Software Vulnerability Detection

Ask about this topic

Overview

The field studies how to find vulnerable code and locate the causes of weaknesses across functions, repositories, smart contracts, binaries, and software dependencies. Approaches range from static analysis and fuzzing to transformers, graph neural networks, and LLM agents that combine code structure, security knowledge, and execution-based checks. Benchmarks increasingly test realistic project and temporal splits, localization, exploit validation, and repair, because performance on curated datasets may not transfer to production code. A central challenge is balancing recall with false positives while ensuring that reported findings are grounded in executable evidence and generalize across projects, languages, and vulnerability types.

Latest papers

CardsList

143 papers17 papers in the last four weeks, up 31% on the four weeks before. 0.1% of all new papers.

  1. Robust Smart Contract Vulnerability Detection via Contrastive Learning-Enhanced Granular-ball Training

    Mar 29, 2026Zeli Wang, Qingxuan Yang, Shuyin Xia +3Software Vulnerability DetectionLearning with Noisy Labels

    Chongqing Key Laboratory of Computational Intelligence, Key Laboratory of Cyberspace Big Data Intelligent Security, Ministry of Education, and Key Laboratory of Big Data Intelligent Computing, Chongqing University of Posts and Telecommunications. · the School of Cyber Science and Engineering, Huazhong University of Science and Technology. · School of Computer Science and Artificial Intelligence, Zhengzhou University, China. +1

  2. Knowdit: Agentic Smart Contract Vulnerability Detection with Auditing Knowledge Summarization

    Mar 27, 2026Ziqiao Kong, Wanxu Xia, Chong Wang +6Financial ServicesSoftware Vulnerability Detection

    Nanyang Technological University · Beihang University · Independent Researcher +4

  3. Walma: Learning to See Memory Corruption in WebAssembly

    Mar 25, 2026Oussama Draissi, Mark Günzel, Ahmad-Reza Sadeghi +1Software Vulnerability DetectionSoftware Security

    paluno, University of Duisburg-Essen, Essen, Germany · Technical University of Darmstadt, Darmstadt, Germany

  4. Tug-of-War within A Decade: Conflict Resolution in Vulnerability Analysis via Teacher-Guided Retrieval-Augmented Generations

    Mar 25, 2026Ziyin Zhou, Jianyi Zhang, Xu ji +3Knowledge Conflicts in Language ModelsLLMs for Cybersecurity

    Beijing Electronic Science and Technology Institute

  5. AEGIS: From Clues to Verdicts -- Graph-Guided Deep Vulnerability Reasoning via Dialectics and Meta-Auditing

    Mar 21, 2026Sen Fang, Weiyuan Ding, Zhezhen Cao +2Software Vulnerability DetectionLLMs for Cybersecurity

    NC State University · University of Alberta

  6. Implicit Patterns in LLM-Based Binary Analysis

    Mar 19, 2026Qiang Li, XiangRui Zhang, Haining WangLLMs for CybersecurityImplicit Reasoning in Language Models

    Beijing Jiaotong University China · Virginia Tech USA

  7. When AI Agrees Too Much: Manipulating Automated Code Review via Bias Injection

    Mar 19, 2026Georgios Alexopoulos, Nikolaos Alexopoulos, Diomidis Spinellis +1Automated Code ReviewAdversarial Attacks on LLMs

    University of Athens · National Infrastructures for Research and Technology · Athens University of Economics and Business +1

  8. Toward Scalable Automated Repository-Level Datasets for Software Vulnerability Detection

    Mar 18, 2026Amine LbathAutomated Exploit GenerationSoftware Vulnerability Detection

    Univeristy of Grenoble Grenoble, France

  9. Fine-tuning RoBERTa for CVE-to-CWE Classification: A 125M Parameter Model Competitive with LLMs

    Mar 16, 2026Nikita MosievskiyClassificationCybersecurity

    Independent Researcher

  10. TOSSS: a CVE-based Software Security Benchmark for Large Language Models

    Mar 11, 2026Marc Damie, Murat Bilgehan Ertan, Domenico Essoussi +3LLM Safety BenchmarksSoftware Security

    Modat, The Hague, The Netherlands

  11. VulnAgent-R2: Evidence-Calibrated Multi-Agent Auditing for Repository-Level Vulnerability Detection

    Mar 11, 2026Renwei Meng, Haoyi Wu, Jingming WangSoftware Vulnerability DetectionAI Agent Auditing

  12. MCP-in-SoS: Risk assessment framework for open-source MCP servers

    Mar 10, 2026Pratyay Kumar, Miguel Antonio Guirao Aguilera, Srikathyayani Srikanteswara +2MCP SecurityCybersecurity

    New Mexico State University · GenAI and ML Research Visionary · University of Hartford

  13. OSS-CRS: Liberating AIxCC Cyber Reasoning Systems for Real-World Open-Source Security

    Mar 9, 2026Andrew Chin, Dongkwan Kim, Yu-Fu Fu +7CybersecuritySoftware Security

    Georgia Institute of Technology · Microsoft

  14. EVMbench: Evaluating AI Agents on Smart Contract Security

    Mar 5, 2026Justin Wang, Andreas Bigger, Xiaohai Xu +5AI Agent Security BenchmarksSoftware Security

    OpenAI · Paradigm · OtterSec

  15. ZeroDayBench: Evaluating LLM Agents on Unseen Zero-Day Vulnerabilities for Cyberdefense

    Mar 2, 2026Nancy Lau, Louis Sloot, Jyoutir Raj +6AI Agent Security BenchmarksLLMs for Cybersecurity

    UC Santa Cruz · Carnegie Mellon University · Independent +2

  16. Enhancing Continual Learning for Software Vulnerability Prediction: Addressing Catastrophic Forgetting via Hybrid-Confidence-Aware Selective Replay for Temporal LLM Fine-Tuning

    Feb 27, 2026Xuhui Dou, Hayretdin Bahsi, Alejandro Guerra-ManzanaresSoftware Vulnerability DetectionContinual Learning for LLMs

    School of Computer Science, University of Nottingham, Nottingham, United Kingdom · School of Informatics and Computing, Northern Arizona University, Flagstaff, United States of America · School of Computer Science, University of Nottingham, Ningbo, China

  17. Automated Vulnerability Detection in Source Code Using Deep Representation Learning

    Feb 26, 2026C. Seas, G. Fitzpatrick, J. A. Hamilton +1Software Vulnerability DetectionClassification

    Computer Science University of Cyprus Nicosia, Cyprus · Computer Science and Engineering Texas A&M University College Station, TX, USA

  18. MultiVer: Zero-Shot Multi-Agent Vulnerability Detection

    Feb 19, 2026Shreshth RajanSoftware Vulnerability DetectionLLMs for Cybersecurity

    Harvard College, Cambridge, MA, USA

  19. Can Adversarial Code Comments Fool AI Security Reviewers -- Large-Scale Empirical Study of Comment-Based Attacks and Defenses Against LLM Code Analysis

    Feb 18, 2026Scott ThorntonAdversarial AttacksAdversarial Attacks on LLMs

  20. Benchmarking Zero-Shot Reasoning Approaches for Error Detection in Solidity Smart Contracts

    Feb 17, 2026Eduardo Sardenberg, Antonio José Grandson Busson, Daniel de Sousa Moraes +2Software Vulnerability DetectionLLMs for Cybersecurity

    TeleMídia Lab - PUC-Rio, Rio de Janeiro, RJ - Brazil · BTG Pactual, São Paulo, SP - Brazil · Instituto Militar de Engenharia, Rio de Janeiro, RJ - Brazil

  21. From Lab to Reality: A Practical Evaluation of Deep Learning Models and LLMs for Vulnerability Detection

    Dec 11, 2025Chaomeng Lu, Bert LagaisseSoftware Vulnerability DetectionLLMs for Cybersecurity

    DistriNet Group-T, KU Leuven · Leuven, Belgium

  22. DMind Benchmark: Toward a Holistic Assessment of LLM Capabilities across the Web3 Domain

    Apr 18, 2025Enhao Huang, Pengyu Sun, Shuxun Wang +13LLM EvaluationSoftware Vulnerability Detection

    Zhejiang University Hangzhou, China · The State Key Laboratory of Blockchain and Data Security · DMind.ai Singapore +1

  23. ANVIL: Anomaly-based Vulnerability Identification without Labelled Training Data

    Aug 28, 2024Weizhou Wang, Eric Liu, Xiangyu Guo +3Software Vulnerability DetectionLLMs for Cybersecurity

    University of Toronto, Toronto, Canada