Pop Quiz! Can a Large Language Model Help With Reverse Engineering?
Not on the map. Why?
Abstract (arXiv)
Large language models (such as OpenAI's Codex) have demonstrated impressive zero-shot multi-task capabilities in the software domain, including code explanation. In this work, we examine if this ability can be used to help with reverse engineering. Specifically, we investigate prompting Codex to identify the purpose, capabilities, and important variable names or values from code, even when the code is produced through decompilation. Alongside an examination of the model's responses in answering open-ended questions, we devise a true/false quiz framework to characterize the performance of the language model. We present an extensive quantitative analysis of the measured performance of the language model on a set of program purpose identification and information extraction tasks: of the 136,260 questions we posed, it answered 72,754 correctly. A key takeaway is that while promising, LLMs are not yet ready for zero-shot reverse engineering.
Key facts. Cited by 14 papers in the map (data through 14 Oct 2026). Builds on 7 of its 46 references that are in the map. First posted on arXiv 2 Feb 2022.
Builds on
7 of 46 references.
References · 7
- 2021Evaluating Large Language Models Trained on Codecited by 8,320
- 2022Text and Code Embeddings by Contrastive Pre-Trainingcited by 361
- 2021Studying the Usage of Text-To-Text Transfer Transformer to Support Code-Related Taskscited by 70
- 2019Recommendations for Datasets for Source Code Summarizationcited by 46
- 2020Improved Automatic Summarization of Subroutines via Attention to File Contextcited by 34
- 2020XDA: Accurate, Robust Disassembly with Transfer Learningcited by 21
- 2018ICSREF: A Framework for Automated Reverse Engineering of Industrial Control Systems Binariescited by 5
Built on by
Citing papers per year: 2022: 2; 2023: 3; 2024: 4; 2025: 3; 2026: 2.
14 papers.
Sort:
By area:
- 2023A Survey on Large Language Model (LLM) Security and Privacy: The Good, the Bad, and the Uglycited by 387
- 2022Automatic Generation of Programming Exercises and Code Explanations using Large Language Modelscited by 126
- 2024When LLMs Meet Cybersecurity: A Systematic Literature Reviewcited by 71
- 2024Large Language Models for Cyber Security: A Systematic Literature Reviewcited by 68
- 2023"It's Weird That it Knows What I Want": Usability and Interactions with Copilot for Novice Programmerscited by 64
- 2023InstructExcel: A Benchmark for Natural Language Instruction in Excelcited by 15
- 2022Codex Hacks HackerRank: Memorization Issues and a Framework for Code Synthesis Evaluationcited by 14
- 2024Exploring the Efficacy of Large Language Models (GPT-4) in Binary Reverse Engineeringcited by 8
- 2025Aero-LLM: A Distributed Framework for Secure UAV Communication and Intelligent Decision-Makingcited by 5
- 2025Automatically Generating Rules of Malicious Software Packages via Large Language Modelcited by 2
- 2024StackSight: Unveiling WebAssembly through Large Language Models and Neurosymbolic Chain-of-Thought Decompilationcited by 1
- 2025LLMs as Firmware Experts: A Runtime-Grown Tree-of-Agents Frameworkcited by 0
- 2026Humans vs. Machines: A Comparison With AI Agents in Software Reverse Engineering10 Oct 2026
- 2026Leveraging LLMs for Grammar Adaptation: A Study on Metamodel-Grammar Co-Evolution20 May 2026
- 2025LLMs as Firmware Experts: A Runtime-Grown Tree-of-Agents Framework23 Nov 2025
- 2025Automatically Generating Rules of Malicious Software Packages via Large Language Model24 Apr 2025
- 2025Aero-LLM: A Distributed Framework for Secure UAV Communication and Intelligent Decision-Making5 Feb 2025
- 2024Exploring the Efficacy of Large Language Models (GPT-4) in Binary Reverse Engineering9 Jun 2024
- 2024StackSight: Unveiling WebAssembly through Large Language Models and Neurosymbolic Chain-of-Thought Decompilation7 Jun 2024
- 2024Large Language Models for Cyber Security: A Systematic Literature Review8 May 2024
- 2024When LLMs Meet Cybersecurity: A Systematic Literature Review6 May 2024
- 2023A Survey on Large Language Model (LLM) Security and Privacy: The Good, the Bad, and the Ugly4 Dec 2023
- 2023InstructExcel: A Benchmark for Natural Language Instruction in Excel23 Oct 2023
- 2023"It's Weird That it Knows What I Want": Usability and Interactions with Copilot for Novice Programmers5 Apr 2023
- 2023A Survey on Large Language Model (LLM) Security and Privacy: The Good, the Bad, and the Uglycited by 387
- 2022Automatic Generation of Programming Exercises and Code Explanations using Large Language Modelscited by 126
- 2024When LLMs Meet Cybersecurity: A Systematic Literature Reviewcited by 71
- 2024Large Language Models for Cyber Security: A Systematic Literature Reviewcited by 68
- 2023"It's Weird That it Knows What I Want": Usability and Interactions with Copilot for Novice Programmerscited by 64
- 2023InstructExcel: A Benchmark for Natural Language Instruction in Excelcited by 15
- 2022Codex Hacks HackerRank: Memorization Issues and a Framework for Code Synthesis Evaluationcited by 14
- 2024Exploring the Efficacy of Large Language Models (GPT-4) in Binary Reverse Engineeringcited by 8
- 2025Aero-LLM: A Distributed Framework for Secure UAV Communication and Intelligent Decision-Makingcited by 5
- 2025Automatically Generating Rules of Malicious Software Packages via Large Language Modelcited by 2
- 2026Leveraging LLMs for Grammar Adaptation: A Study on Metamodel-Grammar Co-Evolutioncited by 0
- 2026Leveraging LLMs for Grammar Adaptation: A Study on Metamodel-Grammar Co-Evolution20 May 2026
- 2025Automatically Generating Rules of Malicious Software Packages via Large Language Model24 Apr 2025
- 2025Aero-LLM: A Distributed Framework for Secure UAV Communication and Intelligent Decision-Making5 Feb 2025
- 2024Exploring the Efficacy of Large Language Models (GPT-4) in Binary Reverse Engineering9 Jun 2024
- 2024Large Language Models for Cyber Security: A Systematic Literature Review8 May 2024
- 2024When LLMs Meet Cybersecurity: A Systematic Literature Review6 May 2024
- 2023A Survey on Large Language Model (LLM) Security and Privacy: The Good, the Bad, and the Ugly4 Dec 2023
- 2023InstructExcel: A Benchmark for Natural Language Instruction in Excel23 Oct 2023
- 2023"It's Weird That it Knows What I Want": Usability and Interactions with Copilot for Novice Programmers5 Apr 2023
- 2022Codex Hacks HackerRank: Memorization Issues and a Framework for Code Synthesis Evaluation6 Dec 2022
- 2022Automatic Generation of Programming Exercises and Code Explanations using Large Language Models3 Jun 2022