HN Explorer

Ask HN: LLM agent to firewall vulnerable FOSS libs?

7 points by ATechGuy ↗ HN
As software providers, we use several FOSS libraries. These libraries require periodical security bug fixing, which requires shipping a new release. We are building an LLM agent that can block these security bugs at runtime (like a firewall so to speak) and prevent attackers from exploiting security bugs in vulnerable libraries. Are there any pitfalls that we must avoid? Your feedback is welcome.

5 comments

[ 2.1 ms ] story [ 20.7 ms ] thread
wmf
Yeah, the main pitfall is that this has no chance of working.
ATechGuy
Care to elaborate?
atlasduo
I am not the original commenter, but when you are firmly set to work with a hammer, everything starts to look like a nail.
ailef
How would an LLM agent "block these security bugs at runtime" exactly?
wmf
I guess the idea is like spam filtering but for function calls. You could use a deep learning model as a classifier to detect abnormal patterns. You probably wouldn't want to use an LLM though and I'm skeptical about the accuracy and performance.