{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,11,4]],"date-time":"2026-11-04T19:42:36Z","timestamp":1793821356407,"version":"4.6.1"},"publisher-location":"Cham","reference-count":18,"publisher":"Springer Nature Switzerland","isbn-type":[{"value":"9783031928819","type":"print"},{"value":"9783031928826","type":"electronic"}],"license":[{"start":{"date-parts":[[2025,1,1]],"date-time":"2025-01-01T00:00:00Z","timestamp":1735689600000},"content-version":"tdm","delay-in-days":0,"URL":"https:\/\/www.springernature.com\/gp\/researchers\/text-and-data-mining"},{"start":{"date-parts":[[2025,1,1]],"date-time":"2025-01-01T00:00:00Z","timestamp":1735689600000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/www.springernature.com\/gp\/researchers\/text-and-data-mining"}],"content-domain":{"domain":["link.springer.com"],"crossmark-restriction":false},"short-container-title":[],"published-print":{"date-parts":[[2025]]},"DOI":"10.1007\/978-3-031-92882-6_12","type":"book-chapter","created":{"date-parts":[[2025,5,15]],"date-time":"2025-05-15T10:34:07Z","timestamp":1747305247000},"page":"166-179","update-policy":"https:\/\/doi.org\/10.1007\/springer_crossmark_policy","source":"Crossref","is-referenced-by-count":22,"title":["LSAST: Enhancing Cybersecurity Through LLM-Supported Static Application Security Testing"],"prefix":"10.1007","author":[{"given":"Mete","family":"Keltek","sequence":"first","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Rong","family":"Hu","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Mohammadreza Fani","family":"Sani","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Ziyue","family":"Li","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]}],"member":"297","published-online":{"date-parts":[[2025,5,16]]},"reference":[{"key":"12_CR1","unstructured":"Achiam, J., et\u00a0al.: Gpt-4 technical report. arXiv preprint arXiv:2303.08774 (2023)"},{"key":"12_CR2","unstructured":"Brooks, C.: More alarming cybersecurity stats for 2021. Forbes (2021). Accessed 19 June 2024"},{"key":"12_CR3","doi-asserted-by":"crossref","unstructured":"Dibbo, S.V., Chung, D.L., Mehnaz, S.: Model inversion attack with least information and an in-depth analysis of its disparate vulnerability. In: 2023 IEEE Conference on Secure and Trustworthy Machine Learning (SaTML), pp. 119\u2013135. IEEE (2023)","DOI":"10.1109\/SaTML54575.2023.00017"},{"key":"12_CR4","unstructured":"Du, X., et al.: VUL-RAG: enhancing llm-based vulnerability detection via knowledge-level rag. arXiv preprint arXiv:2401.17011 (2024). Accessed 24 June 2024"},{"key":"12_CR5","doi-asserted-by":"crossref","unstructured":"Felderer, M., B\u00fcchler, M., Johns, M., Brucker, A.D., Breu, R., Pretschner, A.: Security testing: a survey. In: Advances in Computers, vol.\u00a0101, pp. 1\u201351. Elsevier (2016)","DOI":"10.1016\/bs.adcom.2015.11.003"},{"key":"12_CR6","unstructured":"Fleck, A.: Expected cost of cybercrime until 2027. Statista (2023). Accessed 19 June 2024"},{"key":"12_CR7","unstructured":"Li, H., Hao, Y., Zhai, Y., Qian, Z.: The hitchhiker\u2019s guide to program analysis: a journey with large language models. In: Proceedings of the 2023 International Conference on Software Engineering (2023). Accessed 24 June 2024"},{"key":"12_CR8","doi-asserted-by":"crossref","unstructured":"Li, J.: Vulnerabilities mapping based on owasp-sans: a survey for static application security testing (sast). arXiv preprint arXiv:2004.03216 (2020)","DOI":"10.33166\/AETiC.2020.03.001"},{"key":"12_CR9","unstructured":"Li, Z., Dutta, S., Naik, M.: LLM-assisted static analysis for detecting security vulnerabilities. arXiv preprint (2023). Accessed 24 June 2024"},{"key":"12_CR10","unstructured":"Mohajer, M.M., et al.: Skipanalyzer: a tool for static code analysis with large language models. In: Proceedings of the 2023 IEEE\/ACM 45th International Conference on Software Engineering (2023). Accessed 24 June 2024"},{"key":"12_CR11","doi-asserted-by":"crossref","unstructured":"Nielsen, B.B., Torp, M.T., M\u00f8ller, A.: Modular call graph construction for security scanning of node. js applications. In: Proceedings of the 30th ACM SIGSOFT International Symposium on Software Testing and Analysis, pp. 29\u201341 (2021)","DOI":"10.1145\/3460319.3464836"},{"key":"12_CR12","doi-asserted-by":"crossref","unstructured":"Shestov, A., Levichev, R., Mussabayev, R., Maslov, E., Cheshkov, A., Zadorozhny, P.: Finetuning large language models for vulnerability detection. arXiv preprint (2024). Accessed 24 June 2024","DOI":"10.1109\/ACCESS.2025.3546700"},{"key":"12_CR13","doi-asserted-by":"crossref","unstructured":"Shivarpatna\u00a0Venkatesh, A.P., Sabu, S., Mir, A.M., Reis, S., Bodden, E.: The emergence of large language models in static analysis: a first look through micro-benchmarks. In: Proceedings of the 2023 ACM SIGSOFT International Symposium on Software Testing and Analysis (2023). Accessed 24 June 2024","DOI":"10.1145\/3650105.3652288"},{"key":"12_CR14","unstructured":"Sun, Y., et al.: Llm4vuln: a unified evaluation framework for decoupling and enhancing llms\u2019 vulnerability reasoning. arXiv preprint (2024). Accessed 24 June 2024"},{"key":"12_CR15","unstructured":"Team, G., et\u00a0al.: Gemini: a family of highly capable multimodal models. arXiv preprint arXiv:2312.11805 (2023)"},{"key":"12_CR16","series-title":"Lecture Notes of the Institute for Computer Sciences, Social Informatics and Telecommunications Engineering","doi-asserted-by":"publisher","first-page":"471","DOI":"10.1007\/978-3-030-01701-9_26","volume-title":"Security and Privacy in Communication Networks","author":"KA Torkura","year":"2018","unstructured":"Torkura, K.A., Sukmana, M., Cheng, F., Meinel, C.: CAVAS: neutralizing application and container security vulnerabilities in the cloud native era. In: Beyah, R., Chang, B., Li, Y., Zhu, S. (eds.) SecureComm 2018. LNICSSITE, vol. 254, pp. 471\u2013490. Springer, Cham (2018). https:\/\/doi.org\/10.1007\/978-3-030-01701-9_26"},{"key":"12_CR17","unstructured":"Zhou, X., et al.: Comparison of static application security testing tools and large language models for repo-level vulnerability detection. arXiv preprint arXiv:2407.16235 (2024)"},{"key":"12_CR18","unstructured":"Zhou, X., Zhang, T., Lo, D.: Large language model for vulnerability detection: emerging results and future directions. ACM Comput. Surv. (2023). Accessed 24 June 2024"}],"container-title":["IFIP Advances in Information and Communication Technology","ICT Systems Security and Privacy Protection"],"original-title":[],"language":"en","link":[{"URL":"https:\/\/link.springer.com\/content\/pdf\/10.1007\/978-3-031-92882-6_12","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2025,5,15]],"date-time":"2025-05-15T10:34:19Z","timestamp":1747305259000},"score":1,"resource":{"primary":{"URL":"https:\/\/link.springer.com\/10.1007\/978-3-031-92882-6_12"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2025]]},"ISBN":["9783031928819","9783031928826"],"references-count":18,"URL":"https:\/\/doi.org\/10.1007\/978-3-031-92882-6_12","relation":{},"ISSN":["1868-4238","1868-422X"],"issn-type":[{"value":"1868-4238","type":"print"},{"value":"1868-422X","type":"electronic"}],"subject":[],"published":{"date-parts":[[2025]]},"assertion":[{"value":"16 May 2025","order":1,"name":"first_online","label":"First Online","group":{"name":"ChapterHistory","label":"Chapter History"}},{"value":"SEC","order":1,"name":"conference_acronym","label":"Conference Acronym","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"IFIP International Conference on ICT Systems Security and Privacy Protection","order":2,"name":"conference_name","label":"Conference Name","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"Maribor","order":3,"name":"conference_city","label":"Conference City","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"Slovenia","order":4,"name":"conference_country","label":"Conference Country","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"2025","order":5,"name":"conference_year","label":"Conference Year","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"21 May 2025","order":7,"name":"conference_start_date","label":"Conference Start Date","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"23 May 2025","order":8,"name":"conference_end_date","label":"Conference End Date","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"40","order":9,"name":"conference_number","label":"Conference Number","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"sec2025","order":10,"name":"conference_id","label":"Conference ID","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"https:\/\/sec2025.um.si\/","order":11,"name":"conference_url","label":"Conference URL","group":{"name":"ConferenceInfo","label":"Conference Information"}}]}}