{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,9,30]],"date-time":"2026-09-30T20:44:08Z","timestamp":1790801048899,"version":"4.1.0"},"reference-count":59,"publisher":"Institute of Electrical and Electronics Engineers (IEEE)","issue":"1","license":[{"start":{"date-parts":[[2026,1,1]],"date-time":"2026-01-01T00:00:00Z","timestamp":1767225600000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/ieeexplore.ieee.org\/Xplorehelp\/downloads\/license-information\/IEEE.html"},{"start":{"date-parts":[[2026,1,1]],"date-time":"2026-01-01T00:00:00Z","timestamp":1767225600000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-029"},{"start":{"date-parts":[[2026,1,1]],"date-time":"2026-01-01T00:00:00Z","timestamp":1767225600000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-037"}],"funder":[{"DOI":"10.13039\/501100001809","name":"National Natural Science Foundation of China","doi-asserted-by":"publisher","award":["62302125"],"award-info":[{"award-number":["62302125"]}],"id":[{"id":"10.13039\/501100001809","id-type":"DOI","asserted-by":"publisher"}]},{"DOI":"10.13039\/501100001809","name":"National Natural Science Foundation of China","doi-asserted-by":"publisher","award":["62272132"],"award-info":[{"award-number":["62272132"]}],"id":[{"id":"10.13039\/501100001809","id-type":"DOI","asserted-by":"publisher"}]},{"name":"Heilongjiang Postdoctoral Fund","award":["LBH-Z23019"],"award-info":[{"award-number":["LBH-Z23019"]}]}],"content-domain":{"domain":[],"crossmark-restriction":false},"short-container-title":["IIEEE Trans. Software Eng."],"published-print":{"date-parts":[[2026,1]]},"DOI":"10.1109\/tse.2025.3638998","type":"journal-article","created":{"date-parts":[[2025,12,2]],"date-time":"2025-12-02T18:48:09Z","timestamp":1764701289000},"page":"246-265","source":"Crossref","is-referenced-by-count":1,"title":["Shield Broken: Black-Box Adversarial Attacks on LLM-Based Vulnerability Detectors"],"prefix":"10.1109","volume":"52","author":[{"ORCID":"https:\/\/orcid.org\/0000-0002-3052-1320","authenticated-orcid":false,"given":"Yuan","family":"Jiang","sequence":"first","affiliation":[{"name":"School of Computer Science and Technology, Harbin Institute of Technology, Harbin, China"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0009-0000-1422-6519","authenticated-orcid":false,"given":"Shan","family":"Huang","sequence":"additional","affiliation":[{"name":"School of Computer Science and Technology, Harbin Institute of Technology, Harbin, China"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-6919-2149","authenticated-orcid":false,"given":"Christoph","family":"Treude","sequence":"additional","affiliation":[{"name":"School of Computing and Information Systems, Singapore Management University, Singapore"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-8584-0716","authenticated-orcid":false,"given":"Xiaohong","family":"Su","sequence":"additional","affiliation":[{"name":"School of Computer Science and Technology, Harbin Institute of Technology, Harbin, China"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0003-2958-8066","authenticated-orcid":false,"given":"Tiantian","family":"Wang","sequence":"additional","affiliation":[{"name":"School of Computer Science and Technology, Harbin Institute of Technology, Harbin, China"}],"role":[{"vocabulary":"crossref","role":"author"}]}],"member":"263","reference":[{"key":"ref1","doi-asserted-by":"crossref","DOI":"10.1016\/j.jss.2022.111283","article-title":"Just-in-time software vulnerability detection: Are we there yet?","volume":"188","author":"Lomio","year":"2022","journal-title":"J. Syst. Softw."},{"key":"ref2","article-title":"Guide for conducting risk assessments","year":"2012"},{"key":"ref3","doi-asserted-by":"publisher","DOI":"10.1109\/TSE.2025.3603400"},{"key":"ref4","doi-asserted-by":"publisher","DOI":"10.1109\/TSE.2024.3493245"},{"key":"ref5","doi-asserted-by":"publisher","DOI":"10.1109\/TSE.2024.3470333"},{"key":"ref6","article-title":"From naptime to big sleep: Using large language models to catch vulnerabilities in real-world code."},{"key":"ref7","first-page":"7357","article-title":"{EaTVul}:{ChatGPT-based} evasion attack against software vulnerability detection","volume-title":"Proc. 33rd USENIX Secur. Symp. (USENIX Security)","author":"Liu","year":"2024"},{"key":"ref8","doi-asserted-by":"publisher","DOI":"10.1609\/aaai.v34i04.5767"},{"key":"ref9","article-title":"Explaining and harnessing adversarial examples","author":"Goodfellow","year":"2014"},{"key":"ref10","doi-asserted-by":"publisher","DOI":"10.1109\/SP.2019.00023"},{"key":"ref11","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR.2015.7298640"},{"key":"ref12","doi-asserted-by":"publisher","DOI":"10.24963\/ijcai.2018\/543"},{"key":"ref13","doi-asserted-by":"publisher","DOI":"10.1109\/ISSRE52982.2021.00054"},{"key":"ref14","doi-asserted-by":"publisher","DOI":"10.1109\/TIFS.2024.3402153"},{"key":"ref15","doi-asserted-by":"publisher","DOI":"10.1007\/s10664-023-10346-3"},{"key":"ref16","doi-asserted-by":"publisher","DOI":"10.1145\/3524842.3528452"},{"key":"ref17","first-page":"1964","article-title":"Label-only membership inference attacks","volume-title":"Proc. Int. Conf. Mach. Learn","author":"Choquette-Choo","year":"2021"},{"key":"ref18","article-title":"A survey on adversarial machine learning for code data: Realistic threats, countermeasures, and interpretations","author":"Yang","year":"2024"},{"key":"ref19","doi-asserted-by":"publisher","DOI":"10.18653\/v1\/2023.acl-long.430"},{"key":"ref20","doi-asserted-by":"publisher","DOI":"10.1609\/aaai.v34i01.5469"},{"key":"ref21","doi-asserted-by":"publisher","DOI":"10.1145\/3510003.3510146"},{"key":"ref22","doi-asserted-by":"publisher","DOI":"10.1145\/3428230"},{"key":"ref23","doi-asserted-by":"publisher","DOI":"10.1109\/ASE56229.2023.00149"},{"key":"ref24","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR52688.2022.01488"},{"key":"ref25","doi-asserted-by":"publisher","DOI":"10.1016\/j.cose.2021.102417"},{"key":"ref26","doi-asserted-by":"publisher","DOI":"10.1145\/2991079.2991102"},{"key":"ref27","doi-asserted-by":"publisher","DOI":"10.14722\/ndss.2019.23138"},{"key":"ref28","doi-asserted-by":"publisher","DOI":"10.1109\/SPW.2018.00016"},{"key":"ref29","doi-asserted-by":"publisher","DOI":"10.18653\/v1\/p16-1162"},{"key":"ref30","article-title":"Code Llama: Open foundation models for code","author":"Roziere","year":"2023"},{"key":"ref31","article-title":"DeepSeek-Coder: When the large language model meets programming\u2013the rise of code intelligence","author":"Guo","year":"2024"},{"key":"ref32","doi-asserted-by":"publisher","DOI":"10.1109\/APSEC60848.2023.00085"},{"key":"ref33","doi-asserted-by":"publisher","DOI":"10.1145\/3639476.3639762"},{"key":"ref34","doi-asserted-by":"publisher","DOI":"10.1109\/SaTML54575.2023.00031"},{"key":"ref35","article-title":"Nvd."},{"key":"ref36","doi-asserted-by":"publisher","DOI":"10.1109\/TSE.2014.2340398"},{"key":"ref37","article-title":"Semantic robustness of models of source code","author":"Ramakrishnan","year":"2020"},{"key":"ref38","doi-asserted-by":"publisher","DOI":"10.1109\/TDSC.2021.3051525"},{"key":"ref39","doi-asserted-by":"publisher","DOI":"10.1145\/3511887"},{"key":"ref40","article-title":"Effective code membership inference for code completion models via adversarial prompts","author":"Jiang","year":"2025"},{"key":"ref41","doi-asserted-by":"publisher","DOI":"10.1145\/3379597.3387501"},{"key":"ref42","doi-asserted-by":"publisher","DOI":"10.1609\/aaai.v35i15.17595"},{"key":"ref43","doi-asserted-by":"publisher","DOI":"10.18653\/v1\/P19-1103"},{"key":"ref44","doi-asserted-by":"publisher","DOI":"10.1609\/aaai.v34i05.6311"},{"key":"ref45","article-title":"2024 CWE top 25 most dangerous software weaknesses."},{"key":"ref46","doi-asserted-by":"publisher","DOI":"10.5555\/2188385.2188395"},{"key":"ref47","doi-asserted-by":"publisher","DOI":"10.1017\/CBO9780511921803"},{"key":"ref48","doi-asserted-by":"publisher","DOI":"10.1109\/MSR66628.2025.00034"},{"key":"ref49","article-title":"Exploring and lifting the robustness of LLM-powered automated program repair with metamorphic testing","author":"Xue","year":"2024"},{"key":"ref50","article-title":"Generating adversarial computer programs using optimized obfuscations","author":"Srikant","year":"2021"},{"key":"ref51","first-page":"479","article-title":"Misleading authorship attribution of source code using adversarial learning","volume-title":"Proc. 28th USENIX Secur. Symp. (USENIX Security)","author":"Quiring","year":"2019"},{"key":"ref52","doi-asserted-by":"publisher","DOI":"10.1109\/TIFS.2021.3080507"},{"key":"ref53","doi-asserted-by":"publisher","DOI":"10.13140\/RG.2.2.18893.74727"},{"key":"ref54","doi-asserted-by":"publisher","DOI":"10.1109\/ICST49551.2021.00016"},{"key":"ref55","doi-asserted-by":"publisher","DOI":"10.1145\/3691620.3695297"},{"key":"ref56","doi-asserted-by":"publisher","DOI":"10.18653\/v1\/2023.findings-emnlp.991"},{"key":"ref57","article-title":"Adversarial attacks on code models with discriminative graph patterns","author":"Nguyen","year":"2023"},{"key":"ref58","doi-asserted-by":"publisher","DOI":"10.18653\/v1\/2022.emnlp-main.369"},{"key":"ref59","doi-asserted-by":"publisher","DOI":"10.1109\/QRS54544.2021.00090"}],"container-title":["IEEE Transactions on Software Engineering"],"original-title":[],"link":[{"URL":"http:\/\/xplorestaging.ieee.org\/ielx8\/32\/11346545\/11271845.pdf?arnumber=11271845","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2026,1,13]],"date-time":"2026-01-13T20:58:40Z","timestamp":1768337920000},"score":1,"resource":{"primary":{"URL":"https:\/\/ieeexplore.ieee.org\/document\/11271845\/"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2026,1]]},"references-count":59,"journal-issue":{"issue":"1"},"URL":"https:\/\/doi.org\/10.1109\/tse.2025.3638998","relation":{},"ISSN":["0098-5589","1939-3520","2326-3881"],"issn-type":[{"value":"0098-5589","type":"print"},{"value":"1939-3520","type":"electronic"},{"value":"2326-3881","type":"electronic"}],"subject":[],"published":{"date-parts":[[2026,1]]}}}