Ross Arnold

Beyond Bypass: Measuring Vulnerability Regression in LLM-Generated Security Patches

Automated vulnerability repair with large language models is increasingly woven into security workflows, yet evaluation practice has focused almost entirely on a single question: does the patch eliminate the targeted weakness? However, an equally important question has received little systematic attention: has the patc...