{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,7,20]],"date-time":"2026-07-20T14:00:41Z","timestamp":1784556041995,"version":"3.55.0"},"reference-count":58,"publisher":"Institute of Electrical and Electronics Engineers (IEEE)","issue":"1","license":[{"start":{"date-parts":[[2026,1,1]],"date-time":"2026-01-01T00:00:00Z","timestamp":1767225600000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/ieeexplore.ieee.org\/Xplorehelp\/downloads\/license-information\/IEEE.html"},{"start":{"date-parts":[[2026,1,1]],"date-time":"2026-01-01T00:00:00Z","timestamp":1767225600000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-029"},{"start":{"date-parts":[[2026,1,1]],"date-time":"2026-01-01T00:00:00Z","timestamp":1767225600000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-037"}],"funder":[{"name":"National Key Research and Development Program of China","award":["2023YFB4503802"],"award-info":[{"award-number":["2023YFB4503802"]}]},{"name":"Natural Science Foundation of Shanghai","award":["25ZR1401175"],"award-info":[{"award-number":["25ZR1401175"]}]}],"content-domain":{"domain":[],"crossmark-restriction":false},"short-container-title":["IIEEE Trans. Software Eng."],"published-print":{"date-parts":[[2026,1]]},"DOI":"10.1109\/tse.2025.3633280","type":"journal-article","created":{"date-parts":[[2025,11,17]],"date-time":"2025-11-17T18:41:01Z","timestamp":1763404861000},"page":"171-186","source":"Crossref","is-referenced-by-count":1,"title":["Synthetic Malware at Scale: Malicious Code Generation With Code Transplanting"],"prefix":"10.1109","volume":"52","author":[{"ORCID":"https:\/\/orcid.org\/0009-0001-1488-3153","authenticated-orcid":false,"given":"Guangzhan","family":"Wang","sequence":"first","affiliation":[{"name":"School of Computer Science, Shanghai Jiao Tong University, Shanghai, China"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0001-6080-9969","authenticated-orcid":false,"given":"Diwei","family":"Chen","sequence":"additional","affiliation":[{"name":"School of Computer Science, Shanghai Jiao Tong University, Shanghai, China"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-0529-6408","authenticated-orcid":false,"given":"Xiaodong","family":"Gu","sequence":"additional","affiliation":[{"name":"School of Computer Science, Shanghai Jiao Tong University, Shanghai, China"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-4128-8966","authenticated-orcid":false,"given":"Yuting","family":"Chen","sequence":"additional","affiliation":[{"name":"School of Computer Science, Shanghai Jiao Tong University, Shanghai, China"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0001-8370-3956","authenticated-orcid":false,"given":"Beijun","family":"Shen","sequence":"additional","affiliation":[{"name":"School of Computer Science, Shanghai Jiao Tong University, Shanghai, China"}],"role":[{"vocabulary":"crossref","role":"author"}]}],"member":"263","reference":[{"key":"ref1","doi-asserted-by":"publisher","DOI":"10.14722\/ndss.2021.23055"},{"key":"ref2","first-page":"149","article-title":"SourceFinder: Finding malware source-code from publicly available repositories in GitHub","volume-title":"Proc. 23rd Int. Symp. Res. Attacks, Intrusions Defenses (RAID)","author":"Rokon","year":"2020"},{"key":"ref3","doi-asserted-by":"publisher","DOI":"10.1145\/3510003.3510104"},{"key":"ref4","doi-asserted-by":"publisher","DOI":"10.1145\/3538969.3544415"},{"key":"ref5","doi-asserted-by":"publisher","DOI":"10.1007\/s44196-023-00400-9"},{"key":"ref6","article-title":"What is a malware file signature (and how does it work)?"},{"key":"ref7","volume-title":"A Survey of Malware Detection Techniques","author":"Idika","year":"2007"},{"key":"ref8","doi-asserted-by":"publisher","DOI":"10.1145\/3359789.3359813"},{"key":"ref9","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-319-93411-2_14"},{"key":"ref10","article-title":"MalBERT: Using transformers for cybersecurity and malicious software detection","author":"Rahali","year":"2021"},{"key":"ref11","doi-asserted-by":"publisher","DOI":"10.1145\/3627106.3627138"},{"key":"ref12","article-title":"DONAPI: Malicious npm packages detector using behavior sequence knowledge mapping","author":"Huang","year":"2024"},{"key":"ref13","doi-asserted-by":"publisher","DOI":"10.1016\/j.engappai.2023.107801"},{"key":"ref14","doi-asserted-by":"publisher","DOI":"10.3390\/bdcc7020060"},{"key":"ref15","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-030-52683-2_2"},{"key":"ref16","first-page":"1163","article-title":"Adversarial training for {Raw-Binary} malware classifiers","volume-title":"Proc. 32nd USENIX Secur. Symp. (USENIX Security)","author":"Lucas","year":"2023"},{"key":"ref17","doi-asserted-by":"publisher","DOI":"10.1145\/3488932.3497768"},{"key":"ref18","doi-asserted-by":"publisher","DOI":"10.1145\/3597503.3639141"},{"key":"ref19","doi-asserted-by":"publisher","DOI":"10.1145\/3678890.3678912"},{"key":"ref20","doi-asserted-by":"publisher","DOI":"10.18653\/v1\/D18-1549"},{"key":"ref21","doi-asserted-by":"publisher","DOI":"10.1145\/2771783.2771796"},{"key":"ref22","doi-asserted-by":"publisher","DOI":"10.1109\/ICSE.2017.67"},{"key":"ref23","article-title":"JavaScript malware collection","author":"Petrak"},{"key":"ref24","article-title":"Malicious JavaScript dataset"},{"key":"ref25","doi-asserted-by":"publisher","DOI":"10.1145\/3551349.3556926"},{"key":"ref26","doi-asserted-by":"publisher","DOI":"10.1016\/j.infsof.2021.106552"},{"key":"ref27","doi-asserted-by":"publisher","DOI":"10.1109\/SANER53432.2022.00070"},{"key":"ref28","article-title":"Evaluating large language models trained on code","author":"Chen","year":"2021"},{"key":"ref29","article-title":"Code Llama: Open foundation models for code","author":"Rozi\u00e8re","year":"2023"},{"key":"ref30","article-title":"DeepSeek-Coder: When the large language model meets programming \u2013 The rise of code intelligence","author":"Guo","year":"2024"},{"key":"ref31","doi-asserted-by":"publisher","DOI":"10.18653\/v1\/N18-1202"},{"key":"ref32","article-title":"Reinforcement learning for generative AI: A survey","author":"Cao","year":"2023"},{"key":"ref33","doi-asserted-by":"publisher","DOI":"10.18653\/v1\/2021.emnlp-main.685"},{"key":"ref34","doi-asserted-by":"publisher","DOI":"10.1145\/3442188.3445922"},{"key":"ref35","doi-asserted-by":"publisher","DOI":"10.1038\/s41586-024-07930-y"},{"key":"ref36","doi-asserted-by":"publisher","DOI":"10.1145\/3520312.3534862"},{"key":"ref37","article-title":"Qwen2. 5-coder technical report","author":"Hui","year":"2024"},{"key":"ref38","doi-asserted-by":"publisher","DOI":"10.18653\/v1\/2023.emnlp-main.68"},{"key":"ref39","article-title":"CodeSearchNet challenge: Evaluating the state of semantic code search","author":"Husain","year":"2019"},{"key":"ref40","doi-asserted-by":"publisher","DOI":"10.18653\/v1\/n16-1014"},{"key":"ref41","doi-asserted-by":"publisher","DOI":"10.1121\/1.2016299"},{"key":"ref42","doi-asserted-by":"publisher","DOI":"10.1145\/2902362"},{"key":"ref43","doi-asserted-by":"publisher","DOI":"10.18653\/v1\/2020.findings-emnlp.139"},{"key":"ref44","doi-asserted-by":"publisher","DOI":"10.18653\/v1\/N19-1112"},{"key":"ref45","doi-asserted-by":"publisher","DOI":"10.1145\/3597926.3598146"},{"key":"ref46","article-title":"From text to MITRE techniques: Exploring the malicious use of large language models for generating cyber attack payloads","author":"Charan","year":"2023"},{"key":"ref47","doi-asserted-by":"publisher","DOI":"10.14722\/ndss.2016.23115"},{"key":"ref48","article-title":"Malicious source code detection using transformer","author":"Tsfaty","year":"2022"},{"key":"ref49","doi-asserted-by":"publisher","DOI":"10.1109\/SP40000.2020.00073"},{"key":"ref50","doi-asserted-by":"publisher","DOI":"10.1109\/ICSE48619.2023.00211"},{"key":"ref51","first-page":"3699","article-title":"FIXREVERTER: A realistic bug injection methodology for benchmarking fuzz testing","volume-title":"Proc. 31st USENIX Secur. Symp. (USENIX Security)","author":"Zhang","year":"2022"},{"key":"ref52","doi-asserted-by":"publisher","DOI":"10.1145\/3576915.3623175"},{"key":"ref53","doi-asserted-by":"publisher","DOI":"10.1109\/TSE.2024.3470333"},{"key":"ref54","doi-asserted-by":"publisher","DOI":"10.1145\/3524842.3528452"},{"key":"ref55","doi-asserted-by":"publisher","DOI":"10.1145\/3611643.3616358"},{"key":"ref56","article-title":"Beyond the safeguards: Exploring the security risks of ChatGPT","author":"Derner","year":"2023"},{"key":"ref57","article-title":"Safety assessment of Chinese large language models","author":"Sun","year":"2023"},{"key":"ref58","article-title":"Bard"}],"container-title":["IEEE Transactions on Software Engineering"],"original-title":[],"link":[{"URL":"http:\/\/xplorestaging.ieee.org\/ielx8\/32\/11346545\/11250608.pdf?arnumber=11250608","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2026,1,13]],"date-time":"2026-01-13T09:19:44Z","timestamp":1768295984000},"score":1,"resource":{"primary":{"URL":"https:\/\/ieeexplore.ieee.org\/document\/11250608\/"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2026,1]]},"references-count":58,"journal-issue":{"issue":"1"},"URL":"https:\/\/doi.org\/10.1109\/tse.2025.3633280","relation":{},"ISSN":["0098-5589","1939-3520","2326-3881"],"issn-type":[{"value":"0098-5589","type":"print"},{"value":"1939-3520","type":"electronic"},{"value":"2326-3881","type":"electronic"}],"subject":[],"published":{"date-parts":[[2026,1]]}}}