WG-5
AI/ML in Analysis
AI For Vulnerability Analysis
Aesia Cohen, William Klieber, Lori Flynn, Mitchell Perry
DEVCOM C5ISR Center
Army DEVCOM C5ISR and Carnegie Melon University Software Engineering Institute (CMU SEI) will demonstrate initial results from integration of LASAA (LLMs for Adjudication of Static Analysis Alerts) into the Software Assurance Toolset (SwAT ).
Abstract
Army DEVCOM C5ISR and Carnegie Melon University Software Engineering Institute (CMU SEI) will demonstrate initial results from integration of LASAA (LLMs for Adjudication of Static Analysis Alerts) into the Software Assurance Toolset (SwAT ). The integrated SwAT-LASAA works with LLMs from GenAI.mil, as well as on-premises LLMs for classified environments. SEI’s LASAA tool uses LLMs for adjudication of static analysis alerts, which can significantly reduce the time and complexity of analysis. We will also discuss techniques that LASAA uses to mitigate mistakes made by LLMs.
Presenters
- Aesia CohenDEVCOM C5ISR Center
- William KlieberCarnegie Melon University Software Engineering Institute
- Lori FlynnCarnegie Melon University Software Engineering Institute
- Mitchell PerryDEVCOM C5ISR Center