LLM-Assisted Dynamic Threat Analysis for Attacker-Reachable Software Weaknesses in Autonomous Veh…

The 30-second take

• What: Autonomous vehicles depend on large safety-critical software stacks, where weaknesses reachable from adversarial inputs may affect steering, braking, or other control decisions.
• Why now: Artificial Intelligence is active on arXiv; heuristic disruptiveness 53/100.
• Who should care: Researchers and builders tracking Artificial Intelligence.

What the paper actually did

The authors present LLM-Assisted Dynamic Threat Analysis for Attacker-Reachable Software Weaknesses in Autonomous Vehicles (arXiv:2608.13450).

Autonomous vehicles depend on large safety-critical software stacks, where weaknesses reachable from adversarial inputs may affect steering, braking, or other control decisions. Static analysis can identify candidate sites, but dynamically confirming exploitability requires executable test artifacts that are difficult to construct manually.

We investigate whether large language models (LLMs) can automate this process for Autoware, an open-source autonomous-driving stack. We perform compiler-precise static analysis across 185 packages, identifying 1,375 decision rules, 2,274 validation checks, and 482 input-to-safety-output flows, from which we derive a weakness taxonomy and sample 740 reachable sites. Two local open-weight LLMs, a no-static-context ablation, and a naive-template baseline generate 3,700 artifact sets, which are compiled against the real build under sanitizers, repaired through compiler-in-the-loop feedback, and fuzzed when executable.

Categories: cs.SE, cs.CR, cs.LG. Authors: Md Wasiul Haque, Sagar Dasgupta, Mizanur Rahman, Md Rayhanur Rahman.

What makes this disruptive

We score this 53/100 (novelty 68, impact 69, field heat 55, practicality 50, controversy 25).

Heuristic score based on topical heat terms (1 hits) and claim-language signals. Editorial review recommended before publish.

If the core claim holds, it can shift priorities in Artificial Intelligence — treat this as a roadmap signal, not a final verdict.

Why it matters (outside the lab)

Shifts in Artificial Intelligence cascade into research agendas, tooling choices, and funding theses.

Near-term: compare the preprint’s setup and baselines to your internal work before over- or under-weighting it.

Medium-term: replication, open data/code, and follow-on preprints decide whether this becomes a durable line of work.

Limitations & open questions

Heuristic explainer caveats (no LLM rewrite):

- Preprint: Not peer-reviewed by us; claims are provisional. - Scope: Read the PDF for exact tasks, datasets, and hardware. - No independent replication: We have not re-run experiments (arXiv:2608.13450). - Scoring is automated: Disruptiveness uses rule-based heat terms until editorial/AI review.