כתבה
arXiv cs.CL ·
SecureVibe: הגברת אבטחת קוד
SecureVibe: Making Vibe Coding More Secure
SECUREVIBE היא שיטה חדשה לשיפור אבטחת קוד. היא כוללת אימון מפוקח על סוויטת אבטחה ושיטות פוסט-אימון לשיפור יכולות אבטחה. SECUREVibe משפרת את האבטחה ב-6.9 נקודות ב-BaxBench.
תקציר מקורי באנגליתarXiv:2609.38606v1 Announce Type: cross Abstract: As vibe coding becomes increasingly capable and widespread, security vulnerabilities in even functionally correct solutions are a growing concern. When investigating functionally correct but insecure solutions, we find that the insecure agent is less than half as likely to conduct effective planning and testing for the hidden security risks behind the functional requirements. Motivated by this, we develop SECUREVIBE, a training recipe that explicitly targets planning and testing for code security. SECUREVIBE constructs training signals around these security behaviors. It includes supervised fine-tuning on the security suite with 4 security tasks, and post-training methods, SECUREVIBE_rl and SECUREVIBE_hg, to enhance security capabilities fr
קרא במקור המקורי
arxiv.org
פתח כתבה מקורית