PROBLEM ISSUES IN USING LARGE LANGUAGE MODELS FOR DECOMPILATION OF MACHINE CODE WITH VULNERABILITIES

This paper examines the problem of software vulnerabilities in the absence of source code. One way to counter them is by decompilation the machine (executable) code of programs. The paper considers the application of a relatively new technology, large language models, to the task of restoring pseudo-source code suitable for detecting and eliminating vulnerabilities. The paper identifies problematic issues in the subject area, such as the incompleteness of the dataset for rare processor architectures, the lack of a guarantee that the obtained source code is identical to the specified machine code, the sanitization of the recovered source code by fixing vulnerabilities, hallucinations in the code, and the difficulty of restoring obfuscated (including optimized) code. To substantiate and demonstrate the essence of each problematic issue, a practical example of decompilation assembly code functions using the widespread large language model DeepSeek-V3.2 is provided. The negative impact of these problematic issues on the final neutralization of vulnerabilities is also indicated.

Authors

Institutions

Publication Details

Journal
Scientific and analytical journal «Vestnik Saint-Petersburg university of State fire service of EMERCOM of Russia»
Published
2025-12-27
DOI
https://doi.org/10.61260/2218-130x-2025-4-72-81
Primary Topic
Security and Verification in Computing
Type
article
Field-Weighted Citation Impact
0.00
Controls
|||
ALL TIME
JAN
FEB
MAR
APR
MAY
JUN
JUL
AUG
SEP
OCT
article

PROBLEM ISSUES IN USING LARGE LANGUAGE MODELS FOR DECOMPILATION OF MACHINE CODE WITH VULNERABILITIES

Konstantin Izrailov
Scientific and analytical journal «Vestnik Saint-Petersburg university of State fire service of EMERCOM of Russia»
Security and Verification in Computing
article

PROBLEM ISSUES IN USING LARGE LANGUAGE MODELS FOR DECOMPILATION OF MACHINE CODE WITH VULNERABILITIES

Konstantin Izrailov
article en

Abstract

This paper examines the problem of software vulnerabilities in the absence of source code. One way to counter them is by decompilation the machine (executable) code of programs. The paper considers the application of a relatively new technology, large language models, to the task of restoring pseudo-source code suitable for detecting and eliminating vulnerabilities. The paper identifies problematic issues in the subject area, such as the incompleteness of the dataset for rare processor architectures, the lack of a guarantee that the obtained source code is identical to the specified machine code, the sanitization of the recovered source code by fixing vulnerabilities, hallucinations in the code, and the difficulty of restoring obfuscated (including optimized) code. To substantiate and demonstrate the essence of each problematic issue, a practical example of decompilation assembly code functions using the widespread large language model DeepSeek-V3.2 is provided. The negative impact of these problematic issues on the final neutralization of vulnerabilities is also indicated.

Scientific and analytical journal «Vestnik Saint-Petersburg university of State fire service of EMERCOM of Russia»Vol. 2025(4)
Academy of the State Fire Service EMERCOM of Russia (RU)
Peace, Justice and strong institutions
Openalex Percentile: Top 16%
Security and Verification in Computing
AI Navigator

Ask Laika to Summarize, Analyze, and Connect papers live on the map.

Summarize Papers & Methodologies

Extract key findings, datasets, and comparative methods across publications.

Benchmark Rankings & Visual Analytics

Rank top research institutions, authors, funders, topics, and journals by Field-Weighted Citation Impact (FWCI) and paper volume with instant charts.

Connect Distant Disciplines

Bridge topological clusters on the map to find hidden collaborative intersections.