A Contemporary Survey of Large Language Model Assisted Program Analysis
Not on the map. Why?
Abstract (arXiv)
The increasing complexity of software systems has driven significant advancements in program analysis, as traditional methods unable to meet the demands of modern software development. To address these limitations, deep learning techniques, particularly Large Language Models (LLMs), have gained attention due to their context-aware capabilities in code comprehension. Recognizing the potential of LLMs, researchers have extensively explored their application in program analysis since their introduction. Despite existing surveys on LLM applications in cybersecurity, comprehensive reviews specifically addressing their role in program analysis remain scarce. In this survey, we systematically review the application of LLMs in program analysis, categorizing the existing work into static analysis, dynamic analysis, and hybrid approaches. Moreover, by examining and synthesizing recent studies, we identify future directions and challenges in the field. This survey aims to demonstrate the potential of LLMs in advancing program analysis practices and offer actionable insights for security researchers seeking to enhance detection frameworks or develop domain-specific models.
Key facts. Cited by 11 papers in the map (data through 14 Oct 2026). Builds on 87 of its 177 references that are in the map. First posted on arXiv 5 Feb 2025.
Builds on
87 of 177 references.
References · 87
- 2017Attention Is All You Needcited by 60,361
- 2020Language Models are Few-Shot Learnerscited by 32,419
- 2023GPT-4 Technical Reportcited by 18,396
- 2023LLaMA: Open and Efficient Foundation Language Modelscited by 14,132
- 2021Evaluating Large Language Models Trained on Codecited by 8,320
- 2023Mistral 7Bcited by 3,164
- 2023Code Llama: Open Foundation Models for Codecited by 2,139
- 2024Mixtral of Expertscited by 1,823
- 2018A Call for Clarity in Reporting BLEU Scorescited by 1,799
- 2020CodeBERT: A Pre-Trained Model for Programming and Natural Languagescited by 1,310
- 2022CodeGen: An Open Large Language Model for Code with Multi-Turn Program Synthesiscited by 885
- 2023Large Language Modelscited by 780
38 more
- 2022UniXcoder: Unified Cross-Modal Pre-training for Code Representationcited by 361
- 2023Software Testing with Large Language Models: Survey, Landscape, and Visioncited by 166
- 2022Few-shot training LLMs for project-specific code-summarizationcited by 129
- 2024IRIS: LLM-Assisted Static Analysis for Detecting Security Vulnerabilitiescited by 103
- 2023ChatUniTest: A Framework for LLM-Based Test Generationcited by 96
- 2023Pushing Large Language Models to the 6G Edge: Vision, Challenges, and Opportunitiescited by 90
- 2024CyberSecEval 2: A Wide-Ranging Cybersecurity Evaluation Suite for Large Language Modelscited by 89
- 2023Fuzz4All: Universal Fuzzing with Large Language Modelscited by 88
- 2023No More Manual Tests? Evaluating and Improving ChatGPT for Unit Test Generationcited by 82
- 2024Large Language Models for Cyber Security: A Systematic Literature Reviewcited by 68
- 2018ROUGE 2.0: Updated and Improved Measures for Evaluation of Summarization Taskscited by 67
- 2018DeepBugs: A Learning Approach to Name-based Bug Detectioncited by 65
- 2023GPTScan: Detecting Logic Vulnerabilities in Smart Contracts by Combining GPT with Program Analysiscited by 65
- 2024SplitLoRA: A Split Parameter-Efficient Fine-Tuning Framework for Large Language Modelscited by 62
- 2024Enchanting Program Specification Synthesis by Large Language Models using Static Analysis and Program Verificationcited by 58
- 2023Prompt-Enhanced Software Vulnerability Detection Using ChatGPTcited by 51
- 2022Pynguin: Automated Unit Test Generation for Pythoncited by 50
- 2023Lemur: Integrating Large Language Models in Automated Program Verificationcited by 49
- 2023Large Language Model-Powered Smart Contract Vulnerability Detection: New Perspectivescited by 48
- 2023LLaMA-Reviewer: Advancing Code Review Automation with Large Language Models through Parameter-Efficient Fine-Tuningcited by 47
- 2024PentestAgent: Incorporating LLM Agents to Automated Penetration Testingcited by 47
- 2024Large Language Model for Vulnerability Detection and Repair: Literature Review and the Road Aheadcited by 42
- 2024HITS: High-coverage LLM-based Unit Test Generation via Method Slicingcited by 38
- 2024PropertyGPT: LLM-driven Formal Verification of Smart Contracts through Retrieval-Augmented Property Generationcited by 37
- 2024HackSynth: LLM Agent and Evaluation Framework for Autonomous Penetration Testingcited by 37
- 2016A Survey of Symbolic Execution Techniquescited by 36
- 2023Large Language Models are Edge-Case Fuzzers: Testing Deep Learning Libraries via FuzzGPTcited by 36
- 2024AutoSafeCoder: A Multi-Agent Framework for Securing LLM Code Generation through Static Analysis and Fuzz Testingcited by 35
- 2023Ranking LLM-Generated Loop Invariants for Program Verificationcited by 33
- 2024A Comprehensive Overview of Large Language Models (LLMs) for Cyber Defences: Opportunities and Directionscited by 33
- 2024PenHeal: A Two-Stage LLM Framework for Automated Pentesting and Optimal Remediationcited by 30
- 2020The Tactician (extended version): A Seamless, Interactive Tactic Learner and Prover for Coqcited by 24
- 2024AutoPenBench: Benchmarking Generative Agents for Penetration Testingcited by 21
- 2024TestART: Improving LLM-based Unit Testing via Co-evolution of Automated Generation and Repair Iterationcited by 20
- 2024Multi-role Consensus through LLMs Discussions for Vulnerability Detectioncited by 19
- 2023Augmenting Greybox Fuzzing with Generative AIcited by 18
- 2023The Hitchhiker's Guide to Program Analysis: A Journey with Large Language Modelscited by 18
- 2020Why an Android App is Classified as Malware? Towards Malware Classification Interpretationcited by 16
50 most cited of 87 All 87 (JSON)
Built on by
Citing papers per year: 2025: 6; 2026: 5.
11 papers.
- 2025State-Aware Perturbation Optimization for Robust Deep Reinforcement Learningcited by 8
- 2025Robust Deep Reinforcement Learning in Robotics via Adaptive Gradient-Masked Adversarial Attackscited by 7
- 2026Learning When to Remember: Risk-Sensitive Contextual Bandits for Abstention-Aware Memory Retrieval in LLM-Based Coding Agentscited by 3
- 2025SFL-LEO: Asynchronous Split-Federated Learning Design for LEO Satellite-Ground Network Frameworkcited by 2
- 2025Empirical Evaluation of Concept Drift in ML-Based Android Malware Detectioncited by 2
- 2026A Decompilation-Driven Framework for Malware Detection with Large Language Modelscited by 2
- 2026Satisfiability Solving with LLMs: A Matched-Pair Evaluation of Reasoning Capabilitycited by 2
- 2025Automated detection of atomicity violations in large-scale systemscited by 1
- 2025UIXPOSE: Mobile Malware Detection via Intention-Behaviour Discrepancy Analysiscited by 0
- 2026Detecting Vulnerability-Inducing Commits via Multi-Stage Reasoning with LLM-Based Agentscited by 0
- 2026Hiding in Plain Sight: An Effective Physical Adversarial Patch Attack against Visual-Infrared Fused Face Detectioncited by 0
- 2026Hiding in Plain Sight: An Effective Physical Adversarial Patch Attack against Visual-Infrared Fused Face Detection25 Jul 2026
- 2026Detecting Vulnerability-Inducing Commits via Multi-Stage Reasoning with LLM-Based Agents7 Jul 2026
- 2026Satisfiability Solving with LLMs: A Matched-Pair Evaluation of Reasoning Capability27 May 2026
- 2026Learning When to Remember: Risk-Sensitive Contextual Bandits for Abstention-Aware Memory Retrieval in LLM-Based Coding Agents30 Apr 2026
- 2026A Decompilation-Driven Framework for Malware Detection with Large Language Models14 Jan 2026
- 2025UIXPOSE: Mobile Malware Detection via Intention-Behaviour Discrepancy Analysis16 Dec 2025
- 2025Empirical Evaluation of Concept Drift in ML-Based Android Malware Detection30 Jul 2025
- 2025SFL-LEO: Asynchronous Split-Federated Learning Design for LEO Satellite-Ground Network Framework18 Apr 2025
- 2025Automated detection of atomicity violations in large-scale systems1 Apr 2025
- 2025Robust Deep Reinforcement Learning in Robotics via Adaptive Gradient-Masked Adversarial Attacks26 Mar 2025
- 2025State-Aware Perturbation Optimization for Robust Deep Reinforcement Learning26 Mar 2025