Skip to main navigation Skip to search Skip to main content

Large Language Models for Code Analysis: Do LLMs Really Do Their Job?

  • Chongzhou Fang
  • , Ning Miao
  • , Shaurya Srivastav
  • , Jialin Liu
  • , Ruoyu Zhang
  • , Ruijie Fang
  • , Asmita
  • , Ryan Tsang
  • , Najmeh Nazari
  • , Han Wang
  • , Houman Homayoun
  • University of California at Davis
  • Temple University

Research output: Chapter in Book/Report/Conference proceedingConference contributionpeer-review

61 Scopus citations

Abstract

Large language models (LLMs) have demonstrated significant potential in the realm of natural language understanding and programming code processing tasks. Their capacity to comprehend and generate human-like code has spurred research into harnessing LLMs for code analysis purposes. However, the existing body of literature falls short in delivering a systematic evaluation and assessment of LLMs' effectiveness in code analysis, particularly in the context of obfuscated code. This paper seeks to bridge this gap by offering a comprehensive evaluation of LLMs' capabilities in performing code analysis tasks. Additionally, it presents real-world case studies that employ LLMs for code analysis. Our findings indicate that LLMs can indeed serve as valuable tools for automating code analysis, albeit with certain limitations. Through meticulous exploration, this research contributes to a deeper understanding of the potential and constraints associated with utilizing LLMs in code analysis, paving the way for enhanced applications in this critical domain.

Original languageEnglish
Title of host publicationProceedings of the 33rd USENIX Security Symposium
Pages829-846
Number of pages18
ISBN (Electronic)9781939133441
StatePublished - 2024
Event33rd USENIX Security Symposium, USENIX Security 2024 - Philadelphia, United States
Duration: 14 Aug 202416 Aug 2024

Publication series

NameProceedings of the 33rd USENIX Security Symposium

Conference

Conference33rd USENIX Security Symposium, USENIX Security 2024
Country/TerritoryUnited States
CityPhiladelphia
Period14/08/2416/08/24

Fingerprint

Dive into the research topics of 'Large Language Models for Code Analysis: Do LLMs Really Do Their Job?'. Together they form a unique fingerprint.

Cite this