{"id":"https://openalex.org/W4403646794","doi":"https://doi.org/10.1145/3691621.3694934","title":"SALLM: Security Assessment of Generated Code","display_name":"SALLM: Security Assessment of Generated Code","publication_year":2024,"publication_date":"2024-10-22","ids":{"openalex":"https://openalex.org/W4403646794","doi":"https://doi.org/10.1145/3691621.3694934"},"language":"en","primary_location":{"id":"doi:10.1145/3691621.3694934","is_oa":false,"landing_page_url":"https://doi.org/10.1145/3691621.3694934","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the 39th IEEE/ACM International Conference on Automated Software Engineering Workshops","raw_type":"proceedings-article"},"type":"article","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5083926745","display_name":"Mohammed Latif Siddiq","orcid":"https://orcid.org/0000-0002-7984-3611"},"institutions":[{"id":"https://openalex.org/I107639228","display_name":"University of Notre Dame","ror":"https://ror.org/00mkhxb43","country_code":"US","type":"education","lineage":["https://openalex.org/I107639228"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Mohammed Latif Siddiq","raw_affiliation_strings":["University of Notre Dame, Notre Dame, Indiana, USA"],"raw_orcid":"https://orcid.org/0000-0002-7984-3611","affiliations":[{"raw_affiliation_string":"University of Notre Dame, Notre Dame, Indiana, USA","institution_ids":["https://openalex.org/I107639228"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5043541139","display_name":"Joanna C. S. Santos","orcid":"https://orcid.org/0000-0001-8743-2516"},"institutions":[{"id":"https://openalex.org/I107639228","display_name":"University of Notre Dame","ror":"https://ror.org/00mkhxb43","country_code":"US","type":"education","lineage":["https://openalex.org/I107639228"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Joanna Cecilia da Silva Santos","raw_affiliation_strings":["University of Notre Dame, Notre Dame, Indiana, USA"],"raw_orcid":"https://orcid.org/0000-0001-8743-2516","affiliations":[{"raw_affiliation_string":"University of Notre Dame, Notre Dame, Indiana, USA","institution_ids":["https://openalex.org/I107639228"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5114360931","display_name":"Sajith Devareddy","orcid":null},"institutions":[{"id":"https://openalex.org/I107639228","display_name":"University of Notre Dame","ror":"https://ror.org/00mkhxb43","country_code":"US","type":"education","lineage":["https://openalex.org/I107639228"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Sajith Devareddy","raw_affiliation_strings":["University of Notre Dame, Notre Dame, Indiana, USA"],"raw_orcid":"https://orcid.org/0009-0002-9616-0393","affiliations":[{"raw_affiliation_string":"University of Notre Dame, Notre Dame, Indiana, USA","institution_ids":["https://openalex.org/I107639228"]}]},{"author_position":"last","author":{"id":null,"display_name":"Anna Muller","orcid":"https://orcid.org/0009-0008-2421-7622"},"institutions":[{"id":"https://openalex.org/I107639228","display_name":"University of Notre Dame","ror":"https://ror.org/00mkhxb43","country_code":"US","type":"education","lineage":["https://openalex.org/I107639228"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Anna Muller","raw_affiliation_strings":["University of Notre Dame, Notre Dame, Indiana, USA"],"raw_orcid":"https://orcid.org/0009-0008-2421-7622","affiliations":[{"raw_affiliation_string":"University of Notre Dame, Notre Dame, Indiana, USA","institution_ids":["https://openalex.org/I107639228"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":1,"corresponding_author_ids":[],"corresponding_institution_ids":["https://openalex.org/I107639228"],"apc_list":null,"apc_paid":null,"fwci":3.9767,"has_fulltext":false,"cited_by_count":14,"citation_normalized_percentile":{"value":0.94769469,"is_in_top_1_percent":false,"is_in_top_10_percent":true},"cited_by_percentile_year":{"min":98,"max":99},"biblio":{"volume":null,"issue":null,"first_page":"54","last_page":"65"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":0.9998000264167786,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":0.9998000264167786,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11424","display_name":"Security and Verification in Computing","score":0.9983999729156494,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10260","display_name":"Software Engineering Research","score":0.9983000159263611,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.7593557834625244},{"id":"https://openalex.org/keywords/code","display_name":"Code (set theory)","score":0.5085793733596802},{"id":"https://openalex.org/keywords/computer-security","display_name":"Computer security","score":0.3923702836036682},{"id":"https://openalex.org/keywords/programming-language","display_name":"Programming language","score":0.3753218352794647}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.7593557834625244},{"id":"https://openalex.org/C2776760102","wikidata":"https://www.wikidata.org/wiki/Q5139990","display_name":"Code (set theory)","level":3,"score":0.5085793733596802},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.3923702836036682},{"id":"https://openalex.org/C199360897","wikidata":"https://www.wikidata.org/wiki/Q9143","display_name":"Programming language","level":1,"score":0.3753218352794647},{"id":"https://openalex.org/C177264268","wikidata":"https://www.wikidata.org/wiki/Q1514741","display_name":"Set (abstract data type)","level":2,"score":0.0}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1145/3691621.3694934","is_oa":false,"landing_page_url":"https://doi.org/10.1145/3691621.3694934","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the 39th IEEE/ACM International Conference on Automated Software Engineering Workshops","raw_type":"proceedings-article"}],"best_oa_location":null,"sustainable_development_goals":[],"awards":[],"funders":[],"has_content":{"grobid_xml":false,"pdf":false},"content_urls":null,"referenced_works_count":36,"referenced_works":["https://openalex.org/W1563577331","https://openalex.org/W1593271688","https://openalex.org/W2037237472","https://openalex.org/W2138788987","https://openalex.org/W2600463316","https://openalex.org/W2620949368","https://openalex.org/W2765648970","https://openalex.org/W2955656327","https://openalex.org/W2963341956","https://openalex.org/W2963935794","https://openalex.org/W2993331254","https://openalex.org/W3098605233","https://openalex.org/W3126095862","https://openalex.org/W3162689995","https://openalex.org/W3174414731","https://openalex.org/W3198685994","https://openalex.org/W4200307116","https://openalex.org/W4220672926","https://openalex.org/W4226287673","https://openalex.org/W4229675450","https://openalex.org/W4281669078","https://openalex.org/W4285734663","https://openalex.org/W4288057765","https://openalex.org/W4299301436","https://openalex.org/W4308627645","https://openalex.org/W4312438588","https://openalex.org/W4312994886","https://openalex.org/W4367672983","https://openalex.org/W4384026520","https://openalex.org/W4385562549","https://openalex.org/W4391558462","https://openalex.org/W4394859329","https://openalex.org/W4396790452","https://openalex.org/W4399632242","https://openalex.org/W4399668074","https://openalex.org/W4400485045"],"related_works":["https://openalex.org/W4391375266","https://openalex.org/W2899084033","https://openalex.org/W2748952813","https://openalex.org/W2390279801","https://openalex.org/W4391913857","https://openalex.org/W2358668433","https://openalex.org/W4396701345","https://openalex.org/W2376932109","https://openalex.org/W2001405890","https://openalex.org/W4396696052"],"abstract_inverted_index":{"With":[0],"the":[1,20,62,100,119,123,166,174,178],"growing":[2],"popularity":[3],"of":[4,34,122,157,180],"Large":[5],"Language":[6],"Models":[7],"(LLMs)":[8],"in":[9,131],"software":[10,78],"engineers'":[11],"daily":[12],"practices,":[13],"it":[14],"is":[15,26,103],"important":[16],"to":[17,41,61,70,82,139,143,164,172],"ensure":[18],"that":[19,50],"code":[21,64,101,125,146,182],"generated":[22,124,167],"by":[23],"these":[24],"tools":[25],"not":[27,74],"only":[28],"functionally":[29],"correct":[30],"but":[31],"also":[32],"free":[33],"vulnerabilities.":[35],"Although":[36],"LLMs":[37,51,72],"can":[38,52],"help":[39],"developers":[40],"be":[42],"more":[43],"productive,":[44],"prior":[45],"empirical":[46],"studies":[47],"have":[48],"shown":[49],"generate":[53,144],"insecure":[54,63],"code.":[55],"There":[56],"are":[57,86],"two":[58],"contributing":[59],"factors":[60],"generation.":[65,183],"First,":[66],"existing":[67,113],"datasets":[68],"used":[69],"evaluate":[71,165,173],"do":[73],"adequately":[75],"represent":[76],"genuine":[77],"engineering":[79],"tasks":[80],"sensitive":[81],"security.":[83],"Instead,":[84],"they":[85],"often":[87],"based":[88],"on":[89,118],"competitive":[90],"programming":[91],"challenges":[92],"or":[93],"classroom-type":[94],"coding":[95],"tasks.":[96],"In":[97],"real-world":[98],"applications,":[99],"produced":[102],"integrated":[104],"into":[105],"larger":[106],"codebases,":[107],"introducing":[108],"potential":[109],"security":[110,128],"risks.":[111],"Second,":[112],"evaluation":[114],"metrics":[115,171],"primarily":[116],"focus":[117],"functional":[120],"correctness":[121],"while":[126],"ignoring":[127],"considerations.":[129],"Therefore,":[130],"this":[132],"paper,":[133],"we":[134],"described":[135],"Sallm,":[136],"a":[137,154],"framework":[138,149],"benchmark":[140],"LLMs'":[141],"abilities":[142],"secure":[145,181],"systematically.":[147],"This":[148],"has":[150],"three":[151],"major":[152],"components:":[153],"novel":[155,170],"dataset":[156],"security-centric":[158],"Python":[159],"prompts,":[160],"configurable":[161],"assessment":[162],"techniques":[163],"code,":[168],"and":[169],"models'":[175],"performance":[176],"from":[177],"perspective":[179]},"counts_by_year":[{"year":2026,"cited_by_count":4},{"year":2025,"cited_by_count":10}],"updated_date":"2026-07-06T08:01:05.025921","created_date":"2025-10-10T00:00:00"}