Large language model for vulnerability detection and repair: Literature review and the road ahead

X Zhou, S Cao, X Sun, D Lo - ACM Transactions on Software …, 2024 - dl.acm.org
The significant advancements in Large Language Models (LLMs) have resulted in their
widespread adoption across various tasks within Software Engineering (SE), including …

Machine learning for actionable warning identification: A comprehensive survey

X Ge, C Fang, X Li, W Sun, D Wu, J Zhai, SW Lin… - ACM Computing …, 2024 - dl.acm.org
Actionable Warning Identification (AWI) plays a crucial role in improving the usability of static
code analyzers. With recent advances in Machine Learning (ML), various approaches have …

Just another copy and paste? Comparing the security vulnerabilities of ChatGPT generated code and StackOverflow answers

S Hamer, M d'Amorim, L Williams - 2024 IEEE Security and …, 2024 - ieeexplore.ieee.org
Sonatype's 2023 report found that 97% of developers and security leads integrate
generative Artificial Intelligence (AI), particularly Large Language Models (LLMs), into their …

Llm-assisted static analysis for detecting security vulnerabilities

Z Li, S Dutta, M Naik - arxiv preprint arxiv:2405.17238, 2024 - arxiv.org
Software is prone to security vulnerabilities. Program analysis tools to detect them have
limited effectiveness in practice. While large language models (or LLMs) have shown …

An empirical study of static analysis tools for secure code review

W Charoenwet, P Thongtanunam, VT Pham… - Proceedings of the 33rd …, 2024 - dl.acm.org
Early identification of security issues in software development is vital to minimize their
unanticipated impacts. Code review is a widely used manual analysis method that aims to …

Harnessing large language models for software vulnerability detection: A comprehensive benchmarking study

K Tamberg, H Bahsi - IEEE Access, 2025 - ieeexplore.ieee.org
Despite various approaches being employed to detect software vulnerabilities, the number
of reported software vulnerabilities shows an upward trend over the years. This suggests the …

Comparison of static application security testing tools and large language models for repo-level vulnerability detection

X Zhou, DM Tran, T Le-Cong, T Zhang, IC Irsan… - arxiv preprint arxiv …, 2024 - arxiv.org
Software vulnerabilities pose significant security challenges and potential risks to society,
necessitating extensive efforts in automated vulnerability detection. There are two popular …

Large language models for secure code assessment: A multi-language empirical study

K Dozono, TE Gasiba, A Stocco - arxiv preprint arxiv:2408.06428, 2024 - arxiv.org
Most vulnerability detection studies focus on datasets of vulnerabilities in C/C++ code,
offering limited language diversity. Thus, the effectiveness of deep learning methods …

Comparison of static analysis architecture recovery tools for microservice applications

S Schneider, A Bakhtin, X Li, J Soldani, A Brogi… - arxiv preprint arxiv …, 2024 - arxiv.org
Architecture recovery tools help software engineers obtain an overview of the structure of
their software systems during all phases of the software development life cycle. This is …

[HTML][HTML] Security Evaluation of Companion Android Applications in IoT: The Case of Smart Security Devices

A Allen, A Mylonas, S Vidalis, D Gritzalis - Sensors, 2024 - mdpi.com
Smart security devices, such as smart locks, smart cameras, and smart intruder alarms are
increasingly popular with users due to the enhanced convenience and new features that …