Basheer, Nihala and Islam, Shareeful and Alwaheidi, Mohammed KS and Mouratidis, Haralambos and Papastergiou, Spyridon (2025) Large language model based hybrid framework for automatic vulnerability detection with explainable AI for cybersecurity enhancement. Integrated Computer-Aided Engineering. DOI https://doi.org/10.1177/10692509251368663
Basheer, Nihala and Islam, Shareeful and Alwaheidi, Mohammed KS and Mouratidis, Haralambos and Papastergiou, Spyridon (2025) Large language model based hybrid framework for automatic vulnerability detection with explainable AI for cybersecurity enhancement. Integrated Computer-Aided Engineering. DOI https://doi.org/10.1177/10692509251368663
Basheer, Nihala and Islam, Shareeful and Alwaheidi, Mohammed KS and Mouratidis, Haralambos and Papastergiou, Spyridon (2025) Large language model based hybrid framework for automatic vulnerability detection with explainable AI for cybersecurity enhancement. Integrated Computer-Aided Engineering. DOI https://doi.org/10.1177/10692509251368663
Abstract
Organizations nowadays rely on intensive software systems to support their business operations but vulnerabilities within these systems can cause potential risks for major disruption. AI-based techniques are now widely considered for vulnera-bility identification; however effectiveness heavily relies on the dataset’s size and quality. These techniques often lack contextual information while processing data and pose challenges in resource-constrained environments. AI models are generally black box in nature which creates additional challenges to understand decision making processes. This work proposes a novel hybrid framework using LLM model based on CodeBERT with integration of fine-tuning and Model-Agnostic Meta-Learning for performing effective vulnerability detection. It includes few-shot learning technique for new vulnerability detection tasks while maintaining high performance on known cases. The approach adopts Explainable AI techniques from four dimensions including attention mechanisms, layer-wise analysis, feature contribution, and model confidence scores to explain model decision making. An experiment demonstrates the framework’s effectiveness, show-ing steady decrease in meta-loss from 0.45 to 0.14, accompanied by increase in support accuracy from 85.2% to 92.5%. These findings establish the proposed framework as a robust and interpretable solution for vulnerability detection and management.
| Item Type: | Article |
|---|---|
| Uncontrolled Keywords: | Cyber Security; few-Shots; explainability; heatmap; vulnerability; SHAP |
| Subjects: | Z Bibliography. Library Science. Information Resources > ZR Rights Retention |
| Divisions: | Faculty of Science and Health > Computer Science and Electronic Engineering, School of |
| SWORD Depositor: | Unnamed user with email elements@essex.ac.uk |
| Depositing User: | Unnamed user with email elements@essex.ac.uk |
| Date Deposited: | 18 Dec 2025 15:48 |
| Last Modified: | 18 Dec 2025 15:48 |
| URI: | http://repository.essex.ac.uk/id/eprint/42405 |
Available files
Filename: ICAE_XAI_Paper.pdf
Licence: Creative Commons: Attribution 4.0