dorsal/arxiv
View SchemaHogVul: Black-box Adversarial Code Generation Framework Against LM-based Vulnerability Detectors
| Authors | Jingxiao Yang, Ping He, Tianyu Du, Sun Bing, Xuhong Zhang |
|---|---|
| Categories | |
| ArXiv ID | 2601.05587vv1 |
| URL | https://arxiv.org/abs/2601.05587 |
| License | http://arxiv.org/licenses/nonexclusive-distrib/1.0/ |
Abstract
Recent advances in software vulnerability detection have been driven by Language Model (LM)-based approaches. However, these models remain vulnerable to adversarial attacks that exploit lexical and syntax perturbations, allowing critical flaws to evade detection. Existing black-box attacks on LM-based vulnerability detectors primarily rely on isolated perturbation strategies, limiting their ability to efficiently explore the adversarial code space for optimal perturbations. To bridge this gap, we propose HogVul, a black-box adversarial code generation framework that integrates both lexical and syntax perturbations under a unified dual-channel optimization strategy driven by Particle Swarm Optimization (PSO). By systematically coordinating two-level perturbations, HogVul effectively expands the search space for adversarial examples, enhancing the attack efficacy. Extensive experiments on four benchmark datasets demonstrate that HogVul achieves an average attack success rate improvement of 26.05\% over state-of-the-art baseline methods. These findings highlight the potential of hybrid optimization strategies in exposing model vulnerabilities.
{
"annotation_id": "fbb62627-4cb8-4aa5-896d-2dcd61f6f26c",
"date_created": "2026-02-17T05:53:05.014000Z",
"date_modified": "2026-02-17T05:53:05.014000Z",
"file_hash": "397d93890f6c76137c0105d3aeb763c1bd02fd9f7eca9eaf292ffd231b5dbfa1",
"private": false,
"record": {
"abstract": "Recent advances in software vulnerability detection have been driven by Language Model (LM)-based approaches. However, these models remain vulnerable to adversarial attacks that exploit lexical and syntax perturbations, allowing critical flaws to evade detection. Existing black-box attacks on LM-based vulnerability detectors primarily rely on isolated perturbation strategies, limiting their ability to efficiently explore the adversarial code space for optimal perturbations. To bridge this gap, we propose HogVul, a black-box adversarial code generation framework that integrates both lexical and syntax perturbations under a unified dual-channel optimization strategy driven by Particle Swarm Optimization (PSO). By systematically coordinating two-level perturbations, HogVul effectively expands the search space for adversarial examples, enhancing the attack efficacy. Extensive experiments on four benchmark datasets demonstrate that HogVul achieves an average attack success rate improvement of 26.05\\% over state-of-the-art baseline methods. These findings highlight the potential of hybrid optimization strategies in exposing model vulnerabilities.",
"arxiv_id": "2601.05587",
"authors": [
"Jingxiao Yang",
"Ping He",
"Tianyu Du",
"Sun Bing",
"Xuhong Zhang"
],
"categories": [
"cs.CR",
"cs.AI"
],
"license": "http://arxiv.org/licenses/nonexclusive-distrib/1.0/",
"title": "HogVul: Black-box Adversarial Code Generation Framework Against LM-based Vulnerability Detectors",
"url": "https://arxiv.org/abs/2601.05587",
"version": "v1"
},
"schema_id": "dorsal/arxiv",
"source": {
"execution_id": "4da9ab77-e23a-455b-b71a-100b7855e748",
"id": "arXiv Dataset",
"type": "Model",
"variant": "snapshot-2026-01-17",
"version": "0.1.0"
},
"user_id": 1000002
}