{"id":"https://openalex.org/W7128728539","doi":"https://doi.org/10.48550/arxiv.2602.10778","title":"GoodVibe: Security-by-Vibe for LLM-Based Code Generation","display_name":"GoodVibe: Security-by-Vibe for LLM-Based Code Generation","publication_year":2026,"publication_date":"2026-02-11","ids":{"openalex":"https://openalex.org/W7128728539","doi":"https://doi.org/10.48550/arxiv.2602.10778"},"language":"en","primary_location":{"id":"pmh:oai:arXiv.org:2602.10778","doi":null,"is_oa":true,"landing_page_url":"https://arxiv.org/abs/2602.10778","pdf_url":"https://arxiv.org/pdf/2602.10778","source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":"2331-8422","issn":["2331-8422"],"is_oa":true,"is_in_doaj":false,"is_core":false,"listed_in":[],"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"text"},"volume":null,"type":"preprint","is_traditional":true,"indexed_in":["arxiv","datacite"],"open_access":{"is_oa":true,"oa_status":"green","oa_url":"https://arxiv.org/pdf/2602.10778","any_repository_has_fulltext":true},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5125707576","display_name":"Maximilian Thang","orcid":null,"observed_orcids":[]},"institutions":[{"id":"https://openalex.org/I31512782","display_name":"Technische Universit\u00e4t Darmstadt","ror":"https://ror.org/05n911h24","country_code":"DE","type":"education","lineage":["https://openalex.org/I31512782"]}],"countries":["DE"],"is_corresponding":false,"raw_author_name":"Thang, Maximilian","raw_affiliation_strings":["Technical University of Darmstadt"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Technical University of Darmstadt","institution_ids":["https://openalex.org/I31512782"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5045570758","display_name":"Lichao Wu","orcid":"https://orcid.org/0000-0002-7139-732X","observed_orcids":["https://orcid.org/0000-0002-7139-732X"]},"institutions":[{"id":"https://openalex.org/I31512782","display_name":"Technische Universit\u00e4t Darmstadt","ror":"https://ror.org/05n911h24","country_code":"DE","type":"education","lineage":["https://openalex.org/I31512782"]}],"countries":["DE"],"is_corresponding":false,"raw_author_name":"Wu, Lichao","raw_affiliation_strings":["Technical University of Darmstadt"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Technical University of Darmstadt","institution_ids":["https://openalex.org/I31512782"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5121354056","display_name":"Sasha Behrouzi","orcid":"https://orcid.org/0000-0002-7938-9818","observed_orcids":["https://orcid.org/0000-0002-7938-9818"]},"institutions":[{"id":"https://openalex.org/I31512782","display_name":"Technische Universit\u00e4t Darmstadt","ror":"https://ror.org/05n911h24","country_code":"DE","type":"education","lineage":["https://openalex.org/I31512782"]}],"countries":["DE"],"is_corresponding":false,"raw_author_name":"Behrouzi, Sasha","raw_affiliation_strings":["Technical University of Darmstadt"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Technical University of Darmstadt","institution_ids":["https://openalex.org/I31512782"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5090473338","display_name":"Mohamadreza Rostami","orcid":"https://orcid.org/0009-0005-7293-2733","observed_orcids":["https://orcid.org/0009-0005-7293-2733"]},"institutions":[{"id":"https://openalex.org/I31512782","display_name":"Technische Universit\u00e4t Darmstadt","ror":"https://ror.org/05n911h24","country_code":"DE","type":"education","lineage":["https://openalex.org/I31512782"]}],"countries":["DE"],"is_corresponding":false,"raw_author_name":"Rostami, Mohamadreza","raw_affiliation_strings":["Technical University of Darmstadt"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Technical University of Darmstadt","institution_ids":["https://openalex.org/I31512782"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5093917340","display_name":"Jona te Lintelo","orcid":"https://orcid.org/0009-0007-7636-6788","observed_orcids":["https://orcid.org/0009-0007-7636-6788"]},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Lintelo, Jona te","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5024072796","display_name":"Stjepan Picek","orcid":"https://orcid.org/0000-0001-7509-4337","observed_orcids":["https://orcid.org/0000-0001-7509-4337","https://orcid.org/0000-0002-9290-1580"]},"institutions":[{"id":"https://openalex.org/I181343428","display_name":"University of Zagreb","ror":"https://ror.org/00mv6sv71","country_code":"HR","type":"education","lineage":["https://openalex.org/I181343428"]}],"countries":["HR"],"is_corresponding":false,"raw_author_name":"Picek, Stjepan","raw_affiliation_strings":["University of Zagreb & Radboud University"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"University of Zagreb & Radboud University","institution_ids":["https://openalex.org/I181343428"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5079497016","display_name":"Ahmad\u2010Reza Sadeghi","orcid":"https://orcid.org/0000-0001-6833-3598","observed_orcids":["https://orcid.org/0000-0001-6833-3598"]},"institutions":[{"id":"https://openalex.org/I31512782","display_name":"Technische Universit\u00e4t Darmstadt","ror":"https://ror.org/05n911h24","country_code":"DE","type":"education","lineage":["https://openalex.org/I31512782"]}],"countries":["DE"],"is_corresponding":false,"raw_author_name":"Sadeghi, Ahmad-Reza","raw_affiliation_strings":["Technical University of Darmstadt"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Technical University of Darmstadt","institution_ids":["https://openalex.org/I31512782"]}]}],"institutions":[],"countries_distinct_count":2,"institutions_distinct_count":2,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":null,"has_fulltext":true,"cited_by_count":4,"citation_normalized_percentile":null,"cited_by_percentile_year":null,"biblio":{"volume":null,"issue":null,"first_page":null,"last_page":null},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":0.7031000256538391,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":0.7031000256538391,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10260","display_name":"Software Engineering Research","score":0.1665000021457672,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11424","display_name":"Security and Verification in Computing","score":0.07100000232458115,"subfield":{"id":"https://openalex.org/subfields/1708","display_name":"Hardware and Architecture"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/llm-based-code-generation","display_name":"LLM-based code generation","score":0.8309999704360962},{"id":"https://openalex.org/keywords/code-security","display_name":"code security","score":0.8050000071525574},{"id":"https://openalex.org/keywords/vibe-coding","display_name":"vibe coding","score":0.7990000247955322},{"id":"https://openalex.org/keywords/gradient-based-attribution","display_name":"gradient-based attribution","score":0.7289999723434448},{"id":"https://openalex.org/keywords/neuron-clustering","display_name":"neuron clustering","score":0.6959999799728394},{"id":"https://openalex.org/keywords/parameter-efficient-fine-tuning","display_name":"parameter-efficient fine-tuning","score":0.8209999799728394},{"id":"https://openalex.org/keywords/catastrophic-forgetting","display_name":"catastrophic forgetting","score":0.9089999794960022},{"id":"https://openalex.org/keywords/lora-comparison","display_name":"LoRA comparison","score":0.5040000081062317}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.8029999732971191},{"id":"https://openalex.org/C2781067378","wikidata":"https://www.wikidata.org/wiki/Q17027399","display_name":"Interpretability","level":2,"score":0.7275000214576721},{"id":"https://openalex.org/C2776760102","wikidata":"https://www.wikidata.org/wiki/Q5139990","display_name":"Code (set theory)","level":3,"score":0.6053000092506409},{"id":"https://openalex.org/C48044578","wikidata":"https://www.wikidata.org/wiki/Q727490","display_name":"Scalability","level":2,"score":0.5947999954223633},{"id":"https://openalex.org/C26517878","wikidata":"https://www.wikidata.org/wiki/Q228039","display_name":"Key (lock)","level":2,"score":0.4964999854564667},{"id":"https://openalex.org/C165064840","wikidata":"https://www.wikidata.org/wiki/Q1321061","display_name":"Matching (statistics)","level":2,"score":0.4293000102043152},{"id":"https://openalex.org/C133162039","wikidata":"https://www.wikidata.org/wiki/Q1061077","display_name":"Code generation","level":3,"score":0.41620001196861267},{"id":"https://openalex.org/C2780451532","wikidata":"https://www.wikidata.org/wiki/Q759676","display_name":"Task (project management)","level":2,"score":0.41620001196861267},{"id":"https://openalex.org/C119857082","wikidata":"https://www.wikidata.org/wiki/Q2539","display_name":"Machine learning","level":1,"score":0.37610000371932983},{"id":"https://openalex.org/C125411270","wikidata":"https://www.wikidata.org/wiki/Q18653","display_name":"Encoding (memory)","level":2,"score":0.3617999851703644},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.3601999878883362},{"id":"https://openalex.org/C121822524","wikidata":"https://www.wikidata.org/wiki/Q5157582","display_name":"Computer security model","level":2,"score":0.3287999927997589},{"id":"https://openalex.org/C177774035","wikidata":"https://www.wikidata.org/wiki/Q1246948","display_name":"Granularity","level":2,"score":0.3262999951839447},{"id":"https://openalex.org/C45374587","wikidata":"https://www.wikidata.org/wiki/Q12525525","display_name":"Computation","level":2,"score":0.3050000071525574},{"id":"https://openalex.org/C189430467","wikidata":"https://www.wikidata.org/wiki/Q7293293","display_name":"Ranking (information retrieval)","level":2,"score":0.2847000062465668},{"id":"https://openalex.org/C206345919","wikidata":"https://www.wikidata.org/wiki/Q20380951","display_name":"Resource (disambiguation)","level":2,"score":0.27950000762939453},{"id":"https://openalex.org/C137293760","wikidata":"https://www.wikidata.org/wiki/Q3621696","display_name":"Language model","level":2,"score":0.26489999890327454},{"id":"https://openalex.org/C12725497","wikidata":"https://www.wikidata.org/wiki/Q810247","display_name":"Baseline (sea)","level":2,"score":0.2614000141620636},{"id":"https://openalex.org/C34165917","wikidata":"https://www.wikidata.org/wiki/Q188267","display_name":"Programming paradigm","level":2,"score":0.2578999996185303},{"id":"https://openalex.org/C185798385","wikidata":"https://www.wikidata.org/wiki/Q1161707","display_name":"Benchmark (surveying)","level":2,"score":0.2547999918460846},{"id":"https://openalex.org/C108583219","wikidata":"https://www.wikidata.org/wiki/Q197536","display_name":"Deep learning","level":2,"score":0.25110000371932983}],"mesh":[],"locations_count":2,"locations":[{"id":"pmh:oai:arXiv.org:2602.10778","doi":null,"is_oa":true,"landing_page_url":"https://arxiv.org/abs/2602.10778","pdf_url":"https://arxiv.org/pdf/2602.10778","source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":"2331-8422","issn":["2331-8422"],"is_oa":true,"is_in_doaj":false,"is_core":false,"listed_in":[],"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"text"},{"id":"doi:10.48550/arxiv.2602.10778","doi":"https://doi.org/10.48550/arxiv.2602.10778","is_oa":true,"landing_page_url":"https://doi.org/10.48550/arxiv.2602.10778","pdf_url":null,"source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":"2331-8422","issn":["2331-8422"],"is_oa":true,"is_in_doaj":false,"is_core":false,"listed_in":[],"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":null,"is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"Preprint"}],"best_oa_location":{"id":"pmh:oai:arXiv.org:2602.10778","doi":null,"is_oa":true,"landing_page_url":"https://arxiv.org/abs/2602.10778","pdf_url":"https://arxiv.org/pdf/2602.10778","source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":"2331-8422","issn":["2331-8422"],"is_oa":true,"is_in_doaj":false,"is_core":false,"listed_in":[],"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"text"},"sustainable_development_goals":[],"study_designs":[],"awards":[],"funders":[],"has_content":{"grobid_xml":true,"pdf":true},"content_urls":{"pdf":"https://content.openalex.org/works/W7128728539.pdf","grobid_xml":"https://content.openalex.org/works/W7128728539.grobid-xml"},"referenced_works_count":14,"referenced_works":["https://openalex.org/W2794325560","https://openalex.org/W3177813494","https://openalex.org/W3210904070","https://openalex.org/W4386185625","https://openalex.org/W4387436590","https://openalex.org/W4403623850","https://openalex.org/W4404782576","https://openalex.org/W4406794439","https://openalex.org/W4414939355","https://openalex.org/W4415318208","https://openalex.org/W4417026657","https://openalex.org/W4417133177","https://openalex.org/W6928794810","https://openalex.org/W6947991961"],"related_works":["https://openalex.org/W4415602516","https://openalex.org/W7166843433","https://openalex.org/W7154426935","https://openalex.org/W7130651357","https://openalex.org/W4408355426","https://openalex.org/W7162543595","https://openalex.org/W7135428454","https://openalex.org/W4402457779","https://openalex.org/W7133222519","https://openalex.org/W7118181520"],"abstract_inverted_index":{"Large":[0],"language":[1,94],"models":[2,37,95],"(LLMs)":[3],"are":[4,25,30,64],"increasingly":[5],"used":[6],"for":[7,88],"code":[8,54,93,177,233],"generation":[9,234],"in":[10],"fast,":[11],"informal":[12],"development":[13],"workflows,":[14],"often":[15],"referred":[16],"to":[17,52,69,110,185,214,231],"as":[18],"vibe":[19],"coding,":[20],"where":[21],"speed":[22],"and":[23,27,67,80,128,168,205,228],"convenience":[24],"prioritized,":[26],"security":[28,48,55,91,126,174],"requirements":[29],"rarely":[31],"made":[32],"explicit.":[33],"In":[34],"this":[35,135],"setting,":[36],"frequently":[38],"produce":[39],"functionally":[40],"correct":[41],"but":[42],"insecure":[43],"code,":[44],"creating":[45],"a":[46,85,111,124,186],"growing":[47],"risk.":[49],"Existing":[50],"approaches":[51],"improving":[53,89],"rely":[56],"on":[57,101,157],"full-parameter":[58],"fine-tuning":[59,131,197],"or":[60,72],"parameter-efficient":[61,216],"adaptations,":[62],"which":[63],"either":[65],"costly":[66],"prone":[68],"catastrophic":[70],"forgetting":[71],"operate":[73],"at":[74],"coarse":[75],"granularity":[76],"with":[77,151,195],"limited":[78],"interpretability":[79],"control.":[81],"We":[82,116,154],"present":[83],"GoodVibe,":[84],"neuron-level":[86,223],"framework":[87],"the":[90,102,173,215],"of":[92,114,175],"by":[96,209],"default.":[97],"GoodVibe":[98,156,170],"is":[99,108],"based":[100],"key":[103],"insight":[104],"that":[105,132,222],"security-relevant":[106],"reasoning":[107],"localized":[109],"small":[112],"subset":[113],"neurons.":[115],"identify":[117],"these":[118],"neurons":[119],"using":[120,199],"gradient-based":[121],"attribution":[122],"from":[123],"supervised":[125],"task":[127],"perform":[129],"neuron-selective":[130],"updates":[133,150],"only":[134],"security-critical":[136,161],"subspace.":[137],"To":[138],"further":[139],"reduce":[140],"training":[141,207],"cost,":[142],"we":[143],"introduce":[144],"activation-driven":[145],"neuron":[146],"clustering,":[147],"enabling":[148],"structured":[149],"minimal":[152],"overhead.":[153],"evaluate":[155],"six":[158],"LLMs":[159],"across":[160],"programming":[162],"languages,":[163],"including":[164],"C++,":[165],"Java,":[166],"Swift,":[167],"Go.":[169],"substantially":[171],"improves":[172],"generated":[176],"while":[178,198],"preserving":[179],"general":[180],"model":[181],"utility,":[182],"achieving":[183,192],"up":[184],"2.5x":[187],"improvement":[188],"over":[189,200],"base":[190],"models,":[191],"performance":[193],"competitive":[194],"full":[196],"4,700x":[201],"fewer":[202],"trainable":[203],"parameters,":[204],"reducing":[206],"computation":[208],"more":[210],"than":[211],"3.6x":[212],"compared":[213],"baseline":[217],"(LoRA).":[218],"Our":[219],"results":[220],"demonstrate":[221],"optimization":[224],"offers":[225],"an":[226],"effective":[227],"scalable":[229],"approach":[230],"securing":[232],"without":[235],"sacrificing":[236],"generality.":[237]},"counts_by_year":[{"year":2026,"cited_by_count":4}],"updated_date":"2026-11-07T11:25:07.637180","created_date":"2026-02-13T00:00:00"}