Trusting the Tool: Asymmetric Deference of LLM Vulnerability Auditors to Static-Analysis Evidence

Paper recorded by Signals 4 on 2026-10-23 in cs.LG. Abstract reproduced from arXiv; link to the original below.

Published 2026-10-23 on arXiv · recorded by Signals 4 on 2026-10-26

Category: cs.LG · 机器学习 · first seen 2026-10-26

Abstract

Pipelines that combine large language models (LLMs) with static analysis let the model consume the analyser's output as evidence, but whether the model distinguishes true from false evidence, and whether its scrutiny depends on what the evidence claims, has not been measured. We built an intraprocedural analyser for C/C++ that produces proof obligations and audited vulnerable and patched functions

Read on arXiv →