A new research paper explores the effectiveness of large language models in software assurance, specifically when deterministic tools are already available. The study found that increasing the context provided to models like Qwen2.5-Coder-7B-Instruct did not improve the clearance of unsafe code, and in some cases, led to more unresolved outcomes. While raw verifier feedback improved correct verdicts, it also increased incorrect ones. The research suggests that deterministic evidence admission is sufficient for the tested settings, highlighting limitations in aggregating model verdicts and interpreting feedback. AI
IMPACT This research suggests that for certain software assurance tasks, simply increasing LLM context may not yield better results, highlighting the need for more sophisticated integration of AI with deterministic tools.
RANK_REASON The cluster contains a research paper published on arXiv detailing experimental results on LLM performance in software assurance. [lever_c_demoted from research: ic=1 ai=1.0]
- arXiv
- Defects4J
- Java
- Java virtual machine
- JBMC Software
- OWASP Benchmark
- QASecClaw
- qwen2.5 coder 7b instruct
- SV-COMP
AI-generated summary · Google Gemini · from 1 sources. How we write summaries →