4 papers
LLMs for Qualitative Data Analysis Fail on Security-specificComments in Human Experiments
Maria Camporese, Fabio Massacci, Yuanjun Gong
[Background:] Thematic analysis of free-text justifications in human experiments provides significant qualitative insights. Yet, it is costly because reliable annotations require m…
Repairing vulnerabilities without invisible hands. A differentiated replication study on LLMs
Maria Camporese, Fabio Massacci
Background: Automated Vulnerability Repair (AVR) is a fast-growing branch of program repair. Recent studies show that large language models (LLMs) outperform traditional techniques…
Using ML filters to help automated vulnerability repairs: when it helps and when it doesn't
Maria Camporese, Fabio Massacci
[Context:] The acceptance of candidate patches in automated program repair has been typically based on testing oracles. Testing requires typically a costly process of building the…
A Systematic Literature Review on Automated Exploit and Security Test Generation
Quang-Cuong Bui, Emanuele Iannone, Maria Camporese +7
The exploit or the Proof of Concept of the vulnerability plays an important role in developing superior vulnerability repair techniques, as it can be used as an oracle to verify th…