From the 1 of 6 linked papers with an AI index.
6 papers
AutoTrace: From Patches to Triggers via Agentic Interprocedural Exploration
Arastoo Zibaeirad, Marco Vieira, Thomas Zimmermann
AutoTrace is an agentic pipeline that uses LLM‑driven exploration of code property graphs to locate vulnerability triggers across interprocedural call chains, achieving state‑of‑th…
Calibration Without Comprehension: Diagnosing the Limits of Fine-Tuning LLMs for Vulnerability Detection in Systems Software
Arastoo Zibaeirad, Marco Vieira
Whether LLMs scoring well on vulnerability benchmarks genuinely reason about security or merely pattern-match on contaminated data remains unresolved. We present CWE-Trace, a frame…
LLM-Based Robustness Testing of Microservice Applications: An Empirical Study
Hrushitha Goud Tigulla, Marco Vieira
Malformed, missing, or boundary-value inputs in microservice APIs can cascade across dependent services, threatening reliability. Robustness testing systematically exercises such i…
Diverse LLMs vs. Vulnerabilities: Who Detects and Fixes Them Better?
Arastoo Zibaeirad, Marco Vieira
Large Language Models (LLMs) are increasingly being studied for Software Vulnerability Detection (SVD) and Repair (SVR). Individual LLMs have demonstrated code understanding abilit…
Reasoning with LLMs for Zero-Shot Vulnerability Detection
Arastoo Zibaeirad, Marco Vieira
Automating software vulnerability detection (SVD) remains a critical challenge in an era of increasingly complex and interdependent software systems. Despite significant advances i…
VulnLLMEval: A Framework for Evaluating Large Language Models in Software Vulnerability Detection and Patching
Arastoo Zibaeirad, Marco Vieira
Large Language Models (LLMs) have shown promise in tasks like code translation, prompting interest in their potential for automating software vulnerability detection (SVD) and patc…