Using LLMs to Adjudicate Static-Analysis Alerts with Error Reduction Techniques

Static analysis is widely used for finding security weaknesses in source code before deployment, but it often produces far more alerts than analysts can review. We study how well large language models LLMs can adjudicate classify as a real bug or a false alarm static-analysis alerts. We use two...