Large Language Model for Vulnerability Detection: Emerging Results and Future Directions
Not on the map. Why?
Abstract (arXiv)
Previous learning-based vulnerability detection methods relied on either medium-sized pre-trained models or smaller neural networks from scratch. Recent advancements in Large Pre-Trained Language Models (LLMs) have showcased remarkable few-shot learning capabilities in various tasks. However, the effectiveness of LLMs in detecting software vulnerabilities is largely unexplored. This paper aims to bridge this gap by exploring how LLMs perform with various prompts, particularly focusing on two state-of-the-art LLMs: GPT-3.5 and GPT-4. Our experimental results showed that GPT-3.5 achieves competitive performance with the prior state-of-the-art vulnerability detection approach and GPT-4 consistently outperformed the state-of-the-art.
Key facts. Cited by 44 papers in the map (data through 7 Oct 2026). First posted on arXiv 27 Jan 2024.
Builds on
No reference list yet.
Built on by
Citing papers per year: 2024: 13; 2025: 21; 2026: 10.
44 papers.
Sort:
By area:
- 2024Vul-RAG: Enhancing LLM-based Vulnerability Detection via Knowledge-level RAGcited by 67
- 2024Source Code Summarization in the Era of Large Language Modelscited by 30
- 2025KNighter: Transforming Static Analysis with LLM-Synthesized Checkerscited by 22
- 2025Let the Trial Begin: A Mock-Court Approach to Vulnerability Detection using LLM-Based Agentscited by 20
- 2024Multi-role Consensus through LLMs Discussions for Vulnerability Detectioncited by 19
- 2024Harnessing Large Language Models for Software Vulnerability Detection: A Comprehensive Benchmarking Studycited by 17
- 2025Reflections on the Reproducibility of Commercial LLM Performance in Empirical Software Engineering Studiescited by 12
- 2024VulDetectBench: Evaluating the Deep Capability of Vulnerability Detection with Large Language Modelscited by 11
- 2024Are Large Language Models Memorizing Bug Benchmarks?cited by 11
- 2024Investigating Large Language Models for Code Vulnerability Detection: An Experimental Studycited by 11
- 2025Do LLMs Consider Security? An Empirical Study on Responses to Programming Questionscited by 8
- 2025A Systematic Literature Review on Detecting Software Vulnerabilities with Large Language Modelscited by 8
32 more
- 2025LAURA: Enhancing Code Review Generation with Context-Enriched Retrieval-Augmented LLMcited by 8
- 2025Bridging AI and Software Security: A Comparative Vulnerability Assessment of LLM Agent Deployment Paradigmscited by 7
- 2025MAVUL: Multi-Agent Vulnerability Detection via Contextual Reasoning and Interactive Refinementcited by 6
- 2026Co-RedTeam: Orchestrated Security Discovery and Exploitation with LLM Agentscited by 6
- 2024CoDefeater: Using LLMs To Find Defeaters in Assurance Casescited by 5
- 2025Large Language Models for In-File Vulnerability Localization Can Be "Lost in the End"cited by 5
- 2025Generative AI for Self-Adaptive Systems: State of the Art and Research Roadmapcited by 5
- 2026Reducing False Positives in Static Bug Detection with LLMs: An Empirical Study in Industrycited by 5
- 2026Sifting the Noise: A Comparative Study of LLM Agents in Vulnerability False Positive Filteringcited by 5
- 2025LPASS: Linear Probes as Stepping Stones for vulnerability detection using compressed LLMscited by 4
- 2025A Mixture of Linear Corrections Generates Secure Codecited by 4
- 2025VulInstruct: Teaching LLMs Root-Cause Reasoning for Vulnerability Detection via Security Specificationscited by 4
- 2025A Systematic Study of Code Obfuscation Against LLM-based Vulnerability Detectioncited by 4
- 2026AnyPoC: Universal Proof-of-Concept Test Generation for Scalable LLM-Based Bug Detectioncited by 4
- 2025Revisiting Pre-trained Language Models for Vulnerability Detectioncited by 3
- 2025OntoLogX: Ontology-Guided Knowledge Graph Extraction from Cybersecurity Logs with Large Language Modelscited by 3
- 2026Measuring and Exploiting Contextual Bias in LLM-Assisted Security Code Reviewcited by 3
- 2024Generative transformations and patterns in LLM-native approaches for software verification and falsificationcited by 2
- 2025CGP-Tuning: Structure-Aware Soft Prompt Tuning for Code Vulnerability Detectioncited by 2
- 2026VeriCWEty: Embedding enabled Line-Level CWE Detection in Verilogcited by 2
- 2024Comparing Unidirectional, Bidirectional, and Word2vec Models for Discovering Vulnerabilities in Compiled Lifted Codecited by 1
- 2024What You See Is Not Always What You Get: Evaluating GPT's Comprehension of Source Codecited by 1
- 2026Revelio: Cost-Efficient Agentic Memory Safety Vulnerability Detection For Repository-Scale Codebasescited by 1
- 2024In-Context Code-Text Learning for Bimodal Software Engineeringcited by 0
- 2024Direction for Detection: A Survey of Automated Vulnerability Detection and all of its Pain Pointscited by 0
- 2025Leveraging GPT-4 for Vulnerability-Witnessing Unit Test Generationcited by 0
- 2025Resource-Efficient Automatic Software Vulnerability Assessment via Knowledge Distillation and Particle Swarm Optimizationcited by 0
- 2025Utilizing Large Language Models for Machine Learning Explainabilitycited by 0
- 2025SoK: Understanding (New) Security Issues Across AI4Code Use Casescited by 0
- 2026Separating Secrets from Placeholders: A Hybrid CNN-CodeBERT Framework for Three-Class Credential Leakage Detectioncited by 0
- 2026Evaluating LLMs for Real-World Web Vulnerability Detectioncited by 0
- 2026Beyond FLOPs: Energy-Aware Knowledge Distillation for Sustainable LLMs on Code-Related Taskcited by 0
- 2026Beyond FLOPs: Energy-Aware Knowledge Distillation for Sustainable LLMs on Code-Related Task18 Aug 2026
- 2026Revelio: Cost-Efficient Agentic Memory Safety Vulnerability Detection For Repository-Scale Codebases20 Jun 2026
- 2026Evaluating LLMs for Real-World Web Vulnerability Detection19 Jun 2026
- 2026Separating Secrets from Placeholders: A Hybrid CNN-CodeBERT Framework for Three-Class Credential Leakage Detection29 May 2026
- 2026VeriCWEty: Embedding enabled Line-Level CWE Detection in Verilog15 Apr 2026
- 2026AnyPoC: Universal Proof-of-Concept Test Generation for Scalable LLM-Based Bug Detection13 Apr 2026
- 2026Measuring and Exploiting Contextual Bias in LLM-Assisted Security Code Review19 Mar 2026
- 2026Co-RedTeam: Orchestrated Security Discovery and Exploitation with LLM Agents2 Feb 2026
- 2026Sifting the Noise: A Comparative Study of LLM Agents in Vulnerability False Positive Filtering30 Jan 2026
- 2026Reducing False Positives in Static Bug Detection with LLMs: An Empirical Study in Industry26 Jan 2026
- 2025SoK: Understanding (New) Security Issues Across AI4Code Use Cases20 Dec 2025
- 2025A Systematic Study of Code Obfuscation Against LLM-based Vulnerability Detection18 Dec 2025
32 more
- 2025Generative AI for Self-Adaptive Systems: State of the Art and Research Roadmap4 Dec 2025
- 2025LAURA: Enhancing Code Review Generation with Context-Enriched Retrieval-Augmented LLM1 Dec 2025
- 2025VulInstruct: Teaching LLMs Root-Cause Reasoning for Vulnerability Detection via Security Specifications6 Nov 2025
- 2025Reflections on the Reproducibility of Commercial LLM Performance in Empirical Software Engineering Studies29 Oct 2025
- 2025Utilizing Large Language Models for Machine Learning Explainability8 Oct 2025
- 2025OntoLogX: Ontology-Guided Knowledge Graph Extraction from Cybersecurity Logs with Large Language Models1 Oct 2025
- 2025MAVUL: Multi-Agent Vulnerability Detection via Contextual Reasoning and Interactive Refinement30 Sep 2025
- 2025Resource-Efficient Automatic Software Vulnerability Assessment via Knowledge Distillation and Particle Swarm Optimization30 Jul 2025
- 2025A Systematic Literature Review on Detecting Software Vulnerabilities with Large Language Models30 Jul 2025
- 2025Revisiting Pre-trained Language Models for Vulnerability Detection22 Jul 2025
- 2025A Mixture of Linear Corrections Generates Secure Code13 Jul 2025
- 2025Bridging AI and Software Security: A Comparative Vulnerability Assessment of LLM Agent Deployment Paradigms8 Jul 2025
- 2025Leveraging GPT-4 for Vulnerability-Witnessing Unit Test Generation13 Jun 2025
- 2025LPASS: Linear Probes as Stepping Stones for vulnerability detection using compressed LLMs30 May 2025
- 2025Let the Trial Begin: A Mock-Court Approach to Vulnerability Detection using LLM-Based Agents16 May 2025
- 2025KNighter: Transforming Static Analysis with LLM-Synthesized Checkers12 Mar 2025
- 2025Do LLMs Consider Security? An Empirical Study on Responses to Programming Questions20 Feb 2025
- 2025Large Language Models for In-File Vulnerability Localization Can Be "Lost in the End"9 Feb 2025
- 2025CGP-Tuning: Structure-Aware Soft Prompt Tuning for Code Vulnerability Detection8 Jan 2025
- 2024Investigating Large Language Models for Code Vulnerability Detection: An Experimental Study24 Dec 2024
- 2024Direction for Detection: A Survey of Automated Vulnerability Detection and all of its Pain Points15 Dec 2024
- 2024What You See Is Not Always What You Get: Evaluating GPT's Comprehension of Source Code11 Dec 2024
- 2024Are Large Language Models Memorizing Bug Benchmarks?20 Nov 2024
- 2024In-Context Code-Text Learning for Bimodal Software Engineering8 Oct 2024
- 2024Comparing Unidirectional, Bidirectional, and Word2vec Models for Discovering Vulnerabilities in Compiled Lifted Code26 Sep 2024
- 2024CoDefeater: Using LLMs To Find Defeaters in Assurance Cases18 Jul 2024
- 2024Source Code Summarization in the Era of Large Language Models9 Jul 2024
- 2024Vul-RAG: Enhancing LLM-based Vulnerability Detection via Knowledge-level RAG17 Jun 2024
- 2024VulDetectBench: Evaluating the Deep Capability of Vulnerability Detection with Large Language Models11 Jun 2024
- 2024Harnessing Large Language Models for Software Vulnerability Detection: A Comprehensive Benchmarking Study24 May 2024
- 2024Generative transformations and patterns in LLM-native approaches for software verification and falsification14 Apr 2024
- 2024Multi-role Consensus through LLMs Discussions for Vulnerability Detection21 Mar 2024
- 2025Let the Trial Begin: A Mock-Court Approach to Vulnerability Detection using LLM-Based Agentscited by 20
- 2025Bridging AI and Software Security: A Comparative Vulnerability Assessment of LLM Agent Deployment Paradigmscited by 7
- 2026Co-RedTeam: Orchestrated Security Discovery and Exploitation with LLM Agentscited by 6
- 2026Sifting the Noise: A Comparative Study of LLM Agents in Vulnerability False Positive Filteringcited by 5
- 2026AnyPoC: Universal Proof-of-Concept Test Generation for Scalable LLM-Based Bug Detectioncited by 4
- 2026Revelio: Cost-Efficient Agentic Memory Safety Vulnerability Detection For Repository-Scale Codebasescited by 1
- 2026Revelio: Cost-Efficient Agentic Memory Safety Vulnerability Detection For Repository-Scale Codebases20 Jun 2026
- 2026AnyPoC: Universal Proof-of-Concept Test Generation for Scalable LLM-Based Bug Detection13 Apr 2026
- 2026Co-RedTeam: Orchestrated Security Discovery and Exploitation with LLM Agents2 Feb 2026
- 2026Sifting the Noise: A Comparative Study of LLM Agents in Vulnerability False Positive Filtering30 Jan 2026
- 2025Bridging AI and Software Security: A Comparative Vulnerability Assessment of LLM Agent Deployment Paradigms8 Jul 2025
- 2025Let the Trial Begin: A Mock-Court Approach to Vulnerability Detection using LLM-Based Agents16 May 2025
- 2024Vul-RAG: Enhancing LLM-based Vulnerability Detection via Knowledge-level RAGcited by 67
- 2024Source Code Summarization in the Era of Large Language Modelscited by 30
- 2025KNighter: Transforming Static Analysis with LLM-Synthesized Checkerscited by 22
- 2024Multi-role Consensus through LLMs Discussions for Vulnerability Detectioncited by 19
- 2024Harnessing Large Language Models for Software Vulnerability Detection: A Comprehensive Benchmarking Studycited by 17
- 2025Reflections on the Reproducibility of Commercial LLM Performance in Empirical Software Engineering Studiescited by 12
- 2024VulDetectBench: Evaluating the Deep Capability of Vulnerability Detection with Large Language Modelscited by 11
- 2024Are Large Language Models Memorizing Bug Benchmarks?cited by 11
- 2024Investigating Large Language Models for Code Vulnerability Detection: An Experimental Studycited by 11
- 2025Do LLMs Consider Security? An Empirical Study on Responses to Programming Questionscited by 8
- 2025A Systematic Literature Review on Detecting Software Vulnerabilities with Large Language Modelscited by 8
- 2025MAVUL: Multi-Agent Vulnerability Detection via Contextual Reasoning and Interactive Refinementcited by 6
12 most cited of 36 All 36 (JSON)
- 2026Beyond FLOPs: Energy-Aware Knowledge Distillation for Sustainable LLMs on Code-Related Task18 Aug 2026
- 2026Evaluating LLMs for Real-World Web Vulnerability Detection19 Jun 2026
- 2026Separating Secrets from Placeholders: A Hybrid CNN-CodeBERT Framework for Three-Class Credential Leakage Detection29 May 2026
- 2026VeriCWEty: Embedding enabled Line-Level CWE Detection in Verilog15 Apr 2026
- 2026Measuring and Exploiting Contextual Bias in LLM-Assisted Security Code Review19 Mar 2026
- 2026Reducing False Positives in Static Bug Detection with LLMs: An Empirical Study in Industry26 Jan 2026
- 2025SoK: Understanding (New) Security Issues Across AI4Code Use Cases20 Dec 2025
- 2025A Systematic Study of Code Obfuscation Against LLM-based Vulnerability Detection18 Dec 2025
- 2025Generative AI for Self-Adaptive Systems: State of the Art and Research Roadmap4 Dec 2025
- 2025Reflections on the Reproducibility of Commercial LLM Performance in Empirical Software Engineering Studies29 Oct 2025
- 2025Utilizing Large Language Models for Machine Learning Explainability8 Oct 2025
- 2025OntoLogX: Ontology-Guided Knowledge Graph Extraction from Cybersecurity Logs with Large Language Models1 Oct 2025
12 newest of 36 All 36 (JSON)