Using ChatGPT as a Static Application Security Testing Tool

Atieh Bakhshandeh, Abdalsamad Keramatfar, Amir Norouzi, Mohammad Mahdi Chekidehkhoun
8/28/2023
cs.CRcs.AI

No confident code implementation found for this paper. 1 possible match can be shown below.

Abstract

In recent years, artificial intelligence has had a conspicuous growth in almost every aspect of life. One of the most applicable areas is security code review, in which a lot of AI-based tools and approaches have been proposed. Recently, ChatGPT has caught a huge amount of attention with its remarkable performance in following instructions and providing a detailed response. Regarding the similarities between natural language and code, in this paper, we study the feasibility of using ChatGPT for vulnerability detection in Python source code. Toward this goal, we feed an appropriate prompt along with vulnerable data to ChatGPT and compare its results on two datasets with the results of three widely used Static Application Security Testing tools (Bandit, Semgrep and SonarQube). We implement different kinds of experiments with ChatGPT and the results indicate that ChatGPT reduces the false positive and false negative rates and has the potential to be used for Python source code vulnerability detection.

View on arXivView PDF

Code Implementations

No confident code match yet

We couldn't find an author-owned or strongly-evidenced community implementation for this paper. 1 weaker match is hidden by default — verify before relying on them.

No code implementations found yet.

Know of an implementation? Let us know in the comments below!

Similar Papers

Harnessing the Power of LLMs in Source Code Vulnerability Detection

90% match2024

LLMs in Software Security: A Survey of Vulnerability Detection Techniques and Insights

87% match2025

Machine Learning Techniques for Python Source Code Vulnerability Detection

86% match1 repo102024

VulnLLMEval: A Framework for Evaluating Large Language Models in Software Vulnerability Detection and Patching

86% match2024

Harnessing Large Language Models for Software Vulnerability Detection: A Comprehensive Benchmarking Study

86% match2024

SoK: On Closing the Applicability Gap in Automated Vulnerability Detection

86% match2024

Cite this paper

@article{bakhshandeh2023using,
  title  = {Using ChatGPT as a Static Application Security Testing Tool},
  author = {Atieh Bakhshandeh and Abdalsamad Keramatfar and Amir Norouzi and Mohammad Mahdi Chekidehkhoun},
  year   = {2023},
  eprint = {2308.14434},
  archivePrefix = {arXiv},
  url    = {http://arxiv.org/abs/2308.14434v1}
}

Add a badge to your README

Shows whether official code is linked for this paper.

Code of Paper badge
[![Code of Paper](https://codeofpaper.com/badge/2308.14434.svg)](https://codeofpaper.com/paper/2308.14434)

Discussion