Prompt-Enhanced Software Vulnerability Detection Using ChatGPT
Not on the map. Why?
Abstract (arXiv)
With the increase in software vulnerabilities that cause significant economic and social losses, automatic vulnerability detection has become essential in software development and maintenance. Recently, large language models (LLMs) like GPT have received considerable attention due to their stunning intelligence, and some studies consider using ChatGPT for vulnerability detection. However, they do not fully consider the characteristics of LLMs, since their designed questions to ChatGPT are simple without a specific prompt design tailored for vulnerability detection. This paper launches a study on the performance of software vulnerability detection using ChatGPT with different prompt designs. Firstly, we complement previous work by applying various improvements to the basic prompt. Moreover, we incorporate structural and sequential auxiliary information to improve the prompt design. Besides, we leverage ChatGPT's ability of memorizing multi-round dialogue to design suitable prompts for vulnerability detection. We conduct extensive experiments on two vulnerability datasets to demonstrate the effectiveness of prompt-enhanced vulnerability detection using ChatGPT. We also analyze the merit and demerit of using ChatGPT for vulnerability detection. Repository: https://github.com/KDEGroup/LLMVulnerabilityDetection.
Key facts. Cited by 51 papers in the map (data through 7 Oct 2026). First posted on arXiv 24 Aug 2023.
Builds on
No reference list yet.
Built on by
Citing papers per year: 2023: 3; 2024: 21; 2025: 19; 2026: 8.
51 papers.
Sort:
By area:
- 2024When LLMs Meet Cybersecurity: A Systematic Literature Reviewcited by 70
- 2024Vul-RAG: Enhancing LLM-based Vulnerability Detection via Knowledge-level RAGcited by 67
- 2024Large Language Models for Cyber Security: A Systematic Literature Reviewcited by 65
- 2023Unifying the Perspectives of NLP and Software Engineering: A Survey on Language Models for Codecited by 62
- 2024Agents in Software Engineering: Survey, Landscape, and Visioncited by 60
- 2024Generalization-Enhanced Code Vulnerability Detection via Multi-Task Instruction Fine-Tuningcited by 30
- 2023How Far Have We Gone in Vulnerability Detection Using Large Language Modelscited by 27
- 2024How secure is AI-generated Code: A Large-Scale Comparison of Large Language Modelscited by 23
- 2025KNighter: Transforming Static Analysis with LLM-Synthesized Checkerscited by 22
- 2025Let the Trial Begin: A Mock-Court Approach to Vulnerability Detection using LLM-Based Agentscited by 20
- 2024Multi-role Consensus through LLMs Discussions for Vulnerability Detectioncited by 19
- 2024To Err is Machine: Vulnerability Detection Challenges LLM Reasoningcited by 17
38 more
- 2024Harnessing Large Language Models for Software Vulnerability Detection: A Comprehensive Benchmarking Studycited by 17
- 2024MdEval: Massively Multilingual Code Debuggingcited by 16
- 2024LLbezpeky: Leveraging Large Language Models for Vulnerability Detectioncited by 13
- 2025A Contemporary Survey of Large Language Model Assisted Program Analysiscited by 10
- 2024From Vulnerabilities to Remediation: A Systematic Literature Review of LLMs in Code Securitycited by 9
- 2024Software Vulnerability Prediction in Low-Resource Languages: An Empirical Study of CodeBERT and ChatGPTcited by 8
- 2025VulAgent: Hypothesis-Validation based Multi-Agent Vulnerability Detectioncited by 8
- 2025Agent That Debugs: Dynamic State-Guided Vulnerability Repaircited by 7
- 2024An Insight into Security Code Review with LLMs: Capabilities, Obstacles, and Influential Factorscited by 6
- 2024CoDefeater: Using LLMs To Find Defeaters in Assurance Casescited by 5
- 2025Large Language Models for In-File Vulnerability Localization Can Be "Lost in the End"cited by 5
- 2025IFEvalCode: Controlled Code Generationcited by 5
- 2025Generative AI for Self-Adaptive Systems: State of the Art and Research Roadmapcited by 5
- 2025Improving LLM Reasoning for Vulnerability Detection via Group Relative Policy Optimizationcited by 4
- 2025RepoDebug: Repository-Level Multi-Task and Multi-Language Debugging Evaluation of Large Language Modelscited by 4
- 2025VulInstruct: Teaching LLMs Root-Cause Reasoning for Vulnerability Detection via Security Specificationscited by 4
- 2025A Systematic Study of Code Obfuscation Against LLM-based Vulnerability Detectioncited by 4
- 2026From SFT to RL: Demystifying the Post-Training Pipeline for LLM-based Vulnerability Detectioncited by 4
- 2025Evaluating LLaMA 3.2 for Software Vulnerability Detectioncited by 3
- 2025Revisiting Pre-trained Language Models for Vulnerability Detectioncited by 3
- 2025VULPO: Context-Aware Vulnerability Detection via On-Policy LLM Optimizationcited by 3
- 2024Generative transformations and patterns in LLM-native approaches for software verification and falsificationcited by 2
- 2024A Qualitative Study on Using ChatGPT for Software Security: Perception vs. Practicalitycited by 2
- 2025Identifying Helpful Context for LLM-based Vulnerability Repair: A Preliminary Studycited by 2
- 2023Exploring Large Language Models in Resolving Environment-Related Crash Bugs: Localizing and Repairingcited by 1
- 2024ANVIL: Anomaly-based Vulnerability Identification without Labelled Training Datacited by 1
- 2024Comparing Unidirectional, Bidirectional, and Word2vec Models for Discovering Vulnerabilities in Compiled Lifted Codecited by 1
- 2024FTSmartAudit: A Knowledge Distillation-Enhanced Framework for Automated Smart Contract Auditing Using Fine-Tuned LLMscited by 1
- 2024Direction for Detection: A Survey of Automated Vulnerability Detection and all of its Pain Pointscited by 0
- 2025Large Language Models in Cybersecurity: Applications, Vulnerabilities, and Defense Techniquescited by 0
- 2025WALL: A Web Application for Automated Quality Assurance using Large Language Modelscited by 0
- 2025C-ing Clearly: Enhanced Binary Code Explanations using C codecited by 0
- 2026Focus on What Matters: Fisher-Guided Adaptive Multimodal Fusion for Vulnerability Detectioncited by 0
- 2026One Model, Many Skills: Parameter-Efficient Fine-Tuning for Multitask Code Analysiscited by 0
- 2026Improving MPI Error Detection and Repair with Large Language Models and Bug Referencescited by 0
- 2026Security of LLM-generated Code: A Comparative Analysiscited by 0
- 2026Words Speak Louder Than Code: Investigating Cognitive Heuristics in LLM-Based Code Vulnerability Detectioncited by 0
- 2026Evaluating Large Language Models for Symbolic Security Protocol Analysiscited by 0
50 most cited of 51 All 51 (JSON)
- 2026ARQ: Agentic CodeQL Query Refinement for C/C++ Vulnerability Detection21 Aug 2026
- 2026Evaluating Large Language Models for Symbolic Security Protocol Analysis22 Jul 2026
- 2026Words Speak Louder Than Code: Investigating Cognitive Heuristics in LLM-Based Code Vulnerability Detection29 Jun 2026
- 2026Security of LLM-generated Code: A Comparative Analysis21 May 2026
- 2026Improving MPI Error Detection and Repair with Large Language Models and Bug References2 Apr 2026
- 2026From SFT to RL: Demystifying the Post-Training Pipeline for LLM-based Vulnerability Detection15 Feb 2026
- 2026One Model, Many Skills: Parameter-Efficient Fine-Tuning for Multitask Code Analysis3 Feb 2026
- 2026Focus on What Matters: Fisher-Guided Adaptive Multimodal Fusion for Vulnerability Detection5 Jan 2026
- 2025A Systematic Study of Code Obfuscation Against LLM-based Vulnerability Detection18 Dec 2025
- 2025C-ing Clearly: Enhanced Binary Code Explanations using C code16 Dec 2025
- 2025Generative AI for Self-Adaptive Systems: State of the Art and Research Roadmap4 Dec 2025
- 2025VULPO: Context-Aware Vulnerability Detection via On-Policy LLM Optimization14 Nov 2025
38 more
- 2025VulInstruct: Teaching LLMs Root-Cause Reasoning for Vulnerability Detection via Security Specifications6 Nov 2025
- 2025VulAgent: Hypothesis-Validation based Multi-Agent Vulnerability Detection15 Sep 2025
- 2025WALL: A Web Application for Automated Quality Assurance using Large Language Models12 Sep 2025
- 2025RepoDebug: Repository-Level Multi-Task and Multi-Language Debugging Evaluation of Large Language Models4 Sep 2025
- 2025IFEvalCode: Controlled Code Generation30 Jul 2025
- 2025Revisiting Pre-trained Language Models for Vulnerability Detection22 Jul 2025
- 2025Large Language Models in Cybersecurity: Applications, Vulnerabilities, and Defense Techniques18 Jul 2025
- 2025Improving LLM Reasoning for Vulnerability Detection via Group Relative Policy Optimization3 Jul 2025
- 2025Identifying Helpful Context for LLM-based Vulnerability Repair: A Preliminary Study13 Jun 2025
- 2025Let the Trial Begin: A Mock-Court Approach to Vulnerability Detection using LLM-Based Agents16 May 2025
- 2025Agent That Debugs: Dynamic State-Guided Vulnerability Repair10 Apr 2025
- 2025KNighter: Transforming Static Analysis with LLM-Synthesized Checkers12 Mar 2025
- 2025Evaluating LLaMA 3.2 for Software Vulnerability Detection10 Mar 2025
- 2025Large Language Models for In-File Vulnerability Localization Can Be "Lost in the End"9 Feb 2025
- 2025A Contemporary Survey of Large Language Model Assisted Program Analysis5 Feb 2025
- 2024From Vulnerabilities to Remediation: A Systematic Literature Review of LLMs in Code Security19 Dec 2024
- 2024Direction for Detection: A Survey of Automated Vulnerability Detection and all of its Pain Points15 Dec 2024
- 2024MdEval: Massively Multilingual Code Debugging4 Nov 2024
- 2024FTSmartAudit: A Knowledge Distillation-Enhanced Framework for Automated Smart Contract Auditing Using Fine-Tuned LLMs17 Oct 2024
- 2024Comparing Unidirectional, Bidirectional, and Word2vec Models for Discovering Vulnerabilities in Compiled Lifted Code26 Sep 2024
- 2024Agents in Software Engineering: Survey, Landscape, and Vision13 Sep 2024
- 2024ANVIL: Anomaly-based Vulnerability Identification without Labelled Training Data28 Aug 2024
- 2024A Qualitative Study on Using ChatGPT for Software Security: Perception vs. Practicality1 Aug 2024
- 2024CoDefeater: Using LLMs To Find Defeaters in Assurance Cases18 Jul 2024
- 2024Vul-RAG: Enhancing LLM-based Vulnerability Detection via Knowledge-level RAG17 Jun 2024
- 2024Generalization-Enhanced Code Vulnerability Detection via Multi-Task Instruction Fine-Tuning6 Jun 2024
- 2024Harnessing Large Language Models for Software Vulnerability Detection: A Comprehensive Benchmarking Study24 May 2024
- 2024Large Language Models for Cyber Security: A Systematic Literature Review8 May 2024
- 2024When LLMs Meet Cybersecurity: A Systematic Literature Review6 May 2024
- 2024How secure is AI-generated Code: A Large-Scale Comparison of Large Language Models29 Apr 2024
- 2024Software Vulnerability Prediction in Low-Resource Languages: An Empirical Study of CodeBERT and ChatGPT26 Apr 2024
- 2024Generative transformations and patterns in LLM-native approaches for software verification and falsification14 Apr 2024
- 2024To Err is Machine: Vulnerability Detection Challenges LLM Reasoning25 Mar 2024
- 2024Multi-role Consensus through LLMs Discussions for Vulnerability Detection21 Mar 2024
- 2024An Insight into Security Code Review with LLMs: Capabilities, Obstacles, and Influential Factors29 Jan 2024
- 2024LLbezpeky: Leveraging Large Language Models for Vulnerability Detection2 Jan 2024
- 2023Exploring Large Language Models in Resolving Environment-Related Crash Bugs: Localizing and Repairing16 Dec 2023
- 2023How Far Have We Gone in Vulnerability Detection Using Large Language Models21 Nov 2023
50 newest of 51 All 51 (JSON)
- 2024Agents in Software Engineering: Survey, Landscape, and Visioncited by 60
- 2025Let the Trial Begin: A Mock-Court Approach to Vulnerability Detection using LLM-Based Agentscited by 20
- 2025VulAgent: Hypothesis-Validation based Multi-Agent Vulnerability Detectioncited by 8
- 2025Agent That Debugs: Dynamic State-Guided Vulnerability Repaircited by 7
- 2026ARQ: Agentic CodeQL Query Refinement for C/C++ Vulnerability Detectioncited by 0
- 2026ARQ: Agentic CodeQL Query Refinement for C/C++ Vulnerability Detection21 Aug 2026
- 2025VulAgent: Hypothesis-Validation based Multi-Agent Vulnerability Detection15 Sep 2025
- 2025Let the Trial Begin: A Mock-Court Approach to Vulnerability Detection using LLM-Based Agents16 May 2025
- 2025Agent That Debugs: Dynamic State-Guided Vulnerability Repair10 Apr 2025
- 2024Agents in Software Engineering: Survey, Landscape, and Vision13 Sep 2024
- 2024To Err is Machine: Vulnerability Detection Challenges LLM Reasoningcited by 17
- 2024An Insight into Security Code Review with LLMs: Capabilities, Obstacles, and Influential Factorscited by 6
- 2025Improving LLM Reasoning for Vulnerability Detection via Group Relative Policy Optimizationcited by 4
- 2025VulInstruct: Teaching LLMs Root-Cause Reasoning for Vulnerability Detection via Security Specificationscited by 4
- 2025VULPO: Context-Aware Vulnerability Detection via On-Policy LLM Optimizationcited by 3
- 2025VULPO: Context-Aware Vulnerability Detection via On-Policy LLM Optimization14 Nov 2025
- 2025VulInstruct: Teaching LLMs Root-Cause Reasoning for Vulnerability Detection via Security Specifications6 Nov 2025
- 2025Improving LLM Reasoning for Vulnerability Detection via Group Relative Policy Optimization3 Jul 2025
- 2024To Err is Machine: Vulnerability Detection Challenges LLM Reasoning25 Mar 2024
- 2024An Insight into Security Code Review with LLMs: Capabilities, Obstacles, and Influential Factors29 Jan 2024
- 2024When LLMs Meet Cybersecurity: A Systematic Literature Reviewcited by 70
- 2024Vul-RAG: Enhancing LLM-based Vulnerability Detection via Knowledge-level RAGcited by 67
- 2024Large Language Models for Cyber Security: A Systematic Literature Reviewcited by 65
- 2023Unifying the Perspectives of NLP and Software Engineering: A Survey on Language Models for Codecited by 62
- 2024Generalization-Enhanced Code Vulnerability Detection via Multi-Task Instruction Fine-Tuningcited by 30
- 2023How Far Have We Gone in Vulnerability Detection Using Large Language Modelscited by 27
- 2024How secure is AI-generated Code: A Large-Scale Comparison of Large Language Modelscited by 23
- 2025KNighter: Transforming Static Analysis with LLM-Synthesized Checkerscited by 22
- 2024Multi-role Consensus through LLMs Discussions for Vulnerability Detectioncited by 19
- 2024Harnessing Large Language Models for Software Vulnerability Detection: A Comprehensive Benchmarking Studycited by 17
- 2024MdEval: Massively Multilingual Code Debuggingcited by 16
- 2024LLbezpeky: Leveraging Large Language Models for Vulnerability Detectioncited by 13
12 most cited of 40 All 40 (JSON)
- 2026Evaluating Large Language Models for Symbolic Security Protocol Analysis22 Jul 2026
- 2026Words Speak Louder Than Code: Investigating Cognitive Heuristics in LLM-Based Code Vulnerability Detection29 Jun 2026
- 2026Security of LLM-generated Code: A Comparative Analysis21 May 2026
- 2026Improving MPI Error Detection and Repair with Large Language Models and Bug References2 Apr 2026
- 2026One Model, Many Skills: Parameter-Efficient Fine-Tuning for Multitask Code Analysis3 Feb 2026
- 2026Focus on What Matters: Fisher-Guided Adaptive Multimodal Fusion for Vulnerability Detection5 Jan 2026
- 2025A Systematic Study of Code Obfuscation Against LLM-based Vulnerability Detection18 Dec 2025
- 2025C-ing Clearly: Enhanced Binary Code Explanations using C code16 Dec 2025
- 2025Generative AI for Self-Adaptive Systems: State of the Art and Research Roadmap4 Dec 2025
- 2025WALL: A Web Application for Automated Quality Assurance using Large Language Models12 Sep 2025
- 2025RepoDebug: Repository-Level Multi-Task and Multi-Language Debugging Evaluation of Large Language Models4 Sep 2025
- 2025IFEvalCode: Controlled Code Generation30 Jul 2025
12 newest of 40 All 40 (JSON)