3 papers
cs.CR2026
Persistent Human Feedback, LLMs, and Static Analyzers for Secure Code Generation and Vulnerability Detection
Ehsan Firouzi, Mohammad Ghafari
Existing literature heavily relies on static analysis tools to evaluate LLMs for secure code generation and vulnerability detection. We reviewed 1,080 LLM-generated code samples, b…
cs.CR2026
Can Developers rely on LLMs for Secure IaC Development?
Ehsan Firouzi, Shardul Bhatt, Mohammad Ghafari
We investigated the capabilities of GPT-4o and Gemini 2.0 Flash for secure Infrastructure as Code (IaC) development. For security smell detection, on the Stack Overflow dataset, wh…
cs.CR2025
Security Bug Report Prediction Within and Across Projects: A Comparative Study of BERT and Random Forest
Farnaz Soltaniani, Mohammad Ghafari, Mohammed Sayagh
Early detection of security bug reports (SBRs) is crucial for preventing vulnerabilities and ensuring system reliability. While machine learning models have been developed for SBR…