An Insight into Security Code Review with LLMs: Capabilities, Obstacles, and Influential Factors

Understand

Security code review is a time-consuming and labor-intensive process typically requiring integration with automated security defect detection tools.

• However, existing security analysis tools struggle with poor generalization, high false positive rates, and coarse detection granularity.
• Large Language Models (LLMs) have been considered promising candidates for addressing those challenges.
• In this study, we conducted an empirical study to explore the potential of LLMs in detecting security defects during code review.