{"id":"https://openalex.org/W7160447370","doi":"https://doi.org/10.48550/arxiv.2605.04000","title":"Mitigating False Positives in Static Memory Safety Analysis of Rust Programs via Reinforcement Learning","display_name":"Mitigating False Positives in Static Memory Safety Analysis of Rust Programs via Reinforcement Learning","publication_year":2026,"publication_date":"2026-05-05","ids":{"openalex":"https://openalex.org/W7160447370","doi":"https://doi.org/10.48550/arxiv.2605.04000"},"language":null,"primary_location":{"id":"doi:10.48550/arxiv.2605.04000","is_oa":true,"landing_page_url":"https://doi.org/10.48550/arxiv.2605.04000","pdf_url":null,"source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":null,"issn":null,"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":null,"is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"Preprint"},"type":"preprint","indexed_in":["datacite"],"open_access":{"is_oa":true,"oa_status":"green","oa_url":"https://doi.org/10.48550/arxiv.2605.04000","any_repository_has_fulltext":true},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5135421149","display_name":"P Akilesh","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"P, Akilesh","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5135425422","display_name":"Leuson Da Silva","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Da Silva, Leuson","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5135464223","display_name":"Foutse Khomh","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Khomh, Foutse","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"last","author":{"id":"https://openalex.org/A5042924610","display_name":"Sridhar Chimalakonda","orcid":"https://orcid.org/0000-0003-0818-8178"},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Chimalakonda, Sridhar","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]}],"institutions":[],"countries_distinct_count":0,"institutions_distinct_count":0,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":null,"has_fulltext":false,"cited_by_count":0,"citation_normalized_percentile":null,"cited_by_percentile_year":null,"biblio":{"volume":null,"issue":null,"first_page":null,"last_page":null},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10743","display_name":"Software Testing and Debugging Techniques","score":0.8490999937057495,"subfield":{"id":"https://openalex.org/subfields/1712","display_name":"Software"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10743","display_name":"Software Testing and Debugging Techniques","score":0.8490999937057495,"subfield":{"id":"https://openalex.org/subfields/1712","display_name":"Software"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":0.040800001472234726,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T12423","display_name":"Software Reliability and Analysis Research","score":0.023099999874830246,"subfield":{"id":"https://openalex.org/subfields/1712","display_name":"Software"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/reinforcement-learning","display_name":"Reinforcement learning","score":0.7598999738693237},{"id":"https://openalex.org/keywords/memory-safety","display_name":"Memory safety","score":0.7124000191688538},{"id":"https://openalex.org/keywords/false-positive-paradox","display_name":"False positive paradox","score":0.6578999757766724},{"id":"https://openalex.org/keywords/rust","display_name":"Rust (programming language)","score":0.5706999897956848},{"id":"https://openalex.org/keywords/fuzz-testing","display_name":"Fuzz testing","score":0.5577999949455261},{"id":"https://openalex.org/keywords/static-analysis","display_name":"Static analysis","score":0.545799970626831},{"id":"https://openalex.org/keywords/spurious-relationship","display_name":"Spurious relationship","score":0.5296000242233276},{"id":"https://openalex.org/keywords/precision-and-recall","display_name":"Precision and recall","score":0.41350001096725464}],"concepts":[{"id":"https://openalex.org/C97541855","wikidata":"https://www.wikidata.org/wiki/Q830687","display_name":"Reinforcement learning","level":2,"score":0.7598999738693237},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.7156999707221985},{"id":"https://openalex.org/C28180684","wikidata":"https://www.wikidata.org/wiki/Q4080983","display_name":"Memory safety","level":3,"score":0.7124000191688538},{"id":"https://openalex.org/C64869954","wikidata":"https://www.wikidata.org/wiki/Q1859747","display_name":"False positive paradox","level":2,"score":0.6578999757766724},{"id":"https://openalex.org/C197781089","wikidata":"https://www.wikidata.org/wiki/Q575650","display_name":"Rust (programming language)","level":2,"score":0.5706999897956848},{"id":"https://openalex.org/C111065885","wikidata":"https://www.wikidata.org/wiki/Q1189053","display_name":"Fuzz testing","level":3,"score":0.5577999949455261},{"id":"https://openalex.org/C97686452","wikidata":"https://www.wikidata.org/wiki/Q7604153","display_name":"Static analysis","level":2,"score":0.545799970626831},{"id":"https://openalex.org/C119857082","wikidata":"https://www.wikidata.org/wiki/Q2539","display_name":"Machine learning","level":1,"score":0.5324000120162964},{"id":"https://openalex.org/C97256817","wikidata":"https://www.wikidata.org/wiki/Q1462316","display_name":"Spurious relationship","level":2,"score":0.5296000242233276},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.5037000179290771},{"id":"https://openalex.org/C81669768","wikidata":"https://www.wikidata.org/wiki/Q2359161","display_name":"Precision and recall","level":2,"score":0.41350001096725464},{"id":"https://openalex.org/C2779086471","wikidata":"https://www.wikidata.org/wiki/Q2051704","display_name":"False memory","level":3,"score":0.41029998660087585},{"id":"https://openalex.org/C170130773","wikidata":"https://www.wikidata.org/wiki/Q216378","display_name":"Usability","level":2,"score":0.37869998812675476},{"id":"https://openalex.org/C100660578","wikidata":"https://www.wikidata.org/wiki/Q18733","display_name":"Recall","level":2,"score":0.3668999969959259},{"id":"https://openalex.org/C124101348","wikidata":"https://www.wikidata.org/wiki/Q172491","display_name":"Data mining","level":1,"score":0.32839998602867126},{"id":"https://openalex.org/C112789634","wikidata":"https://www.wikidata.org/wiki/Q18207010","display_name":"False positives and false negatives","level":3,"score":0.31470000743865967},{"id":"https://openalex.org/C2776359362","wikidata":"https://www.wikidata.org/wiki/Q2145286","display_name":"Representation (politics)","level":3,"score":0.288100004196167},{"id":"https://openalex.org/C148524875","wikidata":"https://www.wikidata.org/wiki/Q6975395","display_name":"F1 score","level":2,"score":0.2757999897003174},{"id":"https://openalex.org/C55439883","wikidata":"https://www.wikidata.org/wiki/Q360812","display_name":"Correctness","level":2,"score":0.2727000117301941},{"id":"https://openalex.org/C175154964","wikidata":"https://www.wikidata.org/wiki/Q380077","display_name":"Task analysis","level":3,"score":0.2718999981880188},{"id":"https://openalex.org/C137287247","wikidata":"https://www.wikidata.org/wiki/Q1329550","display_name":"Static program analysis","level":4,"score":0.26190000772476196},{"id":"https://openalex.org/C185798385","wikidata":"https://www.wikidata.org/wiki/Q1161707","display_name":"Benchmark (surveying)","level":2,"score":0.26010000705718994}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.48550/arxiv.2605.04000","is_oa":true,"landing_page_url":"https://doi.org/10.48550/arxiv.2605.04000","pdf_url":null,"source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":null,"issn":null,"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":null,"is_accepted":false,"is_published":null,"raw_source_name":null,"raw_type":"Preprint"}],"best_oa_location":{"id":"doi:10.48550/arxiv.2605.04000","is_oa":true,"landing_page_url":"https://doi.org/10.48550/arxiv.2605.04000","pdf_url":null,"source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":null,"issn":null,"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":null,"is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"Preprint"},"sustainable_development_goals":[{"score":0.6264436841011047,"id":"https://metadata.un.org/sdg/16","display_name":"Peace, Justice and strong institutions"}],"awards":[],"funders":[],"has_content":{"pdf":false,"grobid_xml":false},"content_urls":null,"referenced_works_count":0,"referenced_works":[],"related_works":[],"abstract_inverted_index":{"Static":[0],"analysis":[1,67,102,227],"tools":[2,22,242],"are":[3],"essential":[4],"for":[5,56,68,243],"ensuring":[6],"memory":[7,65,239],"safety":[8,66,240],"in":[9,17,63,184,203,209],"Rust":[10,14],"programs,":[11],"particularly":[12],"as":[13,24,114],"gains":[15],"adoption":[16],"safety-critical":[18],"domains.":[19],"However,":[20],"existing":[21],"such":[23],"Rudra":[25,186],"and":[26,42,59,94,146,205,233],"MirChecker":[27],"suffer":[28],"from":[29,88,182],"high":[30],"false":[31,178,231],"positive":[32],"rates,":[33],"which":[34],"diminish":[35],"developer":[36],"trust,":[37],"increase":[38],"manual":[39],"review":[40],"effort,":[41],"may":[43],"obscure":[44],"genuine":[45],"vulnerabilities.":[46],"This":[47],"paper":[48],"presents":[49],"a":[50,80,162],"novel":[51],"reinforcement":[52,222],"learning":[53,223],"(RL)-based":[54],"approach":[55,137],"automatically":[57],"classifying":[58],"suppressing":[60],"spurious":[61],"warnings":[62,126],"static":[64,101],"Rust.":[69,244],"To":[70,104],"achieve":[71],"this,":[72],"we":[73,108],"design":[74],"an":[75,115,147,152],"RL":[76],"agent":[77,121],"that":[78,134,220],"learns":[79],"warning":[81],"suppression":[82],"policy":[83],"by":[84],"extracting":[85],"contextual":[86],"features":[87],"Rust's":[89],"Mid-level":[90],"Intermediate":[91],"Representation":[92],"(MIR)":[93],"optimizing":[95],"its":[96],"decisions":[97],"through":[98,127],"interaction":[99],"with":[100,224],"outputs.":[103],"improve":[105,234],"decision":[106],"quality,":[107],"integrate":[109],"dynamic":[110,191],"validation":[111],"via":[112],"cargo-fuzz":[113],"auxiliary":[116],"feedback":[117],"mechanism,":[118],"allowing":[119],"the":[120,135,157,213,235],"to":[122,188],"selectively":[123],"validate":[124],"suspicious":[125],"targeted":[128],"fuzz":[129],"testing.":[130],"Our":[131],"evaluation":[132],"shows":[133],"proposed":[136],"significantly":[138],"outperforms":[139],"state-of-the-art":[140],"LLM-based":[141],"baselines,":[142],"achieving":[143],"65.2%":[144],"accuracy":[145,204],"F1":[148,210],"score":[149,211],"of":[150,154,164,172,199,238],"0.659,":[151],"improvement":[153],"17.1%":[155],"over":[156,212],"best":[158],"LLM":[159],"baseline.":[160],"With":[161],"recall":[163],"74.6%,":[165],"our":[166,217],"method":[167],"successfully":[168],"identifies":[169],"nearly":[170],"three-quarters":[171],"true":[173],"bugs":[174],"while":[175],"substantially":[176,229],"reducing":[177],"positives,":[179],"improving":[180],"precision":[181],"25.6%":[183],"raw":[185],"output":[187],"59.0%.":[189],"Incorporating":[190],"fuzzing":[192],"further":[193],"boosts":[194],"performance,":[195],"yielding":[196],"additional":[197],"improvements":[198],"10.7":[200],"percentage":[201,207],"points":[202,208],"8.6":[206],"RL-only":[214],"variant.":[215],"Overall,":[216],"work":[218],"demonstrates":[219],"combining":[221],"hybrid":[225],"static-dynamic":[226],"can":[228],"reduce":[230],"positives":[232],"practical":[236],"usability":[237],"verification":[241]},"counts_by_year":[],"updated_date":"2026-07-01T06:00:48.157686","created_date":"2026-05-07T00:00:00"}