DeepAVR: Deep Analysis Via Multi-Agent Collaboration for Automated Vulnerability Repair

Automated Vulnerability Repair AVR has emerged as a critical defense against software security flaws, aiming to triage and fix bugs autonomously. Early LLM-based approaches focused on patch generation under the assumption of perfect fault localization, while recent end-to-end methods attempt to...

EviRepair: Evidence-Driven Agents for Reliable Vulnerability Repair

Recent advances in large language models LLMs have enabled agent-based approaches for repository-level automated vulnerability repair AVR, showing promising repair capabilities. However, an important issue has received limited attention: how can we ensure that the evidence generated during the...

SoK: Automated Vulnerability Repair: Methods, Tools, and Assessments

The increasing complexity of software has led to the steady growth of vulnerabilities. Vulnerability repair investigates how to fix software vulnerabilities. Manual vulnerability repair is labor-intensive and time-consuming because it relies on human experts, highlighting the importance of...