A new arXiv paper investigates how large language models (LLMs) interact with static analysis tools for vulnerability detection. The study found that LLMs exhibit asymmetric deference, being significantly misled by fabricated assurances that a vulnerability exists, while being less affected by fabricated alarms that a vulnerability is present. This suggests that current pipelines combining LLMs with static analysis may be unreliable, as models do not sufficiently scrutinize the evidence provided by the tools. AI
IMPACT Highlights potential unreliability in LLM-assisted vulnerability detection, suggesting a need for improved evidence verification in AI pipelines.
RANK_REASON The cluster contains a research paper published on arXiv detailing findings about LLM behavior. [lever_c_demoted from research: ic=1 ai=1.0]
AI-generated summary · Google Gemini · from 1 sources. How we write summaries →