Indurthi Ravindra Indurthi, Shaik Abdul Hameed, Polasi Sushma, Jose Pitchaiya, Veeramreddy Surya Narayana Reddy, Maganti Syamala

2026.2.1Bulletin of Electrical Engineering and Informatics

DOI: 10.11591/eei.v15i1.11100

tlooto Summary

DCodeBERT improves vulnerability management in software development settings and surpasses CodeGPT, VulDeePecker, CodeT5 Small, GraphCodeBERT, and Devign in accuracy, precision, recall, and F1-score.

Abstract

The complexity of modern software has increased security risks, emphasizing the need for automated detection and correction. DCodeBERT, a CodeBERT-based vulnerability detection and remediation framework, is introduced in this study. DCodeBERT uses a multi-task learning framework with shared-private layers, gradient normalization, and uncertainty weighting to stand out. This architecture lets the model capture general representations while preserving task-specific details. From open-source repositories and vetted vulnerability databases, 85,000 code snippets—vulnerable, clean, and repaired—were collected. C, C++, Java, and Python programming languages (PLs) make this dataset highly usable. DCodeBERT surpasses CodeGPT, VulDeePecker, CodeT5 Small, GraphCodeBERT, and Devign in accuracy, precision, recall, and F1-score. Statistics show that the improvements are significant, and qualitative inspection shows that the resulting patches fix buffer overflows and injection problems within semantic validity. This novel approach combines multi-task optimization with natural and PL semantic integration for high cross-language performance. The findings show that DCodeBERT improves vulnerability management in software development settings.

Citation format

INDURTHI, Indurthi Ravindra, et al. A proactive approach to software security using dcodebert for vulnerability management. Bulletin of Electrical Engineering and Informatics, 2026.