• Home
  • Search
  • VulEye: A Novel Graph Neural Network Vulnerability Detection Approach for PHP Application
  • Cite Icon22
  • https://doi.org/10.3390/app13020825Copy DOI Icon

VulEye: A Novel Graph Neural Network Vulnerability Detection Approach for PHP Application

Show More
  • Abstract
  • PDF
  • Literature Map
  • References
  • Citations
  • Similar Papers
Abstract

Following advances in machine learning and deep learning processing, cyber security experts are committed to creating deep intelligent approaches for automatically detecting software vulnerabilities. Nowadays, many practices are for C and C++ programs, and methods rarely target PHP application. Moreover, many of these methods use LSTM (Long Short-Term Memory) but not GNN (Graph Neural Networks) to learn the token dependencies within the source code through different transformations. That may lose a lot of semantic information in terms of code representation. This article presents a novel Graph Neural Network vulnerability detection approach, VulEye, for PHP applications. VulEye can assist security researchers in finding vulnerabilities in PHP projects quickly. VulEye first constructs the PDG (Program Dependence Graph) of the PHP source code, slices PDG with sensitive functions contained in the source code into sub-graphs called SDG (Sub-Dependence Graph), and then makes SDG the model input to train with a Graph Neural Network model which contains three stack units with a GCN layer, Top-k pooling layer, and attention layer, and finally uses MLP (Multi-Layer Perceptron) and softmax as a classifier to predict if the SDG is vulnerable. We evaluated VulEye on the PHP vulnerability test suite in Software Assurance Reference Dataset. The experiment reports show that the best macro-average F1 score of the VulEye reached 99% in the binary classification task and 95% in the multi-classes classification task. VulEye achieved the best result compared with the existing open-source vulnerability detection implements and other state-of-art deep learning models. Moreover, VulEye can also locate the precise area of the flaw, since our SDG contains code slices closely related to vulnerabilities with a key triggering sensitive/sink function.

Loading PDF

Similar Papers
  • Research Article

Graph Neural Network Learning on the Pediatric Structural Connectome.

  • Jan 29, 2025
  • Tomography (Ann Arbor, Mich.)
  • Anand Srinivasan +6
  • PDF
  • Research Article
  • Citations8

Leveraging graph neural networks and neural operator techniques for high-fidelity mesh-based physics simulations

  • Nov 22, 2023
  • APL Machine Learning
  • Zeqing Jin +3
  • Research Article
  • Citations2

Generalized predictive analysis of reactions in paper devices via graph neural networks

  • Jun 05, 2024
  • Sensors and Actuators: B. Chemical
  • Hao Sun +6
  • Conference Article
  • Citations26

Graph Neural Networks for COVID-19 Drug Discovery

  • Dec 10, 2020
  • Mark Cheung +1
  • Research Article
  • Citations3

VISION: Robust and Interpretable Code Vulnerability Detection Leveraging Counterfactual Augmentation

  • Oct 15, 2025
  • Proceedings of the AAAI/ACM Conference on AI, Ethics, and Society
  • David Egea +2
  • PDF
  • Research Article
  • Citations63

Geometric deep learning for online prediction of cascading failures in power grids

  • Sep 01, 2023
  • Reliability Engineering & System Safety
  • Anna Varbella +2
  • Research Article
  • Citations1

A hierarchical transformer and graph neural network model for high-accuracy watershed nitrate prediction

  • Oct 25, 2025
  • Environmental Science and Ecotechnology
  • Jun Sun +6
  • Research Article

GNNBleed: Inference Attacks to Unveil Private Edges in Graphs with Realistic Access to GNN Models

  • Jul 01, 2025
  • Proceedings on Privacy Enhancing Technologies
  • Zeyu Song +2
  • PDF
  • Research Article
  • Citations60

A Comprehensive Survey on Trustworthy Graph Neural Networks: Privacy, Robustness, Fairness, and Explainability

  • Sep 27, 2024
  • Machine Intelligence Research
  • Enyan Dai +7
  • Research Article
  • Citations2

Consumer phase identification in distribution grids using Graph Neural Networks based on synthetic and measured power profiles

  • Dec 01, 2025
  • Energy and AI
  • Chandra Sekhar Charan Dande +4
  • Research Article

Towards Drug Repurposing for Leukemia: An Ensemble Graph Neural Network Model for Drug Response Prediction

  • Sep 01, 2025
  • International Journal of Artificial Intelligence Tools
  • I T Anjusha +2
  • Conference Article

Graph Representation Learning with Adaptive Mixtures

  • Dec 01, 2021
  • Da Sun Handason Tam +2
  • Research Article
  • Citations1

Research on GNNs with stable learning

  • Aug 08, 2025
  • Scientific Reports
  • Wenbin Li +5
  • Research Article
  • Citations219

BGNN4VD: Constructing Bidirectional Graph Neural-Network for Vulnerability Detection

  • Mar 20, 2021
  • Information and Software Technology
  • Sicong Cao +4
  • Research Article
  • Citations27

Improved GNNs for Log D7.4 Prediction by Transferring Knowledge from Low-Fidelity Data

  • Mar 31, 2023
  • Journal of Chemical Information and Modeling
  • Yan-Jing Duan +10
Cactus Communications logo

Copyright 2026 Cactus Communications. All rights reserved.