English(EN) Beyond Static Guarantees: Measuring the Static-Pass Dynamic-Fail Gap in Security-Sensitive and LLM-Generated Python Code

新流程揭示了静态分析遗漏的LLM生成代码漏洞

作者 PulseAugur 编辑部 · [1 个来源] · 2026-09-12 04:00

研究人员发现，在代码的静态分析和实际运行时可利用性之间存在显著差距，尤其是在大型语言模型（LLM）生成的代码中。他们开发了一个三阶段流程，将静态扫描与LLM驱动的推理以及Docker容器中的动态验证相结合。该流程成功识别出相当比例的Python代码样本中存在可利用的漏洞，这些样本最初通过了静态分析，这表明仅靠静态分析不足以确保代码安全。 AI

影响强调了需要先进的动态验证方法来确保LLM生成代码的安全性。

排序理由学术论文，详细介绍了一种新的代码安全评估方法。[lever_c_demoted from research: ic=1 ai=1.0]

在 arXiv cs.AI 阅读 →

AI 生成摘要 · Google Gemini · 来自 1 个来源。我们如何撰写摘要 →

本文如何被排名

Signal score: 11 / 100; Composite score across the factors below. Higher = stronger signal that this story matters right now.
Newsworthiness bucket: Tool; 学术论文，详细介绍了一种新的代码安全评估方法。[lever_c_demoted from research: ic=1 ai=1.0]
Source corroboration: Single-source cluster; Only one publisher covered this so far. Single-source stories can still rank when the publisher is high-authority, but they lack cross-source corroboration.
Topics: paper, safety, product; Editorial topic classification. Feeds into how the story surfaces on /topic/<slug> hub pages and into the per-entity coverage mix.
AI-industry relevance: High; Clearly on-topic for AI-industry coverage.
Story freshness: Same-day; Cluster formed today. Ranking reflects the current source set at time of score.

完整方法见我们的编辑标准。

报道来源 [1]

arXiv cs.AI TIER_1 English(EN) · Jessica Pourleyli, Maitreyee Das Urmi, Glaucia Melo · 2026-09-12 04:00

超越静态保证：衡量安全敏感和LLM生成的Python代码中的静态通过-动态失败差距

arXiv:2609.10762v1 Announce Type: cross Abstract: Advances in large language models (LLMs) fuel the quest for scalable methods to assess the security of generated and security-sensitive software. Static analysis is widely adopted as a scalable, reproducible, and inexpensive secur…

本文如何被排名

报道来源 [1]

超越静态保证：衡量安全敏感和LLM生成的Python代码中的静态通过-动态失败差距

相关实体

相关话题