Browse State-of-the-Art › Vulnerability Detection
Vulnerability Detection
72 papers with code · 2 benchmarks · 7 datasets archive 2025-07-28
Vulnerability detection plays a crucial role in safeguarding against these threats by identifying weaknesses and potential entry points that malicious actors could exploit. Through advanced scanning techniques and penetration testing, vulnerability detection tools meticulously analyze web applications and websites for vulnerabilities such as SQL injection, cross-site scripting (XSS), and insecure authentication mechanisms.
By proactively identifying and addressing vulnerabilities, organizations can strengthen their online security posture and mitigate the risk of data breaches, financial loss, and reputational damage. Additionally, vulnerability detection empowers businesses to stay compliant with industry regulations and standards, demonstrating their commitment to safeguarding sensitive information and maintaining the trust of their customers. With the evolving threat landscape and increasingly sophisticated attack vectors, investing in robust vulnerability detection measures is paramount for staying one step ahead of cyber threats and ensuring the resilience of web-based platforms and services.
Description from the archive archive 2025-07-28.
Benchmarks archive 2025-07-28
2 leaderboard tables shown for this task, 2 with rows (a “benchmark” on this site is a table with at least one row, as on /sota), ordered by row count. “Best model” is the first row in the archive's own order at snapshot; nothing is re-ranked here and metric direction is not recorded in the archive. PwC's Trend sparklines are not in the archive, so that column is omitted.
| Dataset | Best model (first row in archive order) | Paper | Code | Syntology | Compare |
|---|---|---|---|---|---|
| VulScribeR (6 rows) | Reveal Model - Tested on Reveal (Training on Devign + VulScribeR 20K + Extra Cleans) | VulScribeR: Exploring RAG-based Vulnerability Augmentation with LLMs | code | — | Compare |
| Vulnerability Java Dataset (2 rows) | WizardCoder | Finetuning Large Language Models for Vulnerability Detection | code | — | Compare |
Syntology column: samples harvested from the paper's repositories and executed on synthesized fixtures; “ran” is not a correctness claim and does not order the table. A dash means no Syntology record for that paper, not a recorded non-run. Read from the graph 2026-09-24.
Libraries
Not in the archive: the export carries no per-task library table, so there is nothing to show at snapshot 2025-07-28.
Datasets archive 2025-07-28
7 datasets whose archive record lists this task, ordered by the archive's paper count.
Subtasks archive 2025-07-28
No subtask under this task in the archive's task tree.
Most implemented papers archive 2025-07-28
30 shown of 72 papers with code (216 tagged with this task in all), ordered by repositories listed in the archive, not by stars (the archive holds no stars, so PwC's “Social” and “Latest” sorts cannot be reproduced). Papers without a page here are shown as plain text.
-
8 Jun 2024 5 repositories listed Syntology ran 5 of 5 samples · 0 unverified · 4 pointer-only (licence)Large Language Models (LLMs) are being deployed across various domains today.
-
5 Jan 2018 5 repositories listed Syntology ran 0 of 1 samples · 1 unverifiedSince deep learning is motivated to deal with problems that are very different from the problem of vulnerability detection, we need some guiding principles for applying deep learning to vulnerability detection.
-
18 Jul 2018 4 repositories listed Syntology ran 1 of 8 samples · 7 unverified · 1 pointer-only (licence)Our experiments with 4 software products demonstrate the usefulness of the framework: we detect 15 vulnerabilities that are not reported in the National Vulnerability Database.
-
28 Jun 2023 3 repositories listedUsing six ML4VD techniques and two datasets, we find (a) that state-of-the-art models severely overfit to unrelated features for predicting the vulnerabilities in the testing data, (b) that the performance gained by…
-
13 Nov 2018 3 repositories listed Syntology ran 0 of 4 samples · 4 unverified · 1 pointer-only (licence)We report the results from a quantitative and qualitative analysis that show how SAFE provides a noticeable performance improvement with respect to previous solutions.
-
19 Nov 2022 2 repositories listedIn recent years, research in software security has concentrated on identifying vulnerabilities in smart contracts to prevent significant losses of crypto assets on blockchains.
-
16 Dec 2020 2 repositories listedWe thus train the model to learn execution semantics from the functions' micro-traces, without any manual labeling effort.
-
11 Jul 2018 2 repositories listedThe labeled dataset is available at: https://osf.
-
9 Jun 2025 1 repository listedLarge language models (LLMs) demonstrate considerable proficiency in numerous coding-related tasks; however, their capabilities in detecting software vulnerabilities remain limited.
-
27 May 2025 1 repository listedAs Large Language Models (LLMs) evolve in understanding and generating code, accurately evaluating their reliability in analyzing source code vulnerabilities becomes increasingly vital.
-
21 May 2025 1 repository listedLarge Language Model (LLM) agents can automate cybersecurity tasks and can adapt to the evolving cybersecurity landscape without re-engineering.
-
15 May 2025 1 repository listedSoftware vulnerabilities such as buffer overflows and SQL injections are a major source of security breaches.
-
15 May 2025 1 repository listedIn this paper, we first propose CoV-Eval, a multi-task benchmark covering various tasks such as code completion, vulnerability repair, vulnerability detection and classification, for comprehensive evaluation of LLM code…
-
8 May 2025 1 repository listedOur results show a 97.
-
2 May 2025 1 repository listedFinding training examples to teach LLMs to solve these tasks can be challenging.
-
16 Apr 2025 1 repository listedStatic analysis plays a crucial role in software vulnerability detection, yet faces a persistent precision-scalability tradeoff.
-
7 Apr 2025 1 repository listedThrough RLAIF, R2Vul enables LLMs to produce structured, security-aware reasoning that is actionable and reliable while explicitly learning to distinguish valid assessments from misleading ones.
-
3 Apr 2025 1 repository listedAs AI advances, broader consensus is needed to determine research priorities.
-
22 Mar 2025 1 repository listedAutomating software vulnerability detection (SVD) remains a critical challenge in an era of increasingly complex and interdependent software systems.
-
12 Mar 2025 1 repository listedLLMs perform exceptionally well in the CASTLE dataset when identifying vulnerabilities in small code snippets.
-
24 Feb 2025 1 repository listedIn this paper, we propose a multi-teacher based bytecode vulnerability detection method, namely \textbf{M}ulti-\textbf{T}eacher \textbf{V}ulnerability \textbf{Hunter} (\textbf{MTVHunter}), which delivers effective…
-
7 Jan 2025 1 repository listedPre-training a language model and then fine-tuning it has shown to be an efficient and effective technique for a wide range of code intelligence tasks, such as code generation, code summarization, and vulnerability…
-
24 Dec 2024 1 repository listedHowever, the effectiveness of LLMs in detecting code vulnerabilities is largely under-explored.
-
7 Dec 2024 1 repository listedWe conduct several experiments to assess the performance of the proposed method against the state-of-the-art.
-
20 Nov 2024 1 repository listedCryptographic protocols play a fundamental role in securing modern digital infrastructure, but they are often deployed without prior formal verification.
-
30 Oct 2024 1 repository listed Syntology ran 1 of 1 samples · 0 unverifiedBinary analysis is a core component of many critical security tasks, including reverse engineering, malware analysis, and vulnerability detection.
-
4 Oct 2024 1 repository listedRecently, deep learning (DL) approaches to vulnerability detection have gained significant traction.
-
7 Aug 2024 1 repository listedMore specifically, we explore three strategies to augment both single and multi-statement vulnerabilities, with LLMs, namely Mutation, Injection, and Extension.
-
27 Jul 2024 1 repository listedRecently, deep learning has demonstrated promising results in enhancing the accuracy of vulnerability detection and identifying vulnerabilities in software.
-
11 Jul 2024 1 repository listedThe benchmark consists of a list of revisions in different repositories, each associated with the list of known vulnerabilities present at that revision.
Syntology lines on 5 of the papers shown; no Syntology record for the others (a paper without an arXiv id cannot be joined to the graph, and absence from the graph layer is not a recorded non-run). “Ran” means the sample executed on a synthesized fixture, not that the paper's result was reproduced. Read from the graph 2026-09-24.
Report a problem or propose a change · a person checks every report against the paper or source before anything changes; decisions are listed on /corrections