{"id":"https://openalex.org/W7163756312","doi":"https://doi.org/10.1016/j.infsof.2026.108213","title":"Leveraging Large Language Models for advanced static code analysis: Assessing the feasibility of AI superseding traditional vulnerability detection methods","display_name":"Leveraging Large Language Models for advanced static code analysis: Assessing the feasibility of AI superseding traditional vulnerability detection methods","publication_year":2026,"publication_date":"2026-06-06","ids":{"openalex":"https://openalex.org/W7163756312","doi":"https://doi.org/10.1016/j.infsof.2026.108213"},"language":"en","primary_location":{"id":"doi:10.1016/j.infsof.2026.108213","is_oa":true,"landing_page_url":"https://doi.org/10.1016/j.infsof.2026.108213","pdf_url":null,"source":{"id":"https://openalex.org/S205010575","display_name":"Information and Software Technology","issn_l":"0950-5849","issn":["0950-5849","1873-6025"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310320990","host_organization_name":"Elsevier BV","host_organization_lineage":["https://openalex.org/P4310320990"],"host_organization_lineage_names":["Elsevier BV"],"type":"journal"},"license":"cc-by-nc","license_id":"https://openalex.org/licenses/cc-by-nc","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Information and Software Technology","raw_type":"journal-article"},"type":"article","indexed_in":["crossref"],"open_access":{"is_oa":true,"oa_status":"hybrid","oa_url":"https://doi.org/10.1016/j.infsof.2026.108213","any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5138020522","display_name":"Damian Koterba","orcid":"https://orcid.org/0009-0000-1969-5242"},"institutions":[{"id":"https://openalex.org/I4210092770","display_name":"Cracow University of Technology","ror":null,"country_code":"PL","type":null,"lineage":["https://openalex.org/I4210092770"]}],"countries":["PL"],"is_corresponding":true,"raw_author_name":"Damian Koterba","raw_affiliation_strings":["Cracow University of Technology, Department of Computer Science, Warszawska 24, Cracow, 31-155, Poland"],"raw_orcid":"https://orcid.org/0009-0000-1969-5242","affiliations":[{"raw_affiliation_string":"Cracow University of Technology, Department of Computer Science, Warszawska 24, Cracow, 31-155, Poland","institution_ids":["https://openalex.org/I4210092770"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5105036131","display_name":"Maryna Lukaczyk","orcid":null},"institutions":[{"id":"https://openalex.org/I4210092770","display_name":"Cracow University of Technology","ror":null,"country_code":"PL","type":null,"lineage":["https://openalex.org/I4210092770"]}],"countries":["PL"],"is_corresponding":false,"raw_author_name":"Maryna \u0141ukaczyk","raw_affiliation_strings":["CUT Doctoral School, Faculty of Computer Science and Mathematics, Cracow University of Technology, Warszawska 24, Cracow, 31-155, Poland","Cracow University of Technology, Department of Computer Science, Warszawska 24, Cracow, 31-155, Poland"],"raw_orcid":"https://orcid.org/0009-0008-4834-8889","affiliations":[{"raw_affiliation_string":"CUT Doctoral School, Faculty of Computer Science and Mathematics, Cracow University of Technology, Warszawska 24, Cracow, 31-155, Poland","institution_ids":["https://openalex.org/I4210092770"]},{"raw_affiliation_string":"Cracow University of Technology, Department of Computer Science, Warszawska 24, Cracow, 31-155, Poland","institution_ids":["https://openalex.org/I4210092770"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5138032299","display_name":"Wojciech Ksi\u0105\u017cek","orcid":"https://orcid.org/0000-0001-8743-8758"},"institutions":[{"id":"https://openalex.org/I4210092770","display_name":"Cracow University of Technology","ror":null,"country_code":"PL","type":null,"lineage":["https://openalex.org/I4210092770"]}],"countries":["PL"],"is_corresponding":false,"raw_author_name":"Wojciech Ksi\u0105\u017cek","raw_affiliation_strings":["Cracow University of Technology, Department of Computer Science, Warszawska 24, Cracow, 31-155, Poland"],"raw_orcid":"https://orcid.org/0000-0001-8743-8758","affiliations":[{"raw_affiliation_string":"Cracow University of Technology, Department of Computer Science, Warszawska 24, Cracow, 31-155, Poland","institution_ids":["https://openalex.org/I4210092770"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":3,"corresponding_author_ids":["https://openalex.org/A5138020522"],"corresponding_institution_ids":["https://openalex.org/I4210092770"],"apc_list":{"value":3350,"currency":"USD","value_usd":3350},"apc_paid":{"value":3350,"currency":"USD","value_usd":3350},"fwci":0.0,"has_fulltext":false,"cited_by_count":0,"citation_normalized_percentile":{"value":0.86033109,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":null,"biblio":{"volume":"198","issue":null,"first_page":"108213","last_page":"108213"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":0.2782000005245209,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":0.2782000005245209,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10260","display_name":"Software Engineering Research","score":0.13349999487400055,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10743","display_name":"Software Testing and Debugging Techniques","score":0.12639999389648438,"subfield":{"id":"https://openalex.org/subfields/1712","display_name":"Software"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/code","display_name":"Code (set theory)","score":0.5649999976158142},{"id":"https://openalex.org/keywords/key","display_name":"Key (lock)","score":0.4260999858379364},{"id":"https://openalex.org/keywords/vulnerability","display_name":"Vulnerability (computing)","score":0.4124000072479248},{"id":"https://openalex.org/keywords/language-model","display_name":"Language model","score":0.3441999852657318},{"id":"https://openalex.org/keywords/scheme","display_name":"Scheme (mathematics)","score":0.29010000824928284}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.7199000120162964},{"id":"https://openalex.org/C2776760102","wikidata":"https://www.wikidata.org/wiki/Q5139990","display_name":"Code (set theory)","level":3,"score":0.5649999976158142},{"id":"https://openalex.org/C26517878","wikidata":"https://www.wikidata.org/wiki/Q228039","display_name":"Key (lock)","level":2,"score":0.4260999858379364},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.42010000348091125},{"id":"https://openalex.org/C95713431","wikidata":"https://www.wikidata.org/wiki/Q631425","display_name":"Vulnerability (computing)","level":2,"score":0.4124000072479248},{"id":"https://openalex.org/C137293760","wikidata":"https://www.wikidata.org/wiki/Q3621696","display_name":"Language model","level":2,"score":0.3441999852657318},{"id":"https://openalex.org/C124101348","wikidata":"https://www.wikidata.org/wiki/Q172491","display_name":"Data mining","level":1,"score":0.32440000772476196},{"id":"https://openalex.org/C77618280","wikidata":"https://www.wikidata.org/wiki/Q1155772","display_name":"Scheme (mathematics)","level":2,"score":0.29010000824928284},{"id":"https://openalex.org/C168167062","wikidata":"https://www.wikidata.org/wiki/Q1117970","display_name":"Component (thermodynamics)","level":2,"score":0.27559998631477356},{"id":"https://openalex.org/C119857082","wikidata":"https://www.wikidata.org/wiki/Q2539","display_name":"Machine learning","level":1,"score":0.27090001106262207},{"id":"https://openalex.org/C204321447","wikidata":"https://www.wikidata.org/wiki/Q30642","display_name":"Natural language processing","level":1,"score":0.2678000032901764},{"id":"https://openalex.org/C43126263","wikidata":"https://www.wikidata.org/wiki/Q128751","display_name":"Source code","level":2,"score":0.2651999890804291},{"id":"https://openalex.org/C9652623","wikidata":"https://www.wikidata.org/wiki/Q190109","display_name":"Field (mathematics)","level":2,"score":0.2646999955177307}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1016/j.infsof.2026.108213","is_oa":true,"landing_page_url":"https://doi.org/10.1016/j.infsof.2026.108213","pdf_url":null,"source":{"id":"https://openalex.org/S205010575","display_name":"Information and Software Technology","issn_l":"0950-5849","issn":["0950-5849","1873-6025"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310320990","host_organization_name":"Elsevier BV","host_organization_lineage":["https://openalex.org/P4310320990"],"host_organization_lineage_names":["Elsevier BV"],"type":"journal"},"license":"cc-by-nc","license_id":"https://openalex.org/licenses/cc-by-nc","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Information and Software Technology","raw_type":"journal-article"}],"best_oa_location":{"id":"doi:10.1016/j.infsof.2026.108213","is_oa":true,"landing_page_url":"https://doi.org/10.1016/j.infsof.2026.108213","pdf_url":null,"source":{"id":"https://openalex.org/S205010575","display_name":"Information and Software Technology","issn_l":"0950-5849","issn":["0950-5849","1873-6025"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310320990","host_organization_name":"Elsevier BV","host_organization_lineage":["https://openalex.org/P4310320990"],"host_organization_lineage_names":["Elsevier BV"],"type":"journal"},"license":"cc-by-nc","license_id":"https://openalex.org/licenses/cc-by-nc","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Information and Software Technology","raw_type":"journal-article"},"sustainable_development_goals":[],"awards":[],"funders":[],"has_content":{"grobid_xml":false,"pdf":false},"content_urls":null,"referenced_works_count":11,"referenced_works":["https://openalex.org/W1498436455","https://openalex.org/W4313909309","https://openalex.org/W4387051547","https://openalex.org/W4390955934","https://openalex.org/W4400417542","https://openalex.org/W4400612817","https://openalex.org/W4401004521","https://openalex.org/W4403411676","https://openalex.org/W4404817466","https://openalex.org/W4407163436","https://openalex.org/W4407390759"],"related_works":[],"abstract_inverted_index":{"Context:":[0],"Due":[1],"to":[2,15,41,50,65,182,184],"limited":[3],"contextual":[4,32],"understanding,":[5],"traditional":[6,98,177,209],"Static":[7],"Application":[8],"Security":[9],"Testing":[10],"(SAST)":[11],"tools":[12,58,100,210],"often":[13],"struggle":[14],"detect":[16,66],"complex":[17],"software":[18],"vulnerabilities,":[19],"especially":[20],"in":[21,138,196,216],"dynamically":[22],"typed":[23],"languages.":[24],"Large":[25],"Language":[26],"Models":[27],"(LLMs),":[28],"with":[29,96,203],"their":[30,63,180],"advanced":[31],"comprehension":[33],"and":[34,78,90,113,131,179,200,211],"language-agnostic":[35],"nature,":[36],"offer":[37],"a":[38,97,114],"compelling":[39],"alternative":[40],"conventional":[42],"security":[43],"analysis":[44,199],"methods.":[45],"Objectives:":[46],"This":[47],"study":[48],"aims":[49],"evaluate":[51],"the":[52,108,141,150,157,164,172,192],"effectiveness":[53],"of":[54,140,148,194],"contemporary":[55],"LLMs":[56,135,195],"as":[57,128],"for":[59],"SAST,":[60],"focusing":[61],"on":[62,163],"ability":[64,181],"eleven":[67],"common":[68],"vulnerability":[69,217],"classes,":[70],"including":[71],"SQL":[72],"Injection":[73],"(SQLi),":[74],"Cross-Site":[75],"Scripting":[76],"(XSS),":[77],"Path":[79],"Traversal.":[80],"Methods:":[81],"Thirty":[82],"state-of-the-art":[83],"LLMs-including":[84],"Gemini":[85,158],"3":[86,159],"Pro,":[87],"Sonnet":[88],"4.5,":[89],"DeepSeek":[91],"R1":[92],"\u2014":[93],"were":[94,105,121],"compared":[95],"SAST":[99],"like":[101],"Semgrep.":[102],"The":[103,119,189],"models":[104,120],"evaluated":[106],"using":[107,123],"OWASP":[109],"Benchmark":[110],"version":[111],"1.2":[112],"custom":[115,165],"external":[116,166],"validation":[117],"dataset.":[118],"assessed":[122],"widely":[124],"accepted":[125],"metrics":[126],"such":[127],"precision,":[129],"recall,":[130],"F1-score.":[132,142],"Results:":[133],"Several":[134],"outperformed":[136],"Semgrep":[137,144],"terms":[139],"While":[143],"achieved":[145],"an":[146],"F1-score":[147],"0.66,":[149],"highest":[151],"score,":[152],"0.88,":[153],"was":[154],"obtained":[155],"by":[156],"Pro":[160],"model.":[161],"Evaluation":[162],"dataset":[167],"confirmed":[168],"these":[169],"findings,":[170],"validating":[171],"models\u2019":[173],"superior":[174],"performance":[175],"over":[176],"methods":[178],"generalize":[183],"previously":[185],"unseen":[186],"code.":[187],"Conclusion:":[188],"findings":[190],"demonstrate":[191],"potential":[193],"static":[197],"code":[198],"suggest":[201],"that,":[202],"further":[204],"development,":[205],"LLM-based":[206],"approaches":[207],"surpass":[208],"potentially":[212],"even":[213],"manual":[214],"review":[215],"detection":[218],"effectiveness.":[219]},"counts_by_year":[],"updated_date":"2026-06-18T08:10:14.011955","created_date":"2026-06-07T00:00:00"}