对比传统验证、大模型与混合方法,探索更可靠的漏洞检测新路径。
Vulnerability Detection: From Formal Verification to Large Language Models and Hybrid Approaches: A Comprehensive Overview
- 分三类分析:经典形式化方法、大模型代码理解、两者结合的混合方案
- 大模型可识别不安全编码,但缺乏形式化保证;传统方法可靠但难扩展
- 混合方法有望兼顾准确性与可扩展性,适合安全敏感系统开发
软件测试与验证对保障现代软件系统的可靠性与安全性至关重要。传统形式化技术如模型检测和定理证明提供了严格的漏洞检测框架,但在复杂真实程序中常面临可扩展性挑战。近年来,大型语言模型(LLMs)为软件分析带来新范式,能够理解不安全编码模式。尽管在缺陷预测和不变式生成等任务中表现优异,但其缺乏经典方法的形式化保证。本文全面综述当前软件测试与验证技术,聚焦三类核心方法:经典形式化方法、基于大模型的分析,以及新兴的混合技术——融合二者优势。我们探讨每种方法的优势、局限及实际应用,强调混合系统在弥补单一方法不足方面的潜力。通过分析将形式化严谨性与大模型洞察力结合的可能性,评估其作为构建更鲁棒、自适应测试框架的可行性。
原文摘要 · Abstract (English)
Software testing and verification are critical for ensuring the reliability and security of modern software systems. Traditionally, formal verification techniques, such as model checking and theorem proving, have provided rigorous frameworks for detecting bugs and vulnerabilities. However, these methods often face scalability challenges when applied to complex, real-world programs. Recently, the advent of Large Language Models (LLMs) has introduced a new paradigm for software analysis, leveraging their ability to understand insecure coding practices. Although LLMs demonstrate promising capabilities in tasks such as bug prediction and invariant generation, they lack the formal guarantees of classical methods. This paper presents a comprehensive study of state-of-the-art software testing and verification, focusing on three key approaches: classical formal methods, LLM-based analysis, and emerging hybrid techniques, which combine their strengths. We explore each approach's strengths, limitations, and practical applications, highlighting the potential of hybrid systems to address the weaknesses of standalone methods. We analyze whether integrating formal rigor with LLM-driven insights can enhance the effectiveness and scalability of software verification, exploring their viability as a pathway toward more robust and adaptive testing frameworks.
Thank you to arXiv for use of its open access interoperability. PaperDance 不是 arXiv 官方产品;中文卡片由大模型生成,请以原文为准。