<p>Source code vulnerability detection is critical to software security. Existing methods either rely on external tools to construct program graphs, which are constrained by environmental limitations, incur high computational costs, and are prone to failure, or adopt lightweight sequence models that overlook code structural features. To address this, we propose LiteVul, a lightweight framework that constructs compact directed graphs directly from raw source code without relying on external tools, capturing multi-scale lexical co-occurrence relationships and fine-grained structural dependencies. By leveraging structure-aware graph neural networks, LiteVul aggregates multi-layer features to achieve precise vulnerability prediction. Experiments conducted on the Devign, Reveal, and DiverseVul benchmark datasets show that LiteVul substantially surpasses nine representative baseline methods in performance. Additionally, its graph construction efficiency is substantially improved, providing a feasible technical pathway for vulnerability detection in large-scale codebases.</p>

错误:搜索内容不能为空,请输入英文关键词
错误:关键词超出字数限制,请精简
高级检索

Litevul: a lightweight vulnerability detection via directed PPMI-weighted token graphs

  • Zhaohui Liu,
  • Wenjie Xie

摘要

Source code vulnerability detection is critical to software security. Existing methods either rely on external tools to construct program graphs, which are constrained by environmental limitations, incur high computational costs, and are prone to failure, or adopt lightweight sequence models that overlook code structural features. To address this, we propose LiteVul, a lightweight framework that constructs compact directed graphs directly from raw source code without relying on external tools, capturing multi-scale lexical co-occurrence relationships and fine-grained structural dependencies. By leveraging structure-aware graph neural networks, LiteVul aggregates multi-layer features to achieve precise vulnerability prediction. Experiments conducted on the Devign, Reveal, and DiverseVul benchmark datasets show that LiteVul substantially surpasses nine representative baseline methods in performance. Additionally, its graph construction efficiency is substantially improved, providing a feasible technical pathway for vulnerability detection in large-scale codebases.