PulseAugur
EN
LIVE 06:31:17

New benchmark tests AI's ability to find software vulnerabilities

Researchers have developed HoF-Bench, a new benchmark designed to evaluate AI models' ability to find real-world software vulnerabilities without relying on frontier models. The benchmark consists of 95 AI-discovered CVEs from mature open-source projects like OpenSSL and curl. In testing, a deliberately minimal LLM-based analyzer successfully rediscovered 68% of these vulnerabilities under strict conditions, while no frontier models were used for detection in the study. HoF-Bench aims to provide a standardized method for comparing vulnerability scanners and assessing their reliability, particularly noting that vulnerabilities in C programming language code proved more challenging for the tested models. AI

IMPACT This benchmark could accelerate the development of more reliable AI-powered security tools for identifying software vulnerabilities.

RANK_REASON The cluster describes a new benchmark for evaluating AI models on a specific research task (finding software vulnerabilities), based on an academic paper. [lever_c_demoted from research: ic=1 ai=1.0]

Read on arXiv cs.LG →

AI-generated summary · Google Gemini · from 1 sources. How we write summaries →

New benchmark tests AI's ability to find software vulnerabilities

COVERAGE [1]

  1. arXiv cs.LG TIER_1 English(EN) · Petr Simecek, Elnaz Babayeva, Jiri Balhar, Michal Bida, Michal Buran, Vaclav Cadek, Luigino Camastra, Tomas Dulka, Michal Janocko, Tomas Klohna, Pavel Kohout, Ondrej Kokes, Adam Krivka, Jakub Kubik, Patrik Mada, Igor Morgenstern, Marek Pavelka, Joshua Ro… ·

    HoF-Bench: Rediscovering Real AI-Discovered CVEs Without Frontier Models

    arXiv:2607.27030v1 Announce Type: cross Abstract: LLM-based analyzers have begun finding real vulnerabilities in mature open-source projects: AISLE's analyzer is credited with more than 280 CVEs across 78 projects, including OpenSSL, curl, and GnuTLS. We introduce HoF-Bench (name…