用AI自动化修复漏洞报告流程,让普通用户也能高效反馈问题
Past, Present, and Future of Bug Tracking in the Generative AI Era
- 用大语言模型和智能代理自动处理漏洞报告的整理、复现与分类
- 支持自然语言提交,可自动生成修复建议和补丁代码
- 适合希望提升软件维护效率的开发团队和用户体验优化者
传统漏洞跟踪系统高度依赖人工报告、复现、分类与修复,涉及最终用户、客服、开发者和测试人员等多方协作,需大量协调与人力投入,导致非技术用户与开发者间沟通不畅,从发现漏洞到部署修复的时间显著延长。当前方案普遍异步,用户常需长时间等待反馈。本文回顾漏洞跟踪的发展历程,从早期纸质记录到现代网络平台,并提出面向生成式AI时代的智能化漏洞跟踪框架。该框架通过大语言模型(LLM)与智能体驱动的自动化,增强现有系统能力,初步实现关键组件的适配,为可行性提供实证基础。目标是缩短修复时间、降低协作开销,使终端用户可用自然语言提交漏洞,由AI代理完成报告优化、复现尝试、分类、验证、生成无代码修复建议、编写补丁并支持持续集成与部署。文章探讨了将大语言模型融入漏洞跟踪的挑战与机遇,展示智能自动化如何将软件维护转变为更高效、协作性更强、以用户为中心的流程。
原文摘要 · Abstract (English)
Traditional bug-tracking systems rely heavily on manual reporting, reproduction, classification, and resolution, involving multiple stakeholders such as end users, customer support, developers, and testers. This division of responsibilities requires substantial coordination and human effort, widens the communication gap between non-technical users and developers, and significantly slows the process from bug discovery to deployment. Moreover, current solutions are highly asynchronous, often leaving users waiting long periods before receiving any feedback. In this paper, we examine the evolution of bug-tracking practices, from early paper-based methods to today's web-based platforms, and present a forward-looking vision of an AI-powered bug tracking framework. The framework augments existing systems with large language model (LLM) and agent-driven automation, and we report early adaptations of its key components, providing initial empirical grounding for its feasibility. The proposed framework aims to reduce time to resolution and coordination overhead by enabling end users to report bugs in natural language while AI agents refine reports, attempt reproduction, classify bugs, validate reports, suggest no-code fixes, generate patches, and support continuous integration and deployment. We discuss the challenges and opportunities of integrating LLMs into bug tracking and show how intelligent automation can transform software maintenance into a more efficient, collaborative, and user-centric process.
Thank you to arXiv for use of its open access interoperability. PaperDance 不是 arXiv 官方产品;中文卡片由大模型生成,请以原文为准。