ChatGPT for Vulnerability Detection, Classification, and Repair: How Far Are We?

Fu, Michael; Tantithamthavorn, Chakkrit Kla; Nguyen, Van; Le, Trung

doi:10.1109/apsec60848.2023.00085

Cited by 20 publications

References 10 publications

Supporting

Mentioning

Contrasting

Order By: Relevance

A comprehensive analysis on software vulnerability detection datasets: trends, challenges, and road ahead

Guo,

Bettaieb,

Casino

2024

Int. J. Inf. Secur.

View full text Add to dashboard Cite

As society’s dependence on information and communication systems (ICTs) grows, so does the necessity of guaranteeing the proper functioning and use of such systems. In this context, it is critical to enhance the security and robustness of the DevSecOps pipeline through timely vulnerability detection. Usually, AI-based models enable desirable features such as automation, performance, and efficacy. However, the quality of such models highly depends on the datasets used during the training stage. The latter encompasses a series of challenges yet to be solved, such as access to extensive labelled datasets with specific properties, such as well-represented and balanced samples. This article explores the current state of practice of software vulnerability datasets and provides a classification of the main challenges and issues. After an extensive analysis, it describes a set of guidelines and desirable features that datasets should guarantee. The latter is applied to create a new dataset, which fulfils these properties, along with a descriptive comparison with the state of the art. Finally, a discussion on how to foster good practices among researchers and practitioners sets the ground for further research and continued improvement within this critical domain.

show abstract