Exploring ChatGPT's Capabilities on Vulnerability Management

arXiv:2311.06530v2 Announce Type: replace-cross
Abstract: Recently, ChatGPT has attracted great attention from the code analysis domain. Prior works show that ChatGPT has the capabilities of processing foundational code analysis tasks, such as abstract syntax tree generation, which indicates the potential of using ChatGPT to comprehend code syntax and static behaviors. However, it is unclear whether ChatGPT can complete more complicated real-world vulnerability management tasks, such as the prediction of security relevance and patch correctness, which require an all-encompassing understanding of …

analysis arxiv attention behaviors capabilities chatgpt code code analysis cs.ai cs.cl cs.cr cs.se domain foundational great management static using vulnerability vulnerability management