PulseAugur
EN
LIVE 17:55:57

New framework improves credential leak detection in code

Researchers have developed a new framework to improve the detection of credential leaks in public code repositories. This hybrid approach combines CodeBERT's semantic understanding with character-level pattern recognition to classify leaks into three categories: genuine, placeholder, or weak credentials. The system achieved a macro F1-score of 0.90 on a dataset of over 9,000 samples across 10 programming languages, significantly reducing false positives while maintaining high recall for actual credential leaks. AI

IMPACT Enhances security in code repositories by reducing false positives in credential leak detection.

RANK_REASON The cluster contains an academic paper detailing a new framework for credential leakage detection.

Read on arXiv cs.AI →

AI-generated summary · Google Gemini · from 2 sources. How we write summaries →

New framework improves credential leak detection in code

COVERAGE [2]

  1. arXiv cs.AI TIER_1 English(EN) · Maksuda Bilkis Baby, Khushika Shah, Naiyue Liang, Lei Zhang ·

    Separating Secrets from Placeholders: A Hybrid CNN-CodeBERT Framework for Three-Class Credential Leakage Detection

    arXiv:2605.31520v1 Announce Type: cross Abstract: Credential leakage in public source code repositories poses a critical security threat, with over 23.8 million secrets exposed in 2024 alone. Existing detection tools suffer from high false-positive rates because rigid pattern mat…

  2. arXiv cs.AI TIER_1 English(EN) · Lei Zhang ·

    Separating Secrets from Placeholders: A Hybrid CNN-CodeBERT Framework for Three-Class Credential Leakage Detection

    Credential leakage in public source code repositories poses a critical security threat, with over 23.8 million secrets exposed in 2024 alone. Existing detection tools suffer from high false-positive rates because rigid pattern matching and binary classification schemes fail to di…