paperbot · PL 论文追踪

全部论文 待读 收藏

P2 Automated Vulnerability-Focused Code Reviews

自动化面向漏洞的代码评审
FSE Proceedings of the 33rd ACM International Conference on the Foundations of Software Engineering2025匹配度 3/10 · 论文属于深度学习驱动的代码评审/漏洞检测,与用户核心关注的静态分析、形式化验证、浮点程序分析、贝叶斯程序分析以及 LLM/Agent 与 PL 的交叉并不直接相关;仅在 ML+PL、安全以及数据不足/benchmark 问题上存在边缘关联。引用 0 inbox
Leonardo Centellas-Claros
crossref: 2026-09-12

AI 速览

一句话:指出通用深度学习代码评审模型忽视漏洞聚焦评审的特殊性,并强调此类训练数据不足导致性能受限。

代码评审是保障软件质量、缓解潜在问题的重要实践,但人工评审耗时。研究界已尝试用深度学习自动化代码评审,然而现有模型面向广泛的评审类型,往往未考虑与漏洞相关的评审所具有的特殊性。一个原因是漏洞聚焦的评审在训练数据中代表性不足,影响模型准确性。因此,当前对漏洞聚焦代码评审的具体特征以及现有模型在该专门场景下的性能仍缺乏深入了解。摘要未提出具体方法,也未报告评估结果,主要贡献在于识别这一研究空白。

问题
人工代码评审耗时,现有基于深度学习的自动化模型主要面向通用评审,难以应对漏洞聚焦评审,且相关训练数据不足。
方法
摘要未描述具体方法;研究关注点是刻画漏洞聚焦代码评审的特征,并评估现有模型在该专门场景下的表现。
评估
摘要未报告评估设计与结果,仅指出需要针对漏洞聚焦评审这一专门场景进行性能考察。
原文摘要(Abstract)

Code review is an important practice in software development, aimed at ensuring code quality and mitigating potential issues. Although effective, manual code reviews are time-consuming. In response, the research community has explored automating this process using deep learning. However, existing models, designed to address a broad spectrum of code review types, often fail to account for the unique aspects of reviews specifically related to vulnerabilities. One reason is the underrepresentation of such reviews in training datasets, which impacts the accuracy of these models. Consequently, there is limited knowledge on the specific characteristics of vulnerability-focused code reviews and the performance of current models in this specialized context.

链接与引用

DOI 原文 · PDF(开放获取) ·

BibTeX
@inproceedings{paperbot8932,
  title = {Automated Vulnerability-Focused Code Reviews},
  author = {Leonardo Centellas-Claros},
  booktitle = {FSE},
  year = {2025},
  doi = {10.1145/3696630.3731467}
}