Retrieve, Reproduce, Reveal: Dissecting Retrieval-Augmented Software Vulnerability Detection
cs.SE, cs.AI
Submitted: 2026-09-29
Updated: 2026-09-29
Code: https://github.com/hs-esslingen-it-security/RAG4SVD
Sources
- Phi-4 Technical Report
- Robust Learning of Diverse Code Edits
- DeepSeek-R1: Incentivizing Reasoning Capability in LLMs via Reinforcement Learning
- DeepSeek-V3 Technical Report
- Vul-RAG: Enhancing LLM-based Vulnerability Detection via Knowledge-level RAG
- Retrieval Augmented Generation Evaluation in the Era of Large Language Models: A Comprehensive Survey
- The Llama 3 Herd of Models
- Qwen2.5-Coder Technical Report
- Mistral 7B
- From SFT to RL: Demystifying the Post-Training Pipeline for LLM-based Vulnerability Detection
- Phi-4-Mini Technical Report: Compact yet Powerful Multimodal Language Models via Mixture-of-LoRAs
- GPT-4 Technical Report
- gpt-oss-120b & gpt-oss-20b Model Card
- Qwen2.5 Technical Report
- To Err is Machine: Vulnerability Detection Challenges LLM Reasoning
- LLM4Vuln: A Unified Evaluation Framework for Decoupling and Enhancing LLMs' Vulnerability Reasoning
- VulTriage: Triple-Path Context Augmentation for LLM-Based Vulnerability Detection
- Gemma 3 Technical Report
- Qwen3 Technical Report
- Benchmarking Large Language Models for Multi-Language Software Vulnerability Detection
Related papers
- Falsification-Based Verification of LLM-Generated Optimization Models: Sound Test Batteries and Their Detection Limits
- GitSkills: A Dataset of Agent Skills on GitHub
- SABER: Benchmarking Operational Safety of LLM Coding Agents in Stateful Project Workspaces
- PackMonitor: Enabling Zero Package Hallucinations Through Decoding-Time Monitoring
- IntentCoding: Amplifying User Intent in Code Generation
- Incentives and Outcomes in Bug Bounties