TY - GEN
T1 - Large Language Models for Code Analysis
T2 - 33rd USENIX Security Symposium, USENIX Security 2024
AU - Fang, Chongzhou
AU - Miao, Ning
AU - Srivastav, Shaurya
AU - Liu, Jialin
AU - Zhang, Ruoyu
AU - Fang, Ruijie
AU - Asmita,
AU - Tsang, Ryan
AU - Nazari, Najmeh
AU - Wang, Han
AU - Homayoun, Houman
N1 - Publisher Copyright:
© USENIX Security Symposium 2024.All rights reserved.
PY - 2024
Y1 - 2024
N2 - Large language models (LLMs) have demonstrated significant potential in the realm of natural language understanding and programming code processing tasks. Their capacity to comprehend and generate human-like code has spurred research into harnessing LLMs for code analysis purposes. However, the existing body of literature falls short in delivering a systematic evaluation and assessment of LLMs' effectiveness in code analysis, particularly in the context of obfuscated code. This paper seeks to bridge this gap by offering a comprehensive evaluation of LLMs' capabilities in performing code analysis tasks. Additionally, it presents real-world case studies that employ LLMs for code analysis. Our findings indicate that LLMs can indeed serve as valuable tools for automating code analysis, albeit with certain limitations. Through meticulous exploration, this research contributes to a deeper understanding of the potential and constraints associated with utilizing LLMs in code analysis, paving the way for enhanced applications in this critical domain.
AB - Large language models (LLMs) have demonstrated significant potential in the realm of natural language understanding and programming code processing tasks. Their capacity to comprehend and generate human-like code has spurred research into harnessing LLMs for code analysis purposes. However, the existing body of literature falls short in delivering a systematic evaluation and assessment of LLMs' effectiveness in code analysis, particularly in the context of obfuscated code. This paper seeks to bridge this gap by offering a comprehensive evaluation of LLMs' capabilities in performing code analysis tasks. Additionally, it presents real-world case studies that employ LLMs for code analysis. Our findings indicate that LLMs can indeed serve as valuable tools for automating code analysis, albeit with certain limitations. Through meticulous exploration, this research contributes to a deeper understanding of the potential and constraints associated with utilizing LLMs in code analysis, paving the way for enhanced applications in this critical domain.
UR - https://www.scopus.com/pages/publications/85204993694
UR - https://www.scopus.com/pages/publications/85204993694#tab=citedBy
M3 - Conference contribution
AN - SCOPUS:85204993694
T3 - Proceedings of the 33rd USENIX Security Symposium
SP - 829
EP - 846
BT - Proceedings of the 33rd USENIX Security Symposium
Y2 - 14 August 2024 through 16 August 2024
ER -