2023

Evaluation of ChatGPT Model for Vulnerability Detection

Cheshkov, Anton, Zadorozhny, Pavel, Levichev, Rodion

Understand

In this technical report, we evaluated the performance of the ChatGPT and GPT-3 models for the task of vulnerability detection in code.

  • Our evaluation was conducted on our real-world dataset, using binary and multi-label classification tasks on CWE vulnerabilities.
  • We decided to evaluate the model because it has shown good performance on other code-based tasks, such as solving programming challenges and understanding code at a high level.
  • However, we found that the ChatGPT model performed no better than a dummy classifier for both binary and multi-label classification tasks for code vulnerability detection.

Built on

  • Language models are few-shot learners

    Tom Brown, Benjamin Mann, Nick Ryder, Melanie Subbiah, Jared D Kaplan, Prafulla Dhariwal, Arvind Neelakantan, Pranav Shyam, Girish Sastry, Amanda Askell, et al · 1901

    Earlier work this paper cites.

  • Evaluating large language models trained on code

    Original

    Mark Chen, Jerry Tworek, Heewoo Jun, Qiming Yuan, Henrique Ponde de Oliveira Pinto, Jared Kaplan, Harri Edwards, Yuri Burda, Nicholas Joseph, Greg Brockman, et al · 2021

    Earlier work this paper cites.

Similar

Then

Beyond the bibliography

alphaXiv searches the wider corpus for related work and actual follow-ups.

Open on alphaXiv

alphaXiv is searching for related work…