Jiahao Cao

Prof. Jiahao Cao

Institute for Network Sciences and Cyberspace, Tsinghua University, Beijing, China

Research Focus & Metrics

Academic Career Length

3Years (2024-Present)

(Calculated once Scilit publication data is synced: current year − year of first publication + 1)

Representative Publications

View All Publications

15 October 2024
Verified
Book Chapter
Closed access
PDF file
GZGuoqiang Zhang
Guoqiang Zhang
Jiahao CaoJiahao Cao
Jiahao Cao
MXMingwei Xu
Mingwei Xu
XDXinhao Deng
Xinhao Deng

3 October 2024 in arXiv
Verified
Preprint
Open access
PDF file
WQWeiliang Qi
Weiliang Qi
Jiahao CaoJiahao Cao
Jiahao Cao
DPDarsh Poddar
Darsh Poddar
SLSophia Li
Sophia Li
Xinda WangXinda Wang
Xinda Wang
With the rapid development and widespread use of advanced network systems, software vulnerabilities pose a significant threat to secure communications and networking. Learning-based vulnerability detection systems, particularly those leveraging pre-trained language models, have demonstrated significant potential in promptly identifying vulnerabilities in communication networks and reducing the risk of exploitation. However, the shortage of accurately labeled vulnerability datasets hinders further progress in this field. Failing to represent real-world vulnerability data variety and preserve vulnerability semantics, existing augmentation approaches provide limited or even counterproductive contributions to model training. In this paper, we propose a data augmentation technique aimed at enhancing the performance of pre-trained language models for vulnerability detection. Given the vulnerability dataset, our method performs natural semantic-preserving program transformation to generate a large volume of new samples with enriched data diversity and variety. By incorporating our augmented dataset in fine-tuning a series of representative code pre-trained models (i.e., CodeBERT, GraphCodeBERT, UnixCoder, and PDBERT), up to 10.1% increase in accuracy and 23.6% increase in F1 can be achieved in the vulnerability detection task. Comparison results also show that our proposed method can substantially outperform other prominent vulnerability augmentation approaches.