Researchers have developed SecPatRec, a novel hybrid approach for automatically identifying and recovering security patterns from source code repositories. This method combines a ReAct-style LLM agent with semantic and lexical code search for detecting and grounding security pattern roles, and uses static code property graph analysis to recover interaction sequences. SecPatRec was evaluated on a dataset of 100 security pattern instances across 93 open-source Java and Python repositories, achieving high accuracy in role detection and grounding, and a respectable score for interaction recovery. The approach demonstrated superior performance and cost-efficiency compared to a baseline LLM, offering valuable evidence for inspecting security-pattern implementations. AI
IMPACT This approach could enhance software security by automating the identification and verification of security patterns in codebases.
RANK_REASON The item is a research paper detailing a new method for automated security pattern recovery from source code. [lever_c_demoted from research: ic=1 ai=1.0]
- alphaXiv
- arXiv
- CORE Recommender
- DagsHub
- Gotit.pub
- Hugging Face
- Java
- LLM
- Python
- ReAct
- ScienceCast
- SecPatRec
AI-generated summary · Google Gemini · from 1 sources. How we write summaries →