Fetching the paper…
Reading the bibliography…
Large Language Models (LLMs) have training corpora containing large amounts of program code, greatly improving the model's code comprehension and generation capabilities.
Analyzing the state of static analysis: A large-scale evaluation in open source software
Moritz Beller, Radjino Bholanath, Shane McIntosh, and Andy Zaidman · 2016
Earlier work this paper cites.
Vuldeepecker: A deep learning-based system for vulnerability detection
Zhen Li, Deqing Zou, Shouhuai Xu, Xinyu Ou, Hai Jin, Sujuan Wang, Zhijun Deng, and Yuyi Zhong · 2018
Earlier work this paper cites.
Fuzzing: State of the art
Hongliang Liang, Xiaoxiao Pei, Xiaodong Jia, Wuwei Shen, and Jian Zhang · 2018
Earlier work this paper cites.
Full-speed fuzzing: Reducing fuzzing overhead through coverage-guided tracing
Stefan Nagy and Matthew Hicks · 2019
Earlier work this paper cites.
The art, science, and engineering of fuzzing: A survey
Valentin JM Manès, HyungSeok Han, Choongwoo Han, Sang Kil Cha, Manuel Egele, Edward J Schwartz, and Maverick Woo · 2019
Earlier work this paper cites.
Devign: Effective vulnerability identification by learning comprehensive program semantics via graph neural networks, 2019
Yaqin Zhou, Shangqing Liu, Jingkai Siow, Xiaoning Du, and Yang Liu · 2019
Earlier work this paper cites.
Static code analysis tools: A systematic literature review
Darko Stefanović, Danilo Nikolić, Dušanka Dakić, Ivana Spasojević, and Sonja Ristić · 2020
Earlier work this paper cites.
A c/c++ code vulnerability dataset with code changes and cve summaries
Jiahao Fan, Yi Li, Shaohua Wang, and Tien N. Nguyen · 2020
Earlier work this paper cites.
Deep learning based vulnerability detection: Are we there yet?
Saikat Chakraborty, Rahul Krishna, Yangruibo Ding, and Baishakhi Ray · 2021
Earlier work this paper cites.
Sysevr: A framework for using deep learning to detect software vulnerabilities
Zhen Li, Deqing Zou, Shouhuai Xu, Hai Jin, Yawei Zhu, and Zhaoxuan Chen · 2021
Earlier work this paper cites.
An empirical study on the effectiveness of static c code analyzers for vulnerability detection
Stephan Lipp, Sebastian Banescu, and Alexander Pretschner · 2022
Earlier work this paper cites.
Towards efficient fine-tuning of pre-trained code models: An experimental study and beyond
Ensheng Shi, Yanlin Wang, Hongyu Zhang, Lun Du, Shi Han, Dongmei Zhang, and Hongbin Sun · 2023
Earlier work this paper cites.
{ \{ VulChecker } \} : Graph-based vulnerability localization in source code
Yisroel Mirsky, George Macon, Michael Brown, Carter Yagemann, Matthew Pruett, Evan Downing, Sukarno Mertoguno, and Wenke Lee · 2023
Cited alongside, same era.
Understanding the effectiveness of large language models in detecting security vulnerabilities
Avishree Khare, Saikat Dutta, Ziyang Li, Alaia Solko-Breslin, Rajeev Alur, and Mayur Naik · 2023
Cited alongside, same era.
Diversevul: A new vulnerable source code dataset for deep learning based vulnerability detection
Yizheng Chen, Zhoujie Ding, Lamya Alowain, Xinyun Chen, and David Wagner · 2023
Cited alongside, same era.
How far have we gone in vulnerability detection using large language models
Zeyu Gao, Hao Wang, Yuchen Zhou, Wenyu Zhu, and Chao Zhang · 2023
Cited alongside, same era.
Data quality for software vulnerability datasets, 2023
Roland Croft, M. Ali Babar, and Mehdi Kholoosi · 2023
Llms cannot reliably identify and reason about security vulnerabilities (yet?): A comprehensive evaluation, framework, and benchmarks
Saad Ullah, Mingji Han, Saurabh Pujar, Hammond Pearce, Ayse Coskun, and Gianluca Stringhini · 2024
Closest in time.
Large language model for vulnerability detection: Emerging results and future directions
Xin Zhou, Ting Zhang, and David Lo · 2024
Closest in time.
https://samate.nist.gov/SARD/test-suites/7
Apache Subversion 1.8.3 - NIST Software Assurance Reference Dataset — samate.nist.gov · 2024
Closest in time.
https://samate.nist.gov/SARD/test-suites/8
Wireshark 1.10.2 - NIST Software Assurance Reference Dataset — samate.nist.gov · 2024
Closest in time.
https://samate.nist.gov/SARD/test-suites/5
PostgreSQL 9.2.4 - NIST Software Assurance Reference Dataset — samate.nist.gov · 2024
Closest in time.
https://samate.nist.gov/SARD/test-suites/4
OpenSSL 1.0.1e - NIST Software Assurance Reference Dataset — samate.nist.gov · 2024
alphaXiv searches the wider corpus for related work and actual follow-ups.
alphaXiv is searching for related work…
Cited alongside, same era.
Chatgpt for vulnerability detection, classification, and repair: How far are we?
Michael Fu, Chakkrit Kla Tantithamthavorn, Van Nguyen, and Trung Le · 2023
Cited alongside, same era.
Software vulnerability detection using large language models
Moumita Das Purba, Arpita Ghosh, Benjamin J Radford, and Bill Chu · 2023
Cited alongside, same era.
https://lcamtuf.coredump.cx/afl/
american fuzzy lop — lcamtuf.coredump.cx · 2024
Cited alongside, same era.
https://codeql.github.com/
CodeQL — codeql.github.com · 2024
Cited alongside, same era.
https://dwheeler.com/flawfinder/
Flawfinder Home Page — dwheeler.com · 2024
Cited alongside, same era.
https://cppcheck.sourceforge.io/
Cppcheck - A tool for static C/C++ code analysis — cppcheck.sourceforge.io · 2024
Cited alongside, same era.
Vulnerability detection with code language models: How far are we?
Yangruibo Ding, Yanjun Fu, Omniyyah Ibrahim, Chawin Sitawarin, Xinyun Chen, Basel Alomair, David Wagner, Baishakhi Ray, and Yizheng Chen · 2024
Cited alongside, same era.
Closest in time.
https://samate.nist.gov/SARD/test-suites/3
GNU Grep 2.14 - NIST Software Assurance Reference Dataset — samate.nist.gov · 2024
Closest in time.
https://samate.nist.gov/SARD/test-suites/17
FFmpeg 1.2.2 - NIST Software Assurance Reference Dataset — samate.nist.gov · 2024
Closest in time.
https://samate.nist.gov/SARD/test-suites/18
Gimp 2.8.8 - NIST Software Assurance Reference Dataset — samate.nist.gov · 2024
Closest in time.
https://samate.nist.gov/SARD/test-suites/116
Juliet C/C++ 1.3.1 with extra support - NIST Software Assurance Reference Dataset — samate.nist.gov · 2024
Closest in time.
https://cwe.mitre.org/data/definitions/1000.html
CWE - CWE-1000: Research Concepts (4.14) — cwe.mitre.org · 2024
Closest in time.