Reva: Real-Time Vulnerability Detection through Contextual Probing of Large Language Models
[Kryptografia i bezpieczeństwo] Autorzy: Amine Lbath, Massih-Reza Amini
A vulnerability costs more to fix the later it is discovered. As coding agents generate code faster than developers can review it, software needs a first line of defense screening each new function in real time. LLM agents have recently become capable of finding real-world vulnerabilities by working as a security expert would: they run analysis tools, explore the surrounding code, test hypotheses and weigh the evidence before forming their own judgement. This reasoning, however, spans many model calls, so that each verdict takes minutes of compute, far too long for real-time screening. Faster detectors, which fine-tune deep learning models or prompt an LLM for a direct verdict, are less accurate: they judge a function without the context an agent gathers, and an LLM's generated verdict is unreliable even when given some of it. We present REVA (REal-time Vulnerability Analysis), an AI vu…
- Kategoria arxiv
- cs.CR
- Kategoria
- Kryptografia i bezpieczeństwo