OpenSSF Finding and Fixing Vulnerabilities Using AI

Finding and Fixing Software Vulnerabilities Using AI: A Guide for Developers

David A. Wheeler and OpenSSF Contributors

Abstract

This is a guide for software developers and vulnerability researchers on finding and fixing vulnerabilities using artificial intelligence (AI). We intend to create a course using this guide. This material is a joint effort between the OpenSSF Best Practices working group (WG) and the OpenSSF AI/ML WG.