Evaluation of ChatGPT Model for Vulnerability Detection
Not on the map. Why?
Abstract (arXiv)
In this technical report, we evaluated the performance of the ChatGPT and GPT-3 models for the task of vulnerability detection in code. Our evaluation was conducted on our real-world dataset, using binary and multi-label classification tasks on CWE vulnerabilities. We decided to evaluate the model because it has shown good performance on other code-based tasks, such as solving programming challenges and understanding code at a high level. However, we found that the ChatGPT model performed no better than a dummy classifier for both binary and multi-label classification tasks for code vulnerability detection.
Key facts. Cited by 33 papers in the map (data through 14 Oct 2026). Builds on 6 of its 12 references that are in the map. First posted on arXiv 12 Apr 2023.
Builds on
6 of 12 references.
References · 6
- 2020Language Models are Few-Shot Learnerscited by 32,419
- 2022Chain-of-Thought Prompting Elicits Reasoning in Large Language Modelscited by 12,459
- 2021Evaluating Large Language Models Trained on Codecited by 8,320
- 2023Sparks of Artificial General Intelligence: Early experiments with GPT-4cited by 2,592
- 2023A Comprehensive Capability Analysis of GPT-3 and GPT-3.5 Series Modelscited by 246
- 2021GPT3Mix: Leveraging Large-scale Language Models for Text Augmentationcited by 187
Built on by
Citing papers per year: 2023: 11; 2024: 14; 2025: 6; 2026: 2.
33 papers.
Sort:
By area:
- 2023A Survey on Large Language Model (LLM) Security and Privacy: The Good, the Bad, and the Uglycited by 387
- 2023A Systematic Study and Comprehensive Evaluation of ChatGPT on Benchmark Datasetscited by 123
- 2024From LLMs to LLM-based Agents for Software Engineering: A Survey of Current, Challenges and Futurecited by 86
- 2024A New Era in LLM Security: Exploring Security Concerns in Real-World LLM-based Systemscited by 77
- 2024When LLMs Meet Cybersecurity: A Systematic Literature Reviewcited by 71
- 2023GPTScan: Detecting Logic Vulnerabilities in Smart Contracts by Combining GPT with Program Analysiscited by 65
- 2024Finetuning Large Language Models for Vulnerability Detectioncited by 40
- 2023DeceptPrompt: Exploiting LLM-driven Code Generation via Adversarial Natural Language Instructionscited by 33
- 2024Generalization-Enhanced Code Vulnerability Detection via Multi-Task Instruction Fine-Tuningcited by 30
- 2023How Far Have We Gone in Vulnerability Detection Using Large Language Modelscited by 27
- 2024Harnessing Large Language Models for Software Vulnerability Detection: A Comprehensive Benchmarking Studycited by 17
- 2023Can Large Language Models Find And Fix Vulnerable Software?cited by 15
21 more
- 2024Beyond Functional Correctness: Investigating Coding Style Inconsistencies in Large Language Modelscited by 15
- 2024Evaluation of LLM Chatbots for OSINT-based Cyber Threat Awarenesscited by 14
- 2024LLbezpeky: Leveraging Large Language Models for Vulnerability Detectioncited by 13
- 2024GenKubeSec: LLM-Based Kubernetes Misconfiguration Detection, Localization, Reasoning, and Remediationcited by 11
- 2024Software Vulnerability Prediction in Low-Resource Languages: An Empirical Study of CodeBERT and ChatGPTcited by 9
- 2025Do LLMs Consider Security? An Empirical Study on Responses to Programming Questionscited by 9
- 2025Large Language Models for Security Operations Centers: A Comprehensive Surveycited by 9
- 2023A Preliminary Analysis on the Code Generation Capabilities of GPT-3.5 and Bard AI Models for Java Functionscited by 8
- 2023Using ChatGPT as a Static Application Security Testing Toolcited by 8
- 2025Agent That Debugs: Dynamic State-Guided Vulnerability Repaircited by 7
- 2023Exploring the Limits of ChatGPT in Software Security Applicationscited by 6
- 2024ProveRAG: Provenance-Driven Vulnerability Analysis with Automated Retrieval-Augmented LLMscited by 6
- 2024Defining and Detecting Vulnerability in Human Evaluation Guidelines: A Preliminary Study Towards Reliable NLG Evaluationcited by 5
- 2025Large Language Models for In-File Vulnerability Localization Can Be "Lost in the End"cited by 5
- 2023How Does Naming Affect LLMs on Code Analysis Tasks?cited by 4
- 2026ShortCoder: Knowledge-Augmented Syntax Optimization for Token-Efficient Code Generationcited by 3
- 2023Evaluating GPT's Programming Capability through CodeWars' Katascited by 2
- 2025LLM Embedding-based Attribution (LEA): Quantifying Source Contributions to Generative Model's Response for Vulnerability Analysiscited by 2
- 2024Unveiling Hidden Links Between Unseen Security Entitiescited by 0
- 2025An Initial Exploration of Fine-tuning Small Language Models for Smart Contract Reentrancy Vulnerability Detectioncited by 0
- 2026QASecClaw: A Multi-Agent LLM Approach for False Positive Reduction in Static Application Security Testingcited by 0
- 2026QASecClaw: A Multi-Agent LLM Approach for False Positive Reduction in Static Application Security Testing3 May 2026
- 2026ShortCoder: Knowledge-Augmented Syntax Optimization for Token-Efficient Code Generation14 Jan 2026
- 2025Large Language Models for Security Operations Centers: A Comprehensive Survey13 Sep 2025
- 2025LLM Embedding-based Attribution (LEA): Quantifying Source Contributions to Generative Model's Response for Vulnerability Analysis12 Jun 2025
- 2025An Initial Exploration of Fine-tuning Small Language Models for Smart Contract Reentrancy Vulnerability Detection25 May 2025
- 2025Agent That Debugs: Dynamic State-Guided Vulnerability Repair10 Apr 2025
- 2025Do LLMs Consider Security? An Empirical Study on Responses to Programming Questions20 Feb 2025
- 2025Large Language Models for In-File Vulnerability Localization Can Be "Lost in the End"9 Feb 2025
- 2024ProveRAG: Provenance-Driven Vulnerability Analysis with Automated Retrieval-Augmented LLMs22 Oct 2024
- 2024From LLMs to LLM-based Agents for Software Engineering: A Survey of Current, Challenges and Future5 Aug 2024
- 2024Beyond Functional Correctness: Investigating Coding Style Inconsistencies in Large Language Models29 Jun 2024
- 2024Defining and Detecting Vulnerability in Human Evaluation Guidelines: A Preliminary Study Towards Reliable NLG Evaluation12 Jun 2024
21 more
- 2024Generalization-Enhanced Code Vulnerability Detection via Multi-Task Instruction Fine-Tuning6 Jun 2024
- 2024GenKubeSec: LLM-Based Kubernetes Misconfiguration Detection, Localization, Reasoning, and Remediation30 May 2024
- 2024Harnessing Large Language Models for Software Vulnerability Detection: A Comprehensive Benchmarking Study24 May 2024
- 2024When LLMs Meet Cybersecurity: A Systematic Literature Review6 May 2024
- 2024Software Vulnerability Prediction in Low-Resource Languages: An Empirical Study of CodeBERT and ChatGPT26 Apr 2024
- 2024Unveiling Hidden Links Between Unseen Security Entities4 Mar 2024
- 2024A New Era in LLM Security: Exploring Security Concerns in Real-World LLM-based Systems28 Feb 2024
- 2024Finetuning Large Language Models for Vulnerability Detection30 Jan 2024
- 2024Evaluation of LLM Chatbots for OSINT-based Cyber Threat Awareness26 Jan 2024
- 2024LLbezpeky: Leveraging Large Language Models for Vulnerability Detection2 Jan 2024
- 2023Exploring the Limits of ChatGPT in Software Security Applications8 Dec 2023
- 2023DeceptPrompt: Exploiting LLM-driven Code Generation via Adversarial Natural Language Instructions7 Dec 2023
- 2023A Survey on Large Language Model (LLM) Security and Privacy: The Good, the Bad, and the Ugly4 Dec 2023
- 2023How Far Have We Gone in Vulnerability Detection Using Large Language Models21 Nov 2023
- 2023Using ChatGPT as a Static Application Security Testing Tool28 Aug 2023
- 2023Can Large Language Models Find And Fix Vulnerable Software?20 Aug 2023
- 2023GPTScan: Detecting Logic Vulnerabilities in Smart Contracts by Combining GPT with Program Analysis7 Aug 2023
- 2023How Does Naming Affect LLMs on Code Analysis Tasks?24 Jul 2023
- 2023Evaluating GPT's Programming Capability through CodeWars' Katas31 May 2023
- 2023A Systematic Study and Comprehensive Evaluation of ChatGPT on Benchmark Datasets29 May 2023
- 2023A Preliminary Analysis on the Code Generation Capabilities of GPT-3.5 and Bard AI Models for Java Functions16 May 2023
- 2024From LLMs to LLM-based Agents for Software Engineering: A Survey of Current, Challenges and Futurecited by 86
- 2025Agent That Debugs: Dynamic State-Guided Vulnerability Repaircited by 7
- 2026QASecClaw: A Multi-Agent LLM Approach for False Positive Reduction in Static Application Security Testingcited by 0
- 2026QASecClaw: A Multi-Agent LLM Approach for False Positive Reduction in Static Application Security Testing3 May 2026
- 2025Agent That Debugs: Dynamic State-Guided Vulnerability Repair10 Apr 2025
- 2024From LLMs to LLM-based Agents for Software Engineering: A Survey of Current, Challenges and Future5 Aug 2024
- 2023A Survey on Large Language Model (LLM) Security and Privacy: The Good, the Bad, and the Uglycited by 387
- 2023A Systematic Study and Comprehensive Evaluation of ChatGPT on Benchmark Datasetscited by 123
- 2024A New Era in LLM Security: Exploring Security Concerns in Real-World LLM-based Systemscited by 77
- 2024When LLMs Meet Cybersecurity: A Systematic Literature Reviewcited by 71
- 2023GPTScan: Detecting Logic Vulnerabilities in Smart Contracts by Combining GPT with Program Analysiscited by 65
- 2024Finetuning Large Language Models for Vulnerability Detectioncited by 40
- 2023DeceptPrompt: Exploiting LLM-driven Code Generation via Adversarial Natural Language Instructionscited by 33
- 2024Generalization-Enhanced Code Vulnerability Detection via Multi-Task Instruction Fine-Tuningcited by 30
- 2023How Far Have We Gone in Vulnerability Detection Using Large Language Modelscited by 27
- 2024Harnessing Large Language Models for Software Vulnerability Detection: A Comprehensive Benchmarking Studycited by 17
- 2023Can Large Language Models Find And Fix Vulnerable Software?cited by 15
- 2024Beyond Functional Correctness: Investigating Coding Style Inconsistencies in Large Language Modelscited by 15
12 most cited of 28 All 28 (JSON)
- 2025Large Language Models for Security Operations Centers: A Comprehensive Survey13 Sep 2025
- 2025LLM Embedding-based Attribution (LEA): Quantifying Source Contributions to Generative Model's Response for Vulnerability Analysis12 Jun 2025
- 2025An Initial Exploration of Fine-tuning Small Language Models for Smart Contract Reentrancy Vulnerability Detection25 May 2025
- 2025Do LLMs Consider Security? An Empirical Study on Responses to Programming Questions20 Feb 2025
- 2025Large Language Models for In-File Vulnerability Localization Can Be "Lost in the End"9 Feb 2025
- 2024Beyond Functional Correctness: Investigating Coding Style Inconsistencies in Large Language Models29 Jun 2024
- 2024Defining and Detecting Vulnerability in Human Evaluation Guidelines: A Preliminary Study Towards Reliable NLG Evaluation12 Jun 2024
- 2024Generalization-Enhanced Code Vulnerability Detection via Multi-Task Instruction Fine-Tuning6 Jun 2024
- 2024GenKubeSec: LLM-Based Kubernetes Misconfiguration Detection, Localization, Reasoning, and Remediation30 May 2024
- 2024Harnessing Large Language Models for Software Vulnerability Detection: A Comprehensive Benchmarking Study24 May 2024
- 2024When LLMs Meet Cybersecurity: A Systematic Literature Review6 May 2024
- 2024Software Vulnerability Prediction in Low-Resource Languages: An Empirical Study of CodeBERT and ChatGPT26 Apr 2024
12 newest of 28 All 28 (JSON)