惯性聚合 高效追踪和阅读你感兴趣的博客、新闻、科技资讯
阅读原文 在惯性聚合中打开

推荐订阅源

Google DeepMind News
Google DeepMind News
博
博客园 - 司徒正美
OSCHINA 社区最新新闻
OSCHINA 社区最新新闻
V
V2EX
博
博客园_首页
量
量子位
博
博客园 - 三生石上(FineUI控件)
钛媒体：引领未来商业与生活新知
钛媒体：引领未来商业与生活新知
腾
腾讯CDC
T
The Blog of Author Tim Ferriss
博
博客园 - 聂微东
V
Visual Studio Blog
J
Java Code Geeks
宝玉的分享
宝玉的分享
爱范儿
爱范儿
MongoDB | Blog
MongoDB | Blog
D
Docker
大猫的无限游戏
大猫的无限游戏
Y
Y Combinator Blog
H
Help Net Security
罗
罗磊的独立博客
H
Hackread – Cybersecurity News, Data Breaches, AI and More
Cyber Security Advisories - MS-ISAC
Cyber Security Advisories - MS-ISAC
Blog — PlanetScale
Blog — PlanetScale

Proceedings of the AAAI Conference on Artificial Intelligence

Resource Efficient Sleep Staging via Multi-Level Masking and Prompt Learning AutoMalDesc: Large-Scale Script Analysis for Cyber Threat Research Modulation-Based Backdoors: Leveraging Amplitude and Frequency Patterns to Attack Speaker Recognition Learning Structurally Stabilized Representations for Lossless DNA Storage ViG-RAG: Video-aware Graph Retrieval-Augmented Generation via Temporal and Semantic Hybrid Reasoning Transferable Backdoor Attacks for Code Models via Sharpness-Aware Adversarial Perturbation Toward Multimodal Fake News Detection by Multi-perspective Rationale Generation and Verification RTMol: Rethinking Molecule-text Alignment in a Round-trip View Physical-regularized Hierarchical Generative Model for Metallic Glass Structural Generation and Energy Prediction Regressor-guided Diffusion Model for De Novo Peptide Sequencing with Explicit Mass Control RareAgents: Autonomous Multi-disciplinary Team for Rare Disease Diagnosis and Treatment Transferring Causal Driving Patterns for Generalizable Traffic Simulation with Diffusion-Based Distillation TRACE: Transformation-Aware Graph Refinement for Reaction Condition Prediction SIDE: Surrogate Conditional Data Extraction from Diffusion Models DyC-STG: Dynamic Causal Spatio-Temporal Graph Network for Real-time Data Credibility Analysis in IoT ProAR: Probabilistic Autoregressive Modeling for Molecular Dynamics Light but Sharp: SlimSTAD for Real-Time Action Detection from Sensor Data T2Agent: A Tool-augmented Multimodal Misinformation Detection Agent with Monte Carlo Tree Search Measuring What Matters: Scenario-Driven Evaluation for Trajectory Predictors in Autonomous Driving DensiCrafter: Physically-Constrained Generation and Fabrication of Self-Supporting Hollow Structures Topology-Enhanced and Label Correlation-Aware Model for Protein-Protein Interaction Prediction InteChar: A Unified Oracle Bone Character List for Ancient Chinese Language Modeling NucEL: Single-Nucleotide ELECTRA-Style Genomic Pre-training for Efficient and Interpretable Representations OR-R1: Automating Modeling and Solving of Operations Research Optimization Problem via Test-Time Reinforcement Learning Learning from Long-Term Engagement: Adaptive Tutoring Dialogue Planning for Personalized Education Toward Time-Continuous Data Inference in Sparse Urban CrowdSensing Multi-Horizon Time Series Forecasting of Non-Parametric CDFs with Deep Lattice Networks From Stimuli to Minds: Enhancing Psychological Reasoning in LLMs via Bilateral Reinforcement Learning Unveiling the Attribute Misbinding Threat in Identity-Preserving Models DeepSenseMoE: Harnessing Power of Time Series Foundation Models for Few-Shot Human Activity Recognition
VFCionX: Bridging Large and Small Models for Robust Vulne...
Xing Cui, Ji · 2026-03-14 · via Proceedings of the AAAI Conference on Artificial Intelligence

Authors

  • Xing Cui Institute of Software, Chinese Academy of Sciences, Beijing 100190, China University of Chinese Academy of Sciences, Beijing 100190, China
  • Jingzheng Wu Institute of Software, Chinese Academy of Sciences, Beijing 100190, China
  • Wenxiang Ou Institute of Software, Chinese Academy of Sciences, Beijing 100190, China
  • Tianyue Luo Institute of Software, Chinese Academy of Sciences, Beijing 100190, China
  • Zhiyuan Li Institute of Software, Chinese Academy of Sciences, Beijing 100190, China University of Chinese Academy of Sciences, Beijing 100190, China
  • Xiang Ling Institute of Software, Chinese Academy of Sciences, Beijing 100190, China Quan Cheng Laboratory, Jinan 250103, Shandong, China

DOI:

https://doi.org/10.1609/aaai.v40i1.36976

Abstract

Vulnerability-Fixing Commit Identification(VFCI) is a critical task in software security maintenance that aims to automatically identify code commits that patch security vulnerabilities. However, existing approaches face challenges in handling low-quality commit messages and entangled commits, which limit their identification performance. To address these issues, we propose VFCionX, a novel VFCI framework that integrates large and small language models in a collaborative architecture. VFCionX consists of three core modules: Message Classifier, Patch Classifier, and Ensemble Classifier. The Message Classifier employs a multi-source contextual augmentation strategy to enhance the quality of commit messages and fine-tunes the Qwen2.5-1.5B model, significantly improving classification performance in the textual modality. The Patch Classifier combines heuristic rules with a Qwen2.5-Coder-7B-driven file selector to filter noise from entangled commits, and incorporates a line-level feature extractor based on CodeBERT and CNN to capture local pattern differences between added and deleted code lines. The Ensemble Classifier integrates predictions from both channels using the AdaBoost algorithm, enhancing model robustness and generalization. Experimental results on five popular C/C++ repositories comprising 24,630 commits show that VFCionX achieves an F1-score of 81.47%, outperforming the best baseline by 9.42%. Ablation studies validate the effectiveness of each component, while sensitivity analysis reveals optimal parameter settings for balancing performance and noise resilience. This work provides a new and effective solution for robust vulnerability patch identification.

How to Cite

Cui, X., Wu, J., Ou, W., Luo, T., Li, Z., & Ling, X. (2026). VFCionX: Bridging Large and Small Models for Robust Vulnerability-Fixing Commit Identification. Proceedings of the AAAI Conference on Artificial Intelligence, 40(1), 166–174. https://doi.org/10.1609/aaai.v40i1.36976

Issue

Section

AAAI Technical Track on Application Domains I

此内容由惯性聚合(RSS阅读器)自动聚合整理，仅供阅读参考。 原文来自 — 版权归原作者所有。