Harnessing the Power of LLMs in Source Code Vulnerability Detection

F. Yamaguchi, and M. Lottmann, and K. Rieck, “Generalized vulnerability extrapolation using abstract syntax trees,” in Proceedings of the 28th Annual Computer Security Applications Conference, 2012, pp. 359–368

2012

Earlier work this paper cites.

F. Yamaguchi, and C. Wressnegger, and H. Gascon, and K. Rieck, “Chucky: Exposing missing checks in source code for vulnerability discovery,” in Proceedings of the 2013 ACM SIGSAC conference on Computer & communications security, 2013, pp. 499–510

2013

Earlier work this paper cites.

Z. Li, and D. Zou, and S. Xu, and H. Jin, H. Qi, and J. Hu, “Vulpecker: an automated vulnerability detection system based on code similarity analysis,” in Proceedings of the 32nd Annual Conference on Computer Security Applications, 2016, pp. 201–213

2016

Earlier work this paper cites.

G. Grieco, and G. L. Grinblat, and L. Uzal, and S. Rawat, and J. Feist, and L. Mounier, “Toward large-scale vulnerability discovery using machine learning,” in Proceedings of the Sixth ACM Conference on Data and Application Security and Privacy, 2016, pp. 85–96

2016

Earlier work this paper cites.

I. Goodfellow, and Y. Bengio, and A. Courville, Deep Learning, MIT Press, 2016, http://www.deeplearningbook.org

2016

Earlier work this paper cites.

C. Arnold, “After equifax hack, calls for big changes in credit reporting industry,” 2017

2017

Earlier work this paper cites.

S. Kim, and S. Woo, and H. Lee, and H. Oh, “Vuddy: A scalable approach for vulnerable code clone discovery,” in 2017 IEEE Symposium on Security and Privacy (SP). IEEE, 2017, pp. 595–614

2017

Earlier work this paper cites.

P. J Morrison, and R. Pandita, and X. Xiao, and R. Chillarege, and L. Williams, “Are vulnerabilities discovered and resolved like other defects?,” Empirical Software Engineering, vol. 23(3), 2018

2018

Earlier work this paper cites.

“Cve Common vulnerabilities and exposures,” 2018

2018

Cited alongside, same era.

Z. Li, and D. Zou, and S. Xu, and X. Ou, and H. Jin, and S. Wang, and Z. Deng, and Y. Zhong, “Vuldeepecker: A deep learning-based system for vulnerability detection,” arXiv preprint arXiv:1801.01681, 2018

Original

2018

Cited alongside, same era.

J. Devlin, M. Chang, K. Lee, K. Toutanova, "Bert: Pre-training of deep bidirectional transformers for language understanding", arXiv preprint arXiv:1810.04805, 2018

Original

2018

Cited alongside, same era.

X. Du, and B. Chen, and Y. Li, and J. Guo, and Y. Zhou, and Y. Liu, and Y. Jiang, “Leopard: Identifying vulnerable code for vulnerability assessment through program metrics,” in 2019 IEEE/ACM 41st International Conference on Software Engineering (ICSE). IEEE, 2019, pp. 60–71

2019

Cited alongside, same era.

V. Sanh, L. Debut, J. Chaumond, T. Wolf, "DistilBERT, a distilled version of BERT: smaller, faster, cheaper and lighter", arXiv preprint arXiv:1910.01108, 2019

“Nvd: National vulnerability database,” 2021

2021

Later among the works it cites.

“Sard: Software assurance reference dataset,” 2021

2021

Later among the works it cites.

“Llvm intermediate representation,” 2021

2021

Later among the works it cites.

Coimbra, David, Sofia Reis, Rui Abreu, Corina Păsăreanu, and Hakan Erdogmus. "On using distributed representations of source code for the detection of C security vulnerabilities." arXiv preprint arXiv:2106.01367 (2021)

Original

2021

Later among the works it cites.

A. Mahyari, "A Hierarchical Deep Neural Network for Detecting Lines of Codes with Vulnerabilities," 22nd IEEE International Conference on Software Quality, Reliability, and Security (QRS 2022), Dec 2022

2022

Later among the works it cites.