{"id":"https://openalex.org/W6981492146","doi":null,"title":"Enhancing Software Security with AI: Detecting Vulnerabilities in High-Level Programming Languages","display_name":"Enhancing Software Security with AI: Detecting Vulnerabilities in High-Level Programming Languages","publication_year":2024,"publication_date":"2024-01-01","ids":{"openalex":"https://openalex.org/W6981492146"},"language":"en","primary_location":{"id":"pmh:oai:lup-student-papers.lub.lu.se:9178282","doi":null,"is_oa":true,"landing_page_url":"http://lup.lub.lu.se/student-papers/record/9178282","pdf_url":"http://lup.lub.lu.se/student-papers/record/9178282/file/9178283.pdf","source":{"id":"https://openalex.org/S4306402420","display_name":"Lund University Publications Student Papers (Lund University)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"listed_in":[],"host_organization":"https://openalex.org/I187531555","host_organization_name":"Lund University","host_organization_lineage":["https://openalex.org/I187531555"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"H2"},"volume":null,"type":"dissertation","is_traditional":true,"indexed_in":[],"open_access":{"is_oa":true,"oa_status":"green","oa_url":"http://lup.lub.lu.se/student-papers/record/9178282/file/9178283.pdf","any_repository_has_fulltext":true},"authorships":[{"author_position":"first","author":{"id":null,"display_name":"Dahl\u00e9n, Kevin","orcid":null,"observed_orcids":[]},"institutions":[{"id":"https://openalex.org/I187531555","display_name":"Lund University","ror":"https://ror.org/012a77v79","country_code":"SE","type":"education","lineage":["https://openalex.org/I187531555"]}],"countries":["SE"],"is_corresponding":true,"raw_author_name":"Dahl\u00e9n, Kevin","raw_affiliation_strings":["Department of Electrical and Information Technology Lund University"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Department of Electrical and Information Technology Lund University","institution_ids":["https://openalex.org/I187531555"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":1,"corresponding_author_ids":[],"corresponding_institution_ids":["https://openalex.org/I187531555"],"apc_list":null,"apc_paid":null,"fwci":null,"has_fulltext":true,"cited_by_count":0,"citation_normalized_percentile":null,"cited_by_percentile_year":null,"biblio":{"volume":null,"issue":null,"first_page":null,"last_page":null},"is_retracted":false,"is_paratext":false,"is_xpac":true,"primary_topic":{"id":"https://openalex.org/T12479","display_name":"Web Application Security Vulnerabilities","score":0.6439999938011169,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T12479","display_name":"Web Application Security Vulnerabilities","score":0.6439999938011169,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10260","display_name":"Software Engineering Research","score":0.16670000553131104,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10743","display_name":"Software Testing and Debugging Techniques","score":0.1378999948501587,"subfield":{"id":"https://openalex.org/subfields/1712","display_name":"Software"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/vulnerability-detection","display_name":"vulnerability detection","score":0.8040000200271606},{"id":"https://openalex.org/keywords/high-level-programming-languages","display_name":"high-level programming languages","score":0.8450000286102295},{"id":"https://openalex.org/keywords/large-language-models","display_name":"large language models","score":0.9860000014305115},{"id":"https://openalex.org/keywords/fine-tuning","display_name":"fine-tuning","score":0.7129999995231628},{"id":"https://openalex.org/keywords/javascript","display_name":"JavaScript","score":0.8529999852180481},{"id":"https://openalex.org/keywords/python","display_name":"Python","score":0.9620000123977661},{"id":"https://openalex.org/keywords/php","display_name":"PHP","score":1.0},{"id":"https://openalex.org/keywords/java","display_name":"Java","score":0.8659999966621399},{"id":"https://openalex.org/keywords/ci-cd-integration","display_name":"CI/CD integration","score":0.8180000185966492},{"id":"https://openalex.org/keywords/cwe","display_name":"CWE","score":0.7300000190734863}],"concepts":[{"id":"https://openalex.org/C22680326","wikidata":"https://www.wikidata.org/wiki/Q7444867","display_name":"Secure coding","level":5,"score":0.7605000138282776},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.7506999969482422},{"id":"https://openalex.org/C172776598","wikidata":"https://www.wikidata.org/wiki/Q7943570","display_name":"Vulnerability management","level":4,"score":0.6848000288009644},{"id":"https://openalex.org/C95713431","wikidata":"https://www.wikidata.org/wiki/Q631425","display_name":"Vulnerability (computing)","level":2,"score":0.6579999923706055},{"id":"https://openalex.org/C544833334","wikidata":"https://www.wikidata.org/wiki/Q2005","display_name":"JavaScript","level":2,"score":0.6274999976158142},{"id":"https://openalex.org/C131275738","wikidata":"https://www.wikidata.org/wiki/Q7445023","display_name":"Security bug","level":5,"score":0.609499990940094},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.5917999744415283},{"id":"https://openalex.org/C26517878","wikidata":"https://www.wikidata.org/wiki/Q228039","display_name":"Key (lock)","level":2,"score":0.5271000266075134},{"id":"https://openalex.org/C115903868","wikidata":"https://www.wikidata.org/wiki/Q80993","display_name":"Software engineering","level":1,"score":0.4968999922275543},{"id":"https://openalex.org/C2777904410","wikidata":"https://www.wikidata.org/wiki/Q7397","display_name":"Software","level":2,"score":0.4593999981880188},{"id":"https://openalex.org/C62913178","wikidata":"https://www.wikidata.org/wiki/Q7554361","display_name":"Software security assurance","level":4,"score":0.44350001215934753},{"id":"https://openalex.org/C2522767166","wikidata":"https://www.wikidata.org/wiki/Q2374463","display_name":"Data science","level":1,"score":0.4172999858856201},{"id":"https://openalex.org/C77109596","wikidata":"https://www.wikidata.org/wiki/Q4781497","display_name":"Application security","level":5,"score":0.39500001072883606},{"id":"https://openalex.org/C118643609","wikidata":"https://www.wikidata.org/wiki/Q189210","display_name":"Web application","level":2,"score":0.3912999927997589},{"id":"https://openalex.org/C168065819","wikidata":"https://www.wikidata.org/wiki/Q845566","display_name":"Debugging","level":2,"score":0.37619999051094055},{"id":"https://openalex.org/C43214815","wikidata":"https://www.wikidata.org/wiki/Q7310987","display_name":"Reliability (semiconductor)","level":3,"score":0.35350000858306885},{"id":"https://openalex.org/C548217200","wikidata":"https://www.wikidata.org/wiki/Q251","display_name":"Java","level":2,"score":0.3504999876022339},{"id":"https://openalex.org/C136764020","wikidata":"https://www.wikidata.org/wiki/Q466","display_name":"World Wide Web","level":1,"score":0.35010001063346863},{"id":"https://openalex.org/C18762648","wikidata":"https://www.wikidata.org/wiki/Q42213","display_name":"Work (physics)","level":2,"score":0.3418000042438507},{"id":"https://openalex.org/C100776233","wikidata":"https://www.wikidata.org/wiki/Q2532492","display_name":"Bridge (graph theory)","level":2,"score":0.3384000062942505},{"id":"https://openalex.org/C105339364","wikidata":"https://www.wikidata.org/wiki/Q2297740","display_name":"Software deployment","level":2,"score":0.32589998841285706},{"id":"https://openalex.org/C529173508","wikidata":"https://www.wikidata.org/wiki/Q638608","display_name":"Software development","level":3,"score":0.3163999915122986},{"id":"https://openalex.org/C140547941","wikidata":"https://www.wikidata.org/wiki/Q7797194","display_name":"Threat model","level":2,"score":0.31610000133514404},{"id":"https://openalex.org/C154908896","wikidata":"https://www.wikidata.org/wiki/Q2167404","display_name":"Security policy","level":2,"score":0.301800012588501},{"id":"https://openalex.org/C39569185","wikidata":"https://www.wikidata.org/wiki/Q371199","display_name":"Cross-site scripting","level":5,"score":0.28850001096725464},{"id":"https://openalex.org/C167063184","wikidata":"https://www.wikidata.org/wiki/Q1400839","display_name":"Vulnerability assessment","level":3,"score":0.27399998903274536},{"id":"https://openalex.org/C60051680","wikidata":"https://www.wikidata.org/wiki/Q30267","display_name":"Aspect-oriented programming","level":3,"score":0.2685999870300293},{"id":"https://openalex.org/C195518309","wikidata":"https://www.wikidata.org/wiki/Q13424265","display_name":"Security testing","level":5,"score":0.26820001006126404},{"id":"https://openalex.org/C112930515","wikidata":"https://www.wikidata.org/wiki/Q4389547","display_name":"Risk analysis (engineering)","level":1,"score":0.2637999951839447},{"id":"https://openalex.org/C111065885","wikidata":"https://www.wikidata.org/wiki/Q1189053","display_name":"Fuzz testing","level":3,"score":0.25940001010894775},{"id":"https://openalex.org/C174683762","wikidata":"https://www.wikidata.org/wiki/Q609588","display_name":"Component-based software engineering","level":4,"score":0.25270000100135803}],"mesh":[],"locations_count":1,"locations":[{"id":"pmh:oai:lup-student-papers.lub.lu.se:9178282","doi":null,"is_oa":true,"landing_page_url":"http://lup.lub.lu.se/student-papers/record/9178282","pdf_url":"http://lup.lub.lu.se/student-papers/record/9178282/file/9178283.pdf","source":{"id":"https://openalex.org/S4306402420","display_name":"Lund University Publications Student Papers (Lund University)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"listed_in":[],"host_organization":"https://openalex.org/I187531555","host_organization_name":"Lund University","host_organization_lineage":["https://openalex.org/I187531555"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"H2"}],"best_oa_location":{"id":"pmh:oai:lup-student-papers.lub.lu.se:9178282","doi":null,"is_oa":true,"landing_page_url":"http://lup.lub.lu.se/student-papers/record/9178282","pdf_url":"http://lup.lub.lu.se/student-papers/record/9178282/file/9178283.pdf","source":{"id":"https://openalex.org/S4306402420","display_name":"Lund University Publications Student Papers (Lund University)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"listed_in":[],"host_organization":"https://openalex.org/I187531555","host_organization_name":"Lund University","host_organization_lineage":["https://openalex.org/I187531555"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"H2"},"sustainable_development_goals":[],"study_designs":[],"awards":[],"funders":[],"has_content":{"grobid_xml":true,"pdf":true},"content_urls":{"pdf":"https://content.openalex.org/works/W6981492146.pdf","grobid_xml":"https://content.openalex.org/works/W6981492146.grobid-xml"},"referenced_works_count":11,"referenced_works":["https://openalex.org/W3008088841","https://openalex.org/W3030163527","https://openalex.org/W3198685994","https://openalex.org/W4299358159","https://openalex.org/W4368755703","https://openalex.org/W4386185625","https://openalex.org/W4391272793","https://openalex.org/W4402426863","https://openalex.org/W4406073740","https://openalex.org/W4406490404","https://openalex.org/W4411552541"],"related_works":["https://openalex.org/W4405715560","https://openalex.org/W7213233278","https://openalex.org/W4416959394","https://openalex.org/W7047811113","https://openalex.org/W4415084737","https://openalex.org/W4417130462","https://openalex.org/W4404782403","https://openalex.org/W4388962945","https://openalex.org/W4402426863","https://openalex.org/W7163726163"],"abstract_inverted_index":{"With":[0],"the":[1,14,52,74,94,117,138,152,178],"rapid":[2],"growth":[3],"of":[4,54,141,183],"software":[5,244],"dependencies":[6],"in":[7,13,28,38,41,64,96,128,135,144,155,243],"critical":[8],"systems,":[9],"detecting":[10],"vulnerabilities":[11,40,63],"early":[12],"development":[15],"cycle":[16],"has":[17],"become":[18],"a":[19,35,87,161],"necessity.":[20],"While":[21],"extensive":[22],"research":[23,76],"exists":[24],"on":[25,86,196],"vulnerability":[26,142,186],"detection":[27,143,234],"low-level":[29],"languages":[30],"like":[31],"C/C++,":[32],"there":[33],"is":[34,212],"significant":[36],"gap":[37],"addressing":[39],"higher-level":[42,250],"languages,":[43,68,124,209],"including":[44,109,188],"JavaScript,":[45],"Python,":[46],"and":[47,112,130,180,194,217,232,239,246],"PHP.":[48],"This":[49],"thesis":[50,80,157],"explores":[51],"feasibility":[53],"using":[55,184],"fine-tuned":[56],"large":[57],"language":[58],"models":[59,153,228],"(LLMs)":[60],"to":[61,72,100,214,235],"detect":[62],"these":[65],"higher":[66],"level":[67],"leveraging":[69],"data-driven":[70],"approaches":[71],"bridge":[73],"existing":[75],"gap.":[77],"In":[78,173],"this":[79,156],"we":[81,176],"work":[82,224],"with":[83,125,165],"fine-tuning":[84],"LLMs":[85,204],"curated":[88],"dataset":[89],"derived":[90],"from":[91],"CVEFixes,":[92],"implementing":[93],"model":[95,118],"an":[97],"API":[98,166],"format":[99],"facilitate":[101],"integration":[102,170],"into":[103],"CI/CD":[104],"pipelines.":[105],"Key":[106],"performance":[107],"metrics,":[108],"accuracy,":[110],"precision,":[111],"F1":[113],"score,":[114],"reveal":[115],"that":[116,202,229],"achieved":[119],"varying":[120],"effectiveness":[121],"across":[122,219],"different":[123],"strong":[126],"results":[127,134],"JavaScript":[129],"Java":[131],"but":[132],"weaker":[133],"PHP,":[136],"highlighting":[137],"nuanced":[139],"challenges":[140],"diverse":[145,220],"programming":[146],"contexts.":[147],"To":[148],"demonstrate":[149],"real-world":[150],"applicability,":[151],"proposed":[154],"were":[158],"deployed":[159],"through":[160],"user-friendly":[162],"web":[163],"interface,":[164],"accessibility":[167],"allowing":[168],"seamless":[169],"for":[171,207,249],"developers.":[172],"our":[174],"discussion,":[175],"address":[177],"ethical":[179],"security":[181],"implications":[182],"AIdriven":[185],"detection,":[187],"potential":[189],"misuse":[190],"by":[191],"malicious":[192],"actors":[193],"over-reliance":[195],"automated":[197],"findings.":[198],"The":[199],"findings":[200],"suggest":[201],"while":[203],"are":[205],"promising":[206],"certain":[208],"further":[210],"refinement":[211],"needed":[213],"improve":[215],"accuracy":[216],"reliability":[218],"high-level":[221],"languages.":[222,251],"Future":[223],"should":[225],"explore":[226],"hybrid":[227],"combine":[230],"traditional":[231],"AI-based":[233],"mitigate":[236],"current":[237],"limitations":[238],"enhance":[240],"practical":[241],"use":[242],"security,":[245],"CWE-specific":[247],"training":[248]},"counts_by_year":[],"updated_date":"2026-11-07T11:25:07.637180","created_date":"2025-10-10T00:00:00"}