Synapse
⌘+K
Synapse
PulseExploreClubsResearchersJournals
Instagram
HomeClubsExplore
August 22, 2026International Journal of Information SecurityOpen Access

Data and context matter: towards generalizing AI-based software vulnerability detection

View Full Paper
Ask AI
Bookmark
Share

Authors

RSRijha SafdarNational University of Sciences and TechnologyDMDanyail MateenNational University of Computer and Emerging SciencesSASyed Taha AliWestern University

Discussion

Loading...

Member takes

Implication

Empirical evaluation demonstrates enhanced cross-project vulnerability detection in unseen software codebases, highlighting the importance of curated training datasets and encoder-based models.

Key Points

  • To investigate how training data quality, model architecture, and parameter configurations influence the ability of AI-based vulnerability detection systems to generalize to unseen codebases.
  • Curated the VulGate dataset by removing mislabeled and duplicate samples, updating vulnerabilities, and adding metadata, hard samples, and dedicated test sets.
  • Benchmarked multiple encoder-only and decoder-only model architectures across parameter configurations on the BigVul dataset and unseen project codebases.
  • Encoder-based models achieved superior accuracy and cross-project generalization compared to decoder-based architectures.
  • The proposed approach demonstrated a 6.8% improvement in recall on the benchmark BigVul dataset and outperformed other models on unseen codebases.

Cite This Study

Safdar et al. (2026) studied this question.

synapsesocial.com/papers/6a895e6bca7ade938187c78ehttps://doi.org/10.1007/s10207-026-01282-6
View Full Paper
Ask AI
Bookmark
Share

Also Consider

Synapse has enriched 5 closely related papers on similar clinical questions. Consider them for comparative context:

  1. 1A few billion lines of code later2010 · 638 citations
  2. 2Checking system rules using system-specific, programmer-written compiler extensions2000 · 539 citations
  3. 3Context- and path-sensitive memory leak detection2005 · 119 citations
  4. 4A system and language for building system-specific, static analyses2002 · 352 citations
  5. 5ESP2002 · 552 citations