{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2025,5,24]],"date-time":"2025-05-24T04:01:34Z","timestamp":1748059294778,"version":"3.41.0"},"reference-count":43,"publisher":"World Scientific Pub Co Pte Ltd","issue":"05","funder":[{"DOI":"10.13039\/501100001809","name":"National Natural Science Foundation of China","doi-asserted-by":"crossref","award":["U22B2028","2372410","62276234","62002324","U1936215"],"award-info":[{"award-number":["U22B2028","2372410","62276234","62002324","U1936215"]}],"id":[{"id":"10.13039\/501100001809","id-type":"DOI","asserted-by":"crossref"}]},{"name":"Zhejiang Provincial Natural Science Foundation of China","award":["ZCLZ24F0202","LQ21F020016","LZ23F020011"],"award-info":[{"award-number":["ZCLZ24F0202","LQ21F020016","LZ23F020011"]}]},{"name":"Key R&D Projects in Zhejiang Province","award":["2021C01117"],"award-info":[{"award-number":["2021C01117"]}]},{"name":"Major Program of Natural Science Foundation of Zhejiang Province","award":["LD22F020002"],"award-info":[{"award-number":["LD22F020002"]}]},{"name":"The Fundamental Research Funds for the Provincial Universities of Zhejiang","award":["RF-A2023009"],"award-info":[{"award-number":["RF-A2023009"]}]}],"content-domain":{"domain":[],"crossmark-restriction":false},"short-container-title":["Int. J. Soft. Eng. Knowl. Eng."],"published-print":{"date-parts":[[2025,5]]},"abstract":"<jats:p> Open source software has evolved into a fundamental element of the contemporary information sector; however, security threats within its supply chain are persistently rising. Within the collaborative development framework of open source, the introduction of malicious code can lead to significant security vulnerabilities. Conventional methods for detecting these vulnerabilities, which rely on machine learning, face challenges such as a lack of sufficient datasets, inadequate deep semantic understanding, and limitations to single-vulnerability detection. To address these challenges, we introduce a novel approach named VulnTrace, which analyzes historical records of submissions in open source projects to construct a high-quality dataset of vulnerabilities with accurate labels. VulnTrace employs Word2Vec alongside Abstract Syntax Tree (AST) technologies to capture both the semantic and structural details of code segments and utilizes a Transformer model for precise vulnerability identification, thereby enhancing accuracy and interpretability in detection. Experimental results indicate that VulnTrace achieves approximately 93% accuracy, 95% precision, 83% recall and an F1 score of 88% in vulnerability detection tasks, significantly reducing false positives and demonstrating remarkable robustness. <\/jats:p>","DOI":"10.1142\/s0218194025500196","type":"journal-article","created":{"date-parts":[[2025,3,22]],"date-time":"2025-03-22T04:33:25Z","timestamp":1742618005000},"page":"679-706","source":"Crossref","is-referenced-by-count":0,"title":["VulnTrace: Tracking and Detecting Code Vulnerabilities with Historical Commits and Semantic Embeddings"],"prefix":"10.1142","volume":"35","author":[{"given":"Qijie","family":"Song","sequence":"first","affiliation":[{"name":"College of Computer Science and Technology, Zhejiang University of Technology, 310014, China"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Jiaobo","family":"Jin","sequence":"additional","affiliation":[{"name":"College of Computer Science and Technology, Zhejiang University of Technology, 310014, China"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-8657-662X","authenticated-orcid":false,"given":"Tiantian","family":"Zhu","sequence":"additional","affiliation":[{"name":"College of Computer Science and Technology, Zhejiang University of Technology, 310014, China"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Tieming","family":"Chen","sequence":"additional","affiliation":[{"name":"College of Computer Science and Technology, Zhejiang University of Technology, 310014, China"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Mingqi","family":"Lv","sequence":"additional","affiliation":[{"name":"College of Computer Science and Technology, Zhejiang University of Technology, 310014, China"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Licheng","family":"Pan","sequence":"additional","affiliation":[{"name":"College of Computer Science and Technology, Zhejiang University of Technology, 310014, China"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Jian-Ping","family":"Mei","sequence":"additional","affiliation":[{"name":"College of Computer Science and Technology, Zhejiang University of Technology, 310014, China"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Xiang","family":"Pan","sequence":"additional","affiliation":[{"name":"College of Computer Science and Technology, Zhejiang University of Technology, 310014, China"}],"role":[{"role":"author","vocabulary":"crossref"}]}],"member":"219","published-online":{"date-parts":[[2025,5,22]]},"reference":[{"key":"S0218194025500196BIB001","doi-asserted-by":"publisher","DOI":"10.1016\/j.future.2024.107504"},{"key":"S0218194025500196BIB002","doi-asserted-by":"publisher","DOI":"10.1016\/j.cose.2024.104098"},{"key":"S0218194025500196BIB003","doi-asserted-by":"publisher","DOI":"10.1016\/j.infsof.2024.107544"},{"key":"S0218194025500196BIB004","doi-asserted-by":"publisher","DOI":"10.1007\/s10515-024-00440-1"},{"key":"S0218194025500196BIB005","doi-asserted-by":"publisher","DOI":"10.1016\/j.cose.2024.103994"},{"key":"S0218194025500196BIB006","doi-asserted-by":"publisher","DOI":"10.1007\/s10207-024-00848-6"},{"key":"S0218194025500196BIB007","doi-asserted-by":"publisher","DOI":"10.1016\/j.engappai.2024.108296"},{"key":"S0218194025500196BIB008","doi-asserted-by":"publisher","DOI":"10.1145\/3652032.3657564"},{"key":"S0218194025500196BIB009","doi-asserted-by":"publisher","DOI":"10.3390\/s24051351"},{"key":"S0218194025500196BIB010","doi-asserted-by":"publisher","DOI":"10.1109\/ACCESS.2024.3467180"},{"key":"S0218194025500196BIB011","first-page":"1","volume-title":"2024 Int. Conf. Multimedia Analysis and Pattern Recognition","author":"Cuong N. C.","year":"2024"},{"key":"S0218194025500196BIB012","doi-asserted-by":"publisher","DOI":"10.1145\/3643651.3659892"},{"key":"S0218194025500196BIB014","doi-asserted-by":"publisher","DOI":"10.1109\/MSR.2019.00064"},{"key":"S0218194025500196BIB015","first-page":"209","volume-title":"8th USENIX Symp. Operating Systems Design and Implementation","author":"Cadar C.","year":"2008"},{"key":"S0218194025500196BIB016","doi-asserted-by":"publisher","DOI":"10.1109\/ASE.2019.00133"},{"key":"S0218194025500196BIB017","first-page":"1361","volume-title":"30th USENIX Security Symposium (USENIX Security 21)","author":"So S.","year":"2021"},{"key":"S0218194025500196BIB018","doi-asserted-by":"publisher","DOI":"10.1145\/2810103.2813604"},{"key":"S0218194025500196BIB019","doi-asserted-by":"publisher","DOI":"10.1109\/ESEM.2013.19"},{"key":"S0218194025500196BIB020","doi-asserted-by":"publisher","DOI":"10.1145\/2746194.2746198"},{"key":"S0218194025500196BIB021","doi-asserted-by":"publisher","DOI":"10.1109\/TSE.2011.103"},{"key":"S0218194025500196BIB022","doi-asserted-by":"publisher","DOI":"10.1145\/1134285.1134349"},{"key":"S0218194025500196BIB023","doi-asserted-by":"publisher","DOI":"10.1145\/1414004.1414065"},{"key":"S0218194025500196BIB024","doi-asserted-by":"publisher","DOI":"10.1109\/TSE.2010.81"},{"key":"S0218194025500196BIB025","doi-asserted-by":"publisher","DOI":"10.1016\/j.sysarc.2010.06.003"},{"key":"S0218194025500196BIB026","doi-asserted-by":"publisher","DOI":"10.1109\/ICST.2010.32"},{"key":"S0218194025500196BIB027","doi-asserted-by":"publisher","DOI":"10.1145\/1315245.1315311"},{"key":"S0218194025500196BIB028","doi-asserted-by":"publisher","DOI":"10.1145\/1368088.1368160"},{"key":"S0218194025500196BIB029","doi-asserted-by":"publisher","DOI":"10.1145\/3133925"},{"key":"S0218194025500196BIB030","doi-asserted-by":"publisher","DOI":"10.1109\/ICMLA.2015.99"},{"key":"S0218194025500196BIB031","doi-asserted-by":"publisher","DOI":"10.1145\/2372225.2372230"},{"key":"S0218194025500196BIB032","doi-asserted-by":"publisher","DOI":"10.1109\/TSE.2014.2340398"},{"key":"S0218194025500196BIB033","doi-asserted-by":"publisher","DOI":"10.1109\/ICMLA.2018.00120"},{"issue":"5","key":"S0218194025500196BIB034","first-page":"2224","volume":"18","author":"Zou D.","year":"2019","journal-title":"IEEE Trans. Dependable Secure Comput."},{"key":"S0218194025500196BIB035","doi-asserted-by":"publisher","DOI":"10.1145\/2420950.2421003"},{"key":"S0218194025500196BIB036","doi-asserted-by":"publisher","DOI":"10.1145\/3106237.3117771"},{"key":"S0218194025500196BIB037","doi-asserted-by":"publisher","DOI":"10.1145\/2566486.2568024"},{"volume-title":"Advances in Neural Information Processing Systems","year":"2017","author":"Vaswani A.","key":"S0218194025500196BIB039"},{"key":"S0218194025500196BIB040","doi-asserted-by":"publisher","DOI":"10.1609\/aaai.v35i16.17673"},{"key":"S0218194025500196BIB041","doi-asserted-by":"publisher","DOI":"10.1016\/j.infsof.2021.106809"},{"key":"S0218194025500196BIB042","doi-asserted-by":"publisher","DOI":"10.1109\/ICSE.2015.139"},{"key":"S0218194025500196BIB043","doi-asserted-by":"publisher","DOI":"10.1145\/3290353"},{"key":"S0218194025500196BIB044","doi-asserted-by":"publisher","DOI":"10.1145\/3385412.3385999"},{"key":"S0218194025500196BIB045","doi-asserted-by":"publisher","DOI":"10.1109\/ICPC.2011.26"}],"container-title":["International Journal of Software Engineering and Knowledge Engineering"],"original-title":[],"language":"en","link":[{"URL":"https:\/\/www.worldscientific.com\/doi\/pdf\/10.1142\/S0218194025500196","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2025,5,23]],"date-time":"2025-05-23T03:57:54Z","timestamp":1747972674000},"score":1,"resource":{"primary":{"URL":"https:\/\/www.worldscientific.com\/doi\/10.1142\/S0218194025500196"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2025,5]]},"references-count":43,"journal-issue":{"issue":"05","published-print":{"date-parts":[[2025,5]]}},"alternative-id":["10.1142\/S0218194025500196"],"URL":"https:\/\/doi.org\/10.1142\/s0218194025500196","relation":{},"ISSN":["0218-1940","1793-6403"],"issn-type":[{"type":"print","value":"0218-1940"},{"type":"electronic","value":"1793-6403"}],"subject":[],"published":{"date-parts":[[2025,5]]}}}