2 papers
cs.CR2026
Persistent Human Feedback, LLMs, and Static Analyzers for Secure Code Generation and Vulnerability Detection
Ehsan Firouzi, Mohammad Ghafari
Existing literature heavily relies on static analysis tools to evaluate LLMs for secure code generation and vulnerability detection. We reviewed 1,080 LLM-generated code samples, b…
cs.CR2026
Can Developers rely on LLMs for Secure IaC Development?
Ehsan Firouzi, Shardul Bhatt, Mohammad Ghafari
We investigated the capabilities of GPT-4o and Gemini 2.0 Flash for secure Infrastructure as Code (IaC) development. For security smell detection, on the Stack Overflow dataset, wh…