Deep Learning Based Vulnerability Detection: Are We There Yet?

2022/09/01 by Saikat Chakraborty, Rahul Krishna, Yangruibo Ding +1 · 28 citations

paper · doi:10.1109/tse.2021.3087402

Cited by

• SoK: Understanding (New) Security Issues Across AI4Code Use Cases
• Software Vulnerability Management in the Era of Artificial Intelligence: An Industry Perspective
• From Lab to Reality: A Practical Evaluation of Deep Learning Models and LLMs for Vulnerability Detection
• Llama-based source code vulnerability detection: Prompt engineering vs Fine tuning
• Retrieval-Augmented Few-Shot Prompting Versus Fine-Tuning for Code Vulnerability Detection
• VULPO: Context-Aware Vulnerability Detection via On-Policy LLM Optimization
• A Large-Scale Collection Of (Non-)Actionable Static Code Analysis Reports
• A Comprehensive Empirical Evaluation of Agent Frameworks on Code-centric Software Engineering Tasks
• MANDO-LLM: Heterogeneous Graph Transformers with Large Language Models for Smart Contract Vulnerability Detection
• Learning to Triage Taint Flows Reported by Dynamic Program Analysis in Node.js Packages
• One Bug, Hundreds Behind: LLMs for Large-Scale Bug Discovery
• Evaluating Line-level Localization Ability of Learning-based Code Vulnerability Detection Models
• Vul-R2: A Reasoning LLM for Automated Vulnerability Repair
• NatGVD: Natural Adversarial Example Attack towards Graph-based Vulnerability Detection
• QuiLL: An LLM-Based Vulnerability Assessment Framework for the Wild
• LLaVul: A Multimodal LLM for Interpretable Vulnerability Reasoning about Source Code
• Optimizing Code Embeddings and ML Classifiers for Python Source Code Vulnerability Detection
• Ensembling Large Language Models for Code Vulnerability Detection: An Empirical Evaluation
• VulAgent: Hypothesis-Validation based Multi-Agent Vulnerability Detection
• Large Language Models for Security Operations Centers: A Comprehensive Survey
• An Empirical Study of Vulnerabilities in Python Packages and Their Detection
• Deep Learning Based Concurrency Bug Detection and Localization
• AI Agentic Vulnerability Injection And Transformation with Optimized Reasoning
• SIExVulTS: Sensitive Information Exposure Vulnerability Detection System using Transformer Models and Static Analysis
• When Machine Learning Meets Vulnerability Discovery: Challenges and Lessons Learned
• Data and Context Matter: Towards Generalizing AI-based Software Vulnerability Detection
• Out of Distribution, Out of Luck: How Well Can LLMs Trained on Vulnerability Datasets Detect Top 25 CWE Weaknesses?
• Repairing vulnerabilities without invisible hands. A differentiated replication study on LLMs