paper-with-me

홈 › Papers

SecureCode: A Production-Grade Multi-Turn Dataset for Training Security-Aware Code Generation Models

2025-12-20 · Scott Thornton arxiv

AI coding assistants produce vulnerable code in 45\% of security-relevant scenarios~\cite{veracode2025}, yet no public training dataset teaches both traditional web security and AI/ML-specific defenses in a format suitable for instruction tuning. We present SecureCode, a production-grade dataset of 2,185 multi-turn security training examples spanning two domains: web application security (1,435 examples covering the OWASP Top 10 2021 across 11 languages and 9 frameworks, 100\% grounded in documented CVEs and security incidents) and AI/ML security (750 examples covering all 10 OWASP LLM Top 10 2025 categories across more than 40 frameworks, including LangChain, OpenAI, and Hugging Face). Every example follows a 4-turn conversational structure -- feature request; vulnerable and secure implementations with attack demonstrations; advanced probing; and defense-in-depth operational guidance -- designed for direct use in instruction tuning pipelines. Quality assurance combines automated structural validation with multi-agent review from seven specialist AI perspectives (more than 10{,}500 assessments) and an 8-phase remediation pipeline, producing a rubric-calibrated mean quality score of 93.8/100 ($σ= 0.93$) for the AI/ML component. Each example provides SIEM integration strategies, infrastructure hardening recommendations, and testing approaches using production frameworks. We release the unified dataset on Hugging Face with domain-specific loading configurations (web, aiml, default), alongside eight fine-tuned open-source models (3B--20B parameters, QLoRA), and an evaluation framework with four security-specific metrics. To our knowledge, SecureCode is the first public dataset that jointly provides OWASP Top 10 2021 web coverage and OWASP LLM Top 10 2025 AI/ML coverage in a unified conversational schema suitable for instruction tuning.

📄 PDF Abstract BibTeX arXiv:2512.18542

Code (0)

등록된 구현이 없습니다.

Tasks

Code Generation

Similar Papers 제목 키워드 기반

Verifying Computational Graphs in Production-Grade Distributed Machine Learning Frameworks

2025-09-12 · Kahfi S. Zulkifli, Wenbo Qian, Shaowei Zhu, Yuan Zhou 외 arxiv

Modern machine learning frameworks support very large models by incorporating parallelism and optimization techniques. Yet, these very techniques add new layers of complexity, introducing silent errors that severely degr…

Relational Reasoning

Ford Highway Driving RTK Dataset: 30,000 km of North American Highways

2020-10-05 · Sarah E. Houts, Nahid Pervez, Umair Ibrahim, Gaurav Pandey 외

There is a growing need for vehicle positioning information to support Advanced Driver Assistance Systems (ADAS), Connectivity (V2X), and Autonomous Driving (AD) features. These range from a need for road determination (…

Autonomous Driving

Evaluating the Robustness of a Production Malware Detection System to Transferable Adversarial Attacks

2025-10-02 · Milad Nasr, Yanick Fratantonio, Luca Invernizzi, Ange Albertini 외 arxiv

As deep learning models become widely deployed as components within larger production systems, their individual shortcomings can create system-level vulnerabilities with real-world impact. This paper studies how adversar…

Malware Detection

Where to Look: Can Foundation Models Reach a Target Viewpoint Through Active Exploration?

2026-05-31 · Liyang Li, Muzhi Zhu, Zhiyue Zhao, Hengyu Zhao 외 arxiv

Humans can reproduce the viewpoint specified by a target image through active head and body motion, yet spatial intelligence in foundation models has largely been studied as passive understanding of pre-collected observa…

Balancing Accuracy and Efficiency in Multi-Turn Intent Classification for LLM-Powered Dialog Systems in Production

2024-11-19 · Junhua Liu, Yong Keat Tan, Bin Fu, Kwan Hui Lim

Accurate multi-turn intent classification is essential for advancing conversational AI systems. However, challenges such as the scarcity of comprehensive datasets and the complexity of contextual dependencies across dial…

ClassificationData Augmentationintent-classificationIntent Classification