{"id":"https://openalex.org/W6989291498","doi":null,"title":"Analysis of Security Findings and Reduction of False Positives through Large Language Models","display_name":"Analysis of Security Findings and Reduction of False Positives through Large Language Models","publication_year":2024,"publication_date":"2024-08-29","ids":{"openalex":"https://openalex.org/W6989291498"},"language":"en","primary_location":{"id":"pmh:oai:qucosa:de:qucosa:94141","doi":null,"is_oa":true,"landing_page_url":"https://htwk-leipzig.qucosa.de/id/qucosa%3A94141","pdf_url":"https://htwk-leipzig.qucosa.de/api/qucosa%3A94141/attachment/ATT-0/","source":{"id":"https://openalex.org/S4377196435","display_name":"Qucosa (Saxon State and University Library Dresden)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"listed_in":[],"host_organization":"https://openalex.org/I3132420320","host_organization_name":"SLUB Dresden","host_organization_lineage":["https://openalex.org/I3132420320"],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"info:eu-repo/semantics/masterThesis"},"volume":null,"type":"dissertation","is_traditional":true,"indexed_in":[],"open_access":{"is_oa":true,"oa_status":"green","oa_url":"https://htwk-leipzig.qucosa.de/api/qucosa%3A94141/attachment/ATT-0/","any_repository_has_fulltext":true},"authorships":[{"author_position":"first","author":{"id":null,"display_name":"Wagner, Jonas","orcid":null,"observed_orcids":[]},"institutions":[],"countries":[],"is_corresponding":true,"raw_author_name":"Wagner, Jonas","raw_affiliation_strings":["Stegh\u00f6fer Leipzig ,"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Stegh\u00f6fer Leipzig ,","institution_ids":[]}]}],"institutions":[],"countries_distinct_count":0,"institutions_distinct_count":0,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":null,"has_fulltext":true,"cited_by_count":0,"citation_normalized_percentile":null,"cited_by_percentile_year":null,"biblio":{"volume":null,"issue":null,"first_page":null,"last_page":null},"is_retracted":false,"is_paratext":false,"is_xpac":true,"primary_topic":{"id":"https://openalex.org/T12479","display_name":"Web Application Security Vulnerabilities","score":0.9458000063896179,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T12479","display_name":"Web Application Security Vulnerabilities","score":0.9458000063896179,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10743","display_name":"Software Testing and Debugging Techniques","score":0.021400000900030136,"subfield":{"id":"https://openalex.org/subfields/1712","display_name":"Software"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":0.01140000019222498,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/language-models","display_name":"language models","score":0.8840000033378601},{"id":"https://openalex.org/keywords/static-application-security-testing","display_name":"static application security testing","score":0.8640000224113464},{"id":"https://openalex.org/keywords/false-positive-reduction","display_name":"false positive reduction","score":0.8420000076293945},{"id":"https://openalex.org/keywords/spotbugs","display_name":"SpotBugs","score":0.8199999928474426},{"id":"https://openalex.org/keywords/chain-of-thought-prompting","display_name":"chain-of-thought prompting","score":0.8840000033378601},{"id":"https://openalex.org/keywords/self-consistency","display_name":"self-consistency","score":0.9459999799728394},{"id":"https://openalex.org/keywords/gpt-4o","display_name":"GPT-4o","score":0.828000009059906},{"id":"https://openalex.org/keywords/llama-3-1","display_name":"Llama 3.1","score":0.871999979019165},{"id":"https://openalex.org/keywords/prompt-engineering","display_name":"prompt engineering","score":0.6129999756813049},{"id":"https://openalex.org/keywords/open-source-llms","display_name":"open-source LLMs","score":0.5320000052452087},{"id":"https://openalex.org/keywords/diagnostic-sensitivity","display_name":"diagnostic sensitivity","score":0.628000020980835},{"id":"https://openalex.org/keywords/false-positive-rate","display_name":"false positive rate","score":0.9269999861717224}],"concepts":[{"id":"https://openalex.org/C64869954","wikidata":"https://www.wikidata.org/wiki/Q1859747","display_name":"False positive paradox","level":2,"score":0.7768999934196472},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.5835999846458435},{"id":"https://openalex.org/C2779343474","wikidata":"https://www.wikidata.org/wiki/Q3109175","display_name":"Context (archaeology)","level":2,"score":0.5677000284194946},{"id":"https://openalex.org/C185798385","wikidata":"https://www.wikidata.org/wiki/Q1161707","display_name":"Benchmark (surveying)","level":2,"score":0.5644000172615051},{"id":"https://openalex.org/C111335779","wikidata":"https://www.wikidata.org/wiki/Q3454686","display_name":"Reduction (mathematics)","level":2,"score":0.4399000108242035},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.42590001225471497},{"id":"https://openalex.org/C119857082","wikidata":"https://www.wikidata.org/wiki/Q2539","display_name":"Machine learning","level":1,"score":0.3910999894142151},{"id":"https://openalex.org/C112789634","wikidata":"https://www.wikidata.org/wiki/Q18207010","display_name":"False positives and false negatives","level":3,"score":0.38830000162124634},{"id":"https://openalex.org/C98045186","wikidata":"https://www.wikidata.org/wiki/Q205663","display_name":"Process (computing)","level":2,"score":0.35010001063346863},{"id":"https://openalex.org/C2989486834","wikidata":"https://www.wikidata.org/wiki/Q3808900","display_name":"True positive rate","level":2,"score":0.34529998898506165},{"id":"https://openalex.org/C124101348","wikidata":"https://www.wikidata.org/wiki/Q172491","display_name":"Data mining","level":1,"score":0.3407000005245209},{"id":"https://openalex.org/C105795698","wikidata":"https://www.wikidata.org/wiki/Q12483","display_name":"Statistics","level":1,"score":0.31029999256134033},{"id":"https://openalex.org/C204321447","wikidata":"https://www.wikidata.org/wiki/Q30642","display_name":"Natural language processing","level":1,"score":0.30570000410079956},{"id":"https://openalex.org/C149782125","wikidata":"https://www.wikidata.org/wiki/Q160039","display_name":"Econometrics","level":1,"score":0.27649998664855957},{"id":"https://openalex.org/C2986045029","wikidata":"https://www.wikidata.org/wiki/Q294240","display_name":"Public security","level":2,"score":0.27399998903274536},{"id":"https://openalex.org/C188198153","wikidata":"https://www.wikidata.org/wiki/Q1613840","display_name":"Limiting","level":2,"score":0.2531000077724457}],"mesh":[],"locations_count":1,"locations":[{"id":"pmh:oai:qucosa:de:qucosa:94141","doi":null,"is_oa":true,"landing_page_url":"https://htwk-leipzig.qucosa.de/id/qucosa%3A94141","pdf_url":"https://htwk-leipzig.qucosa.de/api/qucosa%3A94141/attachment/ATT-0/","source":{"id":"https://openalex.org/S4377196435","display_name":"Qucosa (Saxon State and University Library Dresden)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"listed_in":[],"host_organization":"https://openalex.org/I3132420320","host_organization_name":"SLUB Dresden","host_organization_lineage":["https://openalex.org/I3132420320"],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"info:eu-repo/semantics/masterThesis"}],"best_oa_location":{"id":"pmh:oai:qucosa:de:qucosa:94141","doi":null,"is_oa":true,"landing_page_url":"https://htwk-leipzig.qucosa.de/id/qucosa%3A94141","pdf_url":"https://htwk-leipzig.qucosa.de/api/qucosa%3A94141/attachment/ATT-0/","source":{"id":"https://openalex.org/S4377196435","display_name":"Qucosa (Saxon State and University Library Dresden)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"listed_in":[],"host_organization":"https://openalex.org/I3132420320","host_organization_name":"SLUB Dresden","host_organization_lineage":["https://openalex.org/I3132420320"],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"info:eu-repo/semantics/masterThesis"},"sustainable_development_goals":[],"study_designs":[],"awards":[],"funders":[],"has_content":{"pdf":true,"grobid_xml":true},"content_urls":{"pdf":"https://content.openalex.org/works/W6989291498.pdf","grobid_xml":"https://content.openalex.org/works/W6989291498.grobid-xml"},"referenced_works_count":84,"referenced_works":["https://openalex.org/W1816313093","https://openalex.org/W1982621550","https://openalex.org/W2124153277","https://openalex.org/W2460117687","https://openalex.org/W2545289138","https://openalex.org/W2581624817","https://openalex.org/W2624094989","https://openalex.org/W2626778328","https://openalex.org/W2896457183","https://openalex.org/W2981852735","https://openalex.org/W3001279689","https://openalex.org/W3015499098","https://openalex.org/W3030163527","https://openalex.org/W3034942609","https://openalex.org/W3083410900","https://openalex.org/W3144293453","https://openalex.org/W3151685851","https://openalex.org/W3176554092","https://openalex.org/W3177813494","https://openalex.org/W3184144760","https://openalex.org/W3187134297","https://openalex.org/W3194114348","https://openalex.org/W3198002980","https://openalex.org/W3203321135","https://openalex.org/W4214485088","https://openalex.org/W4220988989","https://openalex.org/W4221153119","https://openalex.org/W4221159404","https://openalex.org/W4221161695","https://openalex.org/W4223908421","https://openalex.org/W4224308101","https://openalex.org/W4285192944","https://openalex.org/W4285490477","https://openalex.org/W4292120277","https://openalex.org/W4301243929","https://openalex.org/W4302023899","https://openalex.org/W4304194220","https://openalex.org/W4308627645","https://openalex.org/W4311165836","https://openalex.org/W4313483544","https://openalex.org/W4313887307","https://openalex.org/W4322718191","https://openalex.org/W4323857800","https://openalex.org/W4324138978","https://openalex.org/W4327810158","https://openalex.org/W4362515116","https://openalex.org/W4376653732","https://openalex.org/W4377121468","https://openalex.org/W4378554228","https://openalex.org/W4382397550","https://openalex.org/W4384918448","https://openalex.org/W4385567149","https://openalex.org/W4386185625","https://openalex.org/W4386214355","https://openalex.org/W4386273017","https://openalex.org/W4386302153","https://openalex.org/W4387390444","https://openalex.org/W4387561528","https://openalex.org/W4389156617","https://openalex.org/W4389159189","https://openalex.org/W4389519118","https://openalex.org/W4390041933","https://openalex.org/W4390513007","https://openalex.org/W4390723197","https://openalex.org/W4390833061","https://openalex.org/W4391215636","https://openalex.org/W4391272793","https://openalex.org/W4392679398","https://openalex.org/W4395474395","https://openalex.org/W4399203759","https://openalex.org/W4399418643","https://openalex.org/W4399667970","https://openalex.org/W4399836663","https://openalex.org/W4401306886","https://openalex.org/W4401885808","https://openalex.org/W4402665833","https://openalex.org/W4402670325","https://openalex.org/W4402683949","https://openalex.org/W4405887239","https://openalex.org/W4415829728","https://openalex.org/W7133209886","https://openalex.org/W7133224126","https://openalex.org/W7133231369","https://openalex.org/W7155906632"],"related_works":["https://openalex.org/W6891829139","https://openalex.org/W4416368800","https://openalex.org/W4406991763","https://openalex.org/W7127178521","https://openalex.org/W4404395962","https://openalex.org/W7159957482","https://openalex.org/W7172518500","https://openalex.org/W7160279726","https://openalex.org/W4415933333","https://openalex.org/W7167263010"],"abstract_inverted_index":{"This":[0],"thesis":[1],"investigates":[2],"the":[3,13,52,80,85,93,108,117,136,155,158,164,201,231,240,252],"integration":[4],"of":[5,15,56,75,88,110,157,170,182,200,212,258,283,287,291,295,300,364],"State-of-the-Art":[6],"(SOTA)":[7],"Large":[8,340,366],"Language":[9,341,367],"Models":[10,342,368],"(LLMs)":[11],"into":[12],"process":[14],"reassessing":[16],"security":[17,57,76],"findings":[18,77,226],"generated":[19,238],"by":[20,92,189,219,271],"Static":[21],"Application":[22],"Security":[23,319],"Testing":[24],"(SAST)":[25],"tools.":[26,247],"The":[27,69,112,139],"primary":[28],"objective":[29],"is":[30],"to":[31,37,235],"determine":[32],"whether":[33],"LLMs":[34,147],"are":[35],"able":[36],"detect":[38],"false":[39],"positives":[40],"(FPs)":[41],"while":[42,106,261],"maintaining":[43],"a":[44,73,179,185,210,215,228,236,268,318,325],"high":[45],"true":[46],"positive":[47],"(TP)":[48],"rate,":[49],"thereby":[50],"enhancing":[51],"efficiency":[53],"and":[54,145,184,214],"effectiveness":[55],"assessments.":[58],"Four":[59],"consecutive":[60],"experiments":[61],"were":[62],"conducted,":[63],"each":[64],"addressing":[65],"specific":[66],"research":[67],"questions.":[68],"initial":[70],"experiment,":[71,114],"using":[72,244],"dataset":[74,152,237],"extracted":[78],"from":[79,239],"OWASP":[81,150],"Bench-":[82],"mark,":[83],"identified":[84],"optimal":[86],"combination":[87],"context":[89],"items":[90],"provided":[91],"SAST":[94,246],"tool":[95],"Spot-":[96],"Bugs,":[97],"which,":[98],"when":[99],"used":[100,160],"with":[101,131],"GPT-3.5":[102],"Turbo,":[103],"reduced":[104],"FPs":[105,172,203,260],"minimizing":[107],"loss":[109],"TPs.":[111],"second":[113],"conducted":[115],"on":[116,148,374],"same":[118],"dataset,":[119],"demonstrated":[120],"that":[121],"advanced":[122],"prompting":[123,129],"techniques,":[124],"particularly":[125],"few-shot":[126],"Chain-of-Thought":[127],"(CoT)":[128],"combined":[130],"Self-Consistency":[132,373],"(SC),":[133],"further":[134],"improved":[135],"reassessment":[137],"process.":[138],"third":[140],"experiment":[141],"compared":[142],"both":[143],"proprietary":[144],"open-source":[146,241],"an":[149,277],"Benchmark":[151],"about":[153],"one-fourth":[154],"size":[156],"previously":[159],"dataset.":[161],"GPT-4o":[162,248],"achieved":[163],"highest":[165],"performance,":[166],"detecting":[167,255],"80":[168],"out":[169,199,257],"128":[171,202],"without":[173],"missing":[174,263],"any":[175],"TPs,":[176,207],"resulting":[177,208,266],"in":[178,187,209,217,227,267],"perfect":[180],"TPR":[181,211,269],"100%":[183],"decrease":[186],"FPR":[188,218,278],"41.27":[190],"percentage":[191,221,273,281],"points.":[192,222],"Meanwhile,":[193],"Llama":[194],"3.1":[195],"70B":[196],"detected":[197],"112":[198],"but":[204,275],"missed":[205],"10":[206],"94.94%":[213],"reduction":[216],"56.62":[220],"To":[223],"validate":[224],"these":[225],"real-world":[229],"context,":[230],"approach":[232],"was":[233],"applied":[234],"project":[242],"Mnestix":[243,375],"multiple":[245],"again":[249],"emerged":[250],"as":[251],"top":[253],"performer,":[254],"26":[256],"68":[259],"only":[262],"one":[264],"TP,":[265],"decreased":[270,279],"2.22":[272],"points":[274],"simultaneously":[276],"37.57":[280],"points.:Table":[282],"Contents":[284],"IV":[285],"List":[286,290,294,299],"Figures":[288,354],"VI":[289],"Tables":[292,380],"VIII":[293],"Source":[296],"Codes":[297],"IX":[298],"Abbreviations":[301],"XI":[302],"1.":[303],"Motivation":[304],"1":[305],"2.":[306],"Background":[307],"3":[308],"3.":[309],"Related":[310],"Work":[311],"17":[312],"4.":[313],"Concept":[314,386],"31":[315],"5.":[316],"Preparing":[317],"Findings":[320],"Dataset":[321,376,415],"39":[322],"6.":[323],"Implementing":[324],"Workflow":[326],"51":[327],"7.":[328],"Identifying":[329],"Context":[330],"Items":[331],"67":[332],"8.":[333],"Comparing":[334,339],"Prompting":[335],"Techniques":[336],"85":[337],"9.":[338],"101":[343],"10.Evaluating":[344],"Developed":[345],"Approach":[346],"127":[347],"11.Discussion":[348],"141":[349],"12.Conclusion":[350],"145":[351],"A.":[352],"Appendix:":[353,379,389],"147":[355],"A.1.":[356],"Repository":[357],"Directory":[358],"Tree":[359],"148":[360],"A.2.":[361],"Precision-Recall":[362],"Curve":[363],"Compared":[365],"149":[369],"A.3.":[370],"Performance":[371],"Metrics":[372],"150":[377],"B.":[378],"151":[381,387],"B.1.":[382],"Design":[383],"Science":[384],"Research":[385],"C.":[388],"Code":[390],"153":[391,397],"C.1.":[392],"Pydantic":[393,399],"Base":[394],"Config":[395,402],"Documentation":[396,403],"C.2.":[398],"LLM":[400,406],"Client":[401],"155":[404],"C.3.":[405],"BaseClient":[407],"Class":[408],"157":[409],"C.4.":[410],"Test":[411],"Cases":[412],"Removed":[413],"From":[414],"158":[416]},"counts_by_year":[],"updated_date":"2026-11-07T11:25:07.637180","created_date":"2025-10-10T00:00:00"}