":["IEEE Trans. Rel."],"published-print":{"date-parts":[[2025,12]]},"DOI":"10.1109\/tr.2025.3605871","type":"journal-article","created":{"date-parts":[[2025,10,1]],"date-time":"2025-10-01T17:38:48Z","timestamp":1759340328000},"page":"4930-4943","source":"Crossref","is-referenced-by-count":2,"title":["DeepVulMatch: Learning and Matching Latent Vulnerability Representations for Dual-Granularity Vulnerability Detection"],"prefix":"10.1109","volume":"74","author":[{"ORCID":"https:\/\/orcid.org\/0000-0001-7211-3491","authenticated-orcid":false,"given":"Michael","family":"Fu","sequence":"first","affiliation":[{"name":"School of Computing and Information Systems, The University of Melbourne, Melbourne, VIC, Australia"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0003-0414-9067","authenticated-orcid":false,"given":"Trung","family":"Le","sequence":"additional","affiliation":[{"name":"Faculty of Information Technology, Monash University, Clayton, VIC, Australia"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-5838-3409","authenticated-orcid":false,"given":"Van","family":"Nguyen","sequence":"additional","affiliation":[{"name":"Faculty of Information Technology, Monash University, Clayton, VIC, Australia"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-5516-9984","authenticated-orcid":false,"given":"Chakkrit","family":"Tantithamthavorn","sequence":"additional","affiliation":[{"name":"Faculty of Information Technology, Monash University, Clayton, VIC, Australia"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-9977-8247","authenticated-orcid":false,"given":"Dinh","family":"Phung","sequence":"additional","affiliation":[{"name":"Faculty of Information Technology, Monash University, Clayton, VIC, Australia"}],"role":[{"vocabulary":"crossref","role":"author"}]}],"member":"263","reference":[{"key":"ref1","article-title":"Example c vulnerable function - unpremulskimagetopremul","volume-title":"Kyle","year":"2016"},{"key":"ref2","article-title":"Example C vulnerable function - Isvalidsize","volume-title":"GoPro","year":"2019"},{"key":"ref3","article-title":"The national vulnerability database (NVD): Overview","author":"Booth","year":"2013"},{"key":"ref4","article-title":"Apache struts vulnerability (CVE-2021-31805)","year":"2022"},{"key":"ref5","doi-asserted-by":"publisher","DOI":"10.1145\/3475716.3475781"},{"key":"ref6","doi-asserted-by":"publisher","DOI":"10.1145\/3524842.3527949"},{"key":"ref7","doi-asserted-by":"publisher","DOI":"10.1145\/3524842.3528452"},{"key":"ref8","doi-asserted-by":"publisher","DOI":"10.1109\/SANER53432.2022.00114"},{"key":"ref9","article-title":"2023 CWE top 25 most dangerous software weaknesses","volume-title":"CWE","year":"2023"},{"key":"ref10","first-page":"6309","article-title":"Neural discrete representation learning","volume-title":"Proc. Adv. Neural Inf. Process. Syst.","author":"Van Den Oord","year":"2017"},{"key":"ref11","first-page":"2681","article-title":"Interpolating between optimal transport and MMD using Sinkhorn divergences","volume-title":"Proc. 22nd Int. Conf. Artif. Intell. Statist.","author":"Feydy","year":"2019"},{"key":"ref12","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-540-71050-9"},{"key":"ref13","doi-asserted-by":"publisher","DOI":"10.18653\/v1\/D19-1410"},{"key":"ref14","article-title":"Checkmarx static application security testing","year":"2023"},{"key":"ref15","article-title":"Flawfinder","author":"Wheeler","year":"2023"},{"key":"ref16","doi-asserted-by":"publisher","DOI":"10.1145\/3379597.3387501"},{"key":"ref17","doi-asserted-by":"publisher","DOI":"10.1109\/ICSE-SEIP52600.2021.00020"},{"key":"ref18","doi-asserted-by":"publisher","DOI":"10.1145\/3468264.3468597"},{"key":"ref19","doi-asserted-by":"publisher","DOI":"10.1007\/s10664-023-10405-9"},{"key":"ref20","first-page":"666","article-title":"Mmoire sur la thorie des dblais et des remblais","author":"Monge","year":"1781","journal-title":"Mem. Math. Phys. Acad. Royale Sci."},{"key":"ref21","article-title":"Introduction to optimal transport","author":"Thorpe","year":"2019","journal-title":"Dept. Appl. Math. Theor. Physics"},{"key":"ref22","first-page":"1955","article-title":"Co-clustering through optimal transport","volume-title":"Proc. Int. Conf. Mach. Learn.","author":"Laclau","year":"2017"},{"key":"ref23","doi-asserted-by":"publisher","DOI":"10.1007\/s11222-018-9800-z"},{"key":"ref24","doi-asserted-by":"publisher","DOI":"10.1609\/aaai.v38i15.29563"},{"key":"ref25","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR52729.2023.01915"},{"key":"ref26","doi-asserted-by":"publisher","DOI":"10.1109\/ACCESS.2019.2934731"},{"key":"ref27","first-page":"1","article-title":"Incremental few-shot learning via vector quantization in deep embedded space","volume-title":"Proc. Int. Conf. Learn. Representations","author":"Chen","year":"2021"},{"key":"ref28","doi-asserted-by":"publisher","DOI":"10.1109\/ICMLA.2018.00120"},{"key":"ref29","doi-asserted-by":"crossref","DOI":"10.14722\/ndss.2018.23158","article-title":"VulDeePecker: A deep learning-based system for vulnerability detection","volume-title":"25th Annu. Netw. Distrib. Syst. Secur. Symp., NDSS","author":"Li","year":"2018"},{"key":"ref30","doi-asserted-by":"publisher","DOI":"10.1109\/IJCNN.2019.8851923"},{"key":"ref31","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-030-47426-3_54"},{"key":"ref32","doi-asserted-by":"publisher","DOI":"10.1016\/j.infsof.2021.106809"},{"key":"ref33","first-page":"10197","article-title":"Devign: Effective vulnerability identification by learning comprehensive program semantics via graph neural networks","volume-title":"Proc. Adv. Neural Inf. Process. Syst.","author":"Zhou","year":"2019"},{"key":"ref34","doi-asserted-by":"publisher","DOI":"10.1109\/TSE.2021.3087402"},{"key":"ref35","doi-asserted-by":"publisher","DOI":"10.1145\/3510454.3516865"},{"key":"ref36","doi-asserted-by":"publisher","DOI":"10.18653\/v1\/2020.findings-emnlp.139"},{"key":"ref37","first-page":"1","article-title":"GraphCodeBERT: Pre-training code representations with data flow","volume-title":"Proc. Int. Conf. Learn. Representations","author":"Guo","year":"2021"},{"key":"ref38","doi-asserted-by":"publisher","DOI":"10.1109\/TDSC.2021.3051525"},{"key":"ref39","article-title":"Rough auditing tool for security","volume-title":"RATS","year":"2023"},{"key":"ref40","doi-asserted-by":"publisher","DOI":"10.1109\/IJCNN52387.2021.9533907"},{"key":"ref41","doi-asserted-by":"publisher","DOI":"10.1109\/TR.2024.3521381"},{"key":"ref42","doi-asserted-by":"publisher","DOI":"10.1109\/TR.2025.3551356"},{"key":"ref43","doi-asserted-by":"publisher","DOI":"10.1109\/TR.2024.3480010"},{"key":"ref44","doi-asserted-by":"publisher","DOI":"10.1145\/3597503.3623345"},{"key":"ref45","doi-asserted-by":"publisher","DOI":"10.1109\/APSEC60848.2023.00085"},{"key":"ref46","doi-asserted-by":"publisher","DOI":"10.18653\/v1\/2022.acl-long.499"},{"key":"ref47","article-title":"Large language models for multilingual vulnerability detection: How far are we?","author":"Shu","year":"2025"},{"key":"ref48","article-title":"ChatGPT","volume-title":"OpenAI","year":"2022"},{"key":"ref49","article-title":"Bard","volume-title":"Google","year":"2023"},{"key":"ref50","article-title":"Evaluating large language models trained on code","author":"Chen","year":"2021"},{"key":"ref51","doi-asserted-by":"publisher","DOI":"10.18653\/v1\/P16-1162"},{"key":"ref52","first-page":"2292","article-title":"Sinkhorn distances: Lightspeed computation of optimal transport","volume-title":"Proc. Adv. Neural Inf. Process. Syst.","author":"Cuturi","year":"2013"},{"key":"ref53","doi-asserted-by":"publisher","DOI":"10.24963\/ijcai.2021\/394"},{"key":"ref54","first-page":"1501","article-title":"Multilevel clustering via Wasserstein means","volume-title":"Proc. Int. Conf. Mach. Learn.","author":"Ho","year":"2017"},{"key":"ref55","doi-asserted-by":"publisher","DOI":"10.18653\/v1\/2023.emnlp-main.68"},{"key":"ref56","doi-asserted-by":"publisher","DOI":"10.18653\/v1\/2021.emnlp-main.685"},{"key":"ref57","article-title":"CodeXGLUE: A machine learning benchmark dataset for code understanding and generation","author":"Lu","year":"2021"},{"key":"ref58","doi-asserted-by":"publisher","DOI":"10.1109\/SP.2014.44"},{"key":"ref59","article-title":"Convolutional neural network for sentence classification","volume-title":"Masters thesis","author":"Chen","year":"2015"},{"key":"ref60","doi-asserted-by":"publisher","DOI":"10.1145\/3607199.3607242"},{"key":"ref61","first-page":"1","article-title":"Decoupled weight decay regularization","volume-title":"Proc. Int. Conf. Learn. Representations","author":"Loshchilov","year":"2018"},{"key":"ref62","doi-asserted-by":"publisher","DOI":"10.1145\/304181.304187"},{"key":"ref63","article-title":"Introducing SWE-bench verified","volume-title":"OpenAI","year":"2024"},{"key":"ref64","article-title":"Introducing GPT-4.1 in the API","volume-title":"OpenAI","year":"2025"},{"key":"ref65","first-page":"24824","article-title":"Chain-of-thought prompting elicits reasoning in large language models","volume-title":"Proc. Adv. Neural Inf. Process. Syst.","author":"Wei","year":"2022"},{"key":"ref66","doi-asserted-by":"publisher","DOI":"10.1109\/ICSE48619.2023.00022"}],"container-title":["IEEE Transactions on Reliability"],"original-title":[],"link":[{"URL":"http:\/\/xplorestaging.ieee.org\/ielx8\/24\/11273031\/11185217.pdf?arnumber=11185217","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2025,12,18]],"date-time":"2025-12-18T18:33:13Z","timestamp":1766082793000},"score":1,"resource":{"primary":{"URL":"https:\/\/ieeexplore.ieee.org\/document\/11185217\/"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2025,12]]},"references-count":66,"journal-issue":{"issue":"4"},"URL":"https:\/\/doi.org\/10.1109\/tr.2025.3605871","relation":{},"ISSN":["0018-9529","1558-1721"],"issn-type":[{"value":"0018-9529","type":"print"},{"value":"1558-1721","type":"electronic"}],"subject":[],"published":{"date-parts":[[2025,12]]}}}