Examining Zero-Shot Vulnerability Repair with Large Language Models. (arXiv:2112.02125v3 [cs.CR] UPDATED)

Human developers can produce code with cybersecurity bugs. Can emerging
'smart' code completion tools help repair those bugs? In this work, we examine
the use of large language models (LLMs) for code (such as OpenAI's Codex and
AI21's Jurassic J-1) for zero-shot vulnerability repair. We investigate
challenges in the design of prompts that coax LLMs into generating repaired
versions of insecure code. This is difficult due to the numerous ways to phrase
key information - both semantically and syntactically - …

language large repair vulnerability