TCSE logo 
 Sigsoft logo
Sustainability badge
Sat 3 May 2025 12:10 - 12:20 at 214 - Keynote 2 / Paper Session 2 Chair(s): Prem Devanbu

In today’s digital landscape, the importance of timely and accurate vulnerability detection has significantly increased. This paper presents a novel approach that leverages transformer-based models and machine learning techniques to automate the identification of software vulnerabilities by analyzing GitHub issues. We introduce a new dataset specifically designed for classifying GitHub issues relevant to vulnerability detection. We then examine various classification techniques to determine their effectiveness. The results demonstrate the potential of this approach for real-world application in early vulnerability detection, which could substantially reduce the window of exploitation for software vulnerabilities. This research makes a key contribution to the field by providing a scalable and computationally efficient framework for automated detection, enabling the prevention of compromised software usage before official notifications. This work has the potential to enhance the security of open-source software ecosystems.

Sat 3 May

Displayed time zone: Eastern Time (US & Canada) change

11:00 - 12:30
Keynote 2 / Paper Session 2LLM4Code at 214
Chair(s): Prem Devanbu University of California at Davis
11:00
60m
Keynote
Keynote 2: Towards Autonomous Language Model Systems (zoom talk)
LLM4Code
Ofir Press Princeton University
12:00
10m
Talk
With a Little Help from My (LLM) Friends: Enhancing Static Analysis with LLMs to Detect Software Vulnerabilities
LLM4Code
Amy Munson University of California, San Diego, Juanita Gomez University of California, Santa Cruz, Álvaro Cárdenas University of California, Santa Cruz
12:10
10m
Talk
Automating the Detection of Code Vulnerabilities by Analyzing GitHub Issues
LLM4Code
Daniele Cipollone Delft University of Technology, Changjie Wang KTH Royal Institute of Technology, Mariano Scazzariello RISE Research Institutes of Sweden, Simone Ferlin Red Hat, Maliheh Izadi Delft University of Technology, Dejan Kostic KTH Royal Institute of Technology, Marco Chiesa KTH Royal Institute of Technology
12:20
10m
Talk
COSMosFL: Ensemble of Small Language Models for Fault Localisation
LLM4Code
Hyunjoon Cho KAIST, Sungmin Kang KAIST, Gabin An KAIST, Shin Yoo KAIST
Pre-print
:
:
:
: