Searcharxiv⌕ Search

arXiv subjects

Mohammad Mehdi Pourhashem Kallehbasti

Publications and source records attributed to Mohammad Mehdi Pourhashem Kallehbasti.

2 recordsLinked to original sources

LLM Security Guard for Code

Many developers rely on Large Language Models (LLMs) to facilitate software development. Nevertheless, these models have exhibited limited capabilities in the security domain. We introduce LLMSecGuard, a framework to offer enhanced code security through the synergy between static code analyzers and LLMs. LLMSecGuard is open source and aims to equip developers with code solutions that are more secure than the code initially generated by LLMs. This framework also has a benchmarking feature, aimed at providing insights into the evolving security attributes of these models.

cs.SE↗

Naturalistic Static Program Analysis

Static program analysis development is a non-trivial and time-consuming task. We present a framework through which developers can define static program analyses in natural language. We show the application of this framework to identify cryptography misuses in Java programs, and we discuss how it facilitates static program analysis development for developers.

cs.PL↗