paper-with-me

Papers

Resource-Efficient Automatic Software Vulnerability Assessment via Knowledge Distillation and Particle Swarm Optimization

2025-07-30 · Chaoyang Gao, Xiang Chen, Jiyu Wang, Jibin Wang, Guang Yang arxiv

The increasing complexity of software systems has led to a surge in cybersecurity vulnerabilities, necessitating efficient and scalable solutions for vulnerability assessment. However, the deployment of large pre-trained models in real-world scenarios is hindered by their substantial computational and storage demands. To address this challenge, we propose a novel resource-efficient framework that integrates knowledge distillation and particle swarm optimization to enable automated vulnerability assessment. Our framework employs a two-stage approach: First, particle swarm optimization is utilized to optimize the architecture of a compact student model, balancing computational efficiency and model capacity. Second, knowledge distillation is applied to transfer critical vulnerability assessment knowledge from a large teacher model to the optimized student model. This process significantly reduces the model size while maintaining high performance. Experimental results on an enhanced MegaVul dataset, comprising 12,071 CVSS (Common Vulnerability Scoring System) v3 annotated vulnerabilities, demonstrate the effectiveness of our approach. Our approach achieves a 99.4% reduction in model size while retaining 89.3% of the original model's accuracy. Furthermore, it outperforms state-of-the-art baselines by 1.7% in accuracy with 60% fewer parameters. The framework also reduces training time by 72.1% and architecture search time by 34.88% compared to traditional genetic algorithms.

📄 PDF Abstract BibTeX arXiv:2508.02840

Code (0)

등록된 구현이 없습니다.

Tasks

Computational EfficiencyKnowledge Distillation

Similar Papers 제목 키워드 기반

Towards an Improved Understanding of Software Vulnerability Assessment Using Data-Driven Approaches

2022-07-24 · Triet H. M. Le

The thesis advances the field of software security by providing knowledge and automation support for software vulnerability assessment using data-driven approaches. Software vulnerability assessment provides important an…

DeepCVA: Automated Commit-level Vulnerability Assessment with Deep Multi-task Learning

2021-08-18 · Triet H. M. Le, David Hin, Roland Croft, M. Ali Babar

It is increasingly suggested to identify Software Vulnerabilities (SVs) in code commits to give early warnings about potential security risks. However, there is a lack of effort to assess vulnerability-contributing commi…

Multi-Task Learning

A Survey on Data-driven Software Vulnerability Assessment and Prioritization

2021-07-18 · Triet H. M. Le, Huaming Chen, M. Ali Babar

Software Vulnerabilities (SVs) are increasing in complexity and scale, posing great security risks to many software systems. Given the limited resources in practice, SV assessment and prioritization help practitioners de…

Constructing a Knowledge Graph from Textual Descriptions of Software Vulnerabilities in the National Vulnerability Database

2023-04-30 · Anders Mølmen Høst, Pierre Lison, Leon Moonen

Knowledge graphs have shown promise for several cybersecurity tasks, such as vulnerability assessment and threat analysis. In this work, we present a new method for constructing a vulnerability knowledge graph from infor…

Knowledge Graph EmbeddingsKnowledge Graphsnamed-entity-recognitionNamed Entity Recognition+3

A systematic literature Review for Transformer-based Software Vulnerability detection

2026-04-27 · Fiza Naseer, Javed Ali Khan, Muhammad Yaqoob, Alexios Mylonas 외 arxiv

Context: Software vulnerabilities pose significant security threats to software systems, especially as software is increasingly used across many areas of daily life, including health, government, and finance. Recently, t…

Vulnerability DetectionRepresentation Learning