arXiv:2603.20637cs.SEcs.AI2026-03被引 2

AEGIS用图谱引导推理,让漏洞检测从猜谜变成有证据的定罪。

AEGIS: From Clues to Verdicts -- Graph-Guided Deep Vulnerability Reasoning via Dialectics and Meta-Auditing

  • 构建代码属性图,动态追踪变量依赖链,锁定可疑线索。
  • 双代理对抗论证+独立审计,实现漏洞判断的可验证性。
  • 在PrimeVul上准确率破百,误报率降低超54%,成本仅0.09美元/样本。

大型语言模型在漏洞检测中日益普及,但其推理机制本质不健全。我们发现主流两种缓解方法(基于代理的辩论与检索增强)的共性问题在于:在无约束的思辨空间中进行推理,缺乏针对具体假设的证据基础。这导致代理虚构跨函数依赖,检索启发式提供脱离数据流拓扑的通用知识,使结论受修辞说服力驱动而非可验证事实。为此,我们提出AEGIS,一种新型多代理框架,将检测从无根推测转变为在封闭事实基底上的司法验证。遵循‘从线索到定论’理念,AEGIS首先识别可疑代码异常(线索),再通过按需切片重构每个线索的变量级依赖链。在此封闭证据边界内,验证代理构建支持与反对可利用性的辩证论据,独立审计代理则对照执行踪迹审查每项主张,具备否决权以防止幻觉结论。在严格基准PrimeVul上的评估显示,AEGIS达到122对正确预测,首次突破该基准100大关,相较领先基线将误报率降低高达54.40%,平均成本仅为0.09美元/样本,无需任何任务特定训练。

原文摘要 · Abstract (English)

Large Language Models (LLMs) are increasingly adopted for vulnerability detection, yet their reasoning remains fundamentally unsound. We identify a root cause shared by both major mitigation paradigms (agent-based debate and retrieval augmentation): reasoning in an ungrounded deliberative space that lacks a bounded, hypothesis-specific evidence base. Without such grounding, agents fabricate cross-function dependencies, and retrieval heuristics supply generic knowledge decoupled from the repository's data-flow topology. Consequently, the resulting conclusions are driven by rhetorical persuasiveness rather than verifiable facts. To ground this deliberation, we present AEGIS, a novel multi-agent framework that shifts detection from ungrounded speculation to forensic verification over a closed factual substrate. Guided by a "From Clue to Verdict" philosophy, AEGIS first identifies suspicious code anomalies (clues), then dynamically reconstructs per-variable dependency chains for each clue via on-demand slicing over a repository-level Code Property Graph. Within this closed evidence boundary, a Verifier Agent constructs competing dialectical arguments for and against exploitability, while an independent Audit Agent scrutinizes every claim against the trace, exercising veto power to prevent hallucinated verdicts. Evaluation on the rigorous PrimeVul dataset demonstrates that AEGIS establishes a new state-of-the-art, achieving 122 Pair-wise Correct Predictions. To our knowledge, this is the first approach to surpass 100 on this benchmark. It reduces the false positive rate by up to 54.40% compared to leading baselines, at an average cost of $0.09 per sample without any task-specific training.

漏洞检测多代理系统代码分析可解释性

Thank you to arXiv for use of its open access interoperability. PaperDance 不是 arXiv 官方产品;中文卡片由大模型生成,请以原文为准。