4 papers
Towards Better Static Code Analysis Reports: Sentence Transformer-based Filtering of Non-Actionable Alerts
Tamás Aladics, Norbert Vándor, Rudolf Ferenc +1
Static code analysis (SCA) tools are widely used as effective ways to detect bugs and vulnerabilities in software systems. However, the reports generated by these tools often conta…
A Large-Scale Collection Of (Non-)Actionable Static Code Analysis Reports
Dávid Kószó, Tamás Aladics, Rudolf Ferenc +1
Static Code Analysis (SCA) tools, while invaluable for identifying potential coding problems, functional bugs, or vulnerabilities, often generate an overwhelming number of warnings…
Identifying Helpful Context for LLM-based Vulnerability Repair: A Preliminary Study
Gábor Antal, Bence Bogenfürst, Rudolf Ferenc +1
Recent advancements in large language models (LLMs) have shown promise for automated vulnerability detection and repair in software systems. This paper investigates the performance…
Leveraging GPT-4 for Vulnerability-Witnessing Unit Test Generation
Gábor Antal, Dénes Bán, Martin Isztin +2
In the life-cycle of software development, testing plays a crucial role in quality assurance. Proper testing not only increases code coverage and prevents regressions but it can al…