Larkin wrote in an article published on Carahsoft.com how tools built on the generative pre-trained transformer technology like Veracode Fix could help software developers learn security techniques.
“It takes the next step from scanning code for flaws and vulnerabilities to showing developers how to fix the code before deploying it in an application,” he said of Veracode Fix.
Larkin explained how the company trains a model by identifying flaws through a scan, recognizing what type of flaw, mapping the code to known bad vulnerabilities and matching the bad code with good patches.
He discussed the company’s use of a “supervised learning model on a curated dataset” while meeting the government’s modernization and security requirements without relying on customer code references for future fixes.
“The approach ensures that we can provide our government customers with reliable fixes they can easily implement,” Larkin added.
By Chris Crowder, executive vice president, GovCon, Unanet Across government contracting, many leaders feel good about their pipelines. Opportunity volume looks strong.…
Sabel Systems Technology Solutions has appointed Stephen Vukovich, an IT implementation project manager, as interim senior vice president and president…
Defensive cyber has become foundational to federal digital modernization strategy, shaping how agencies approach cloud adoption, AI integration and enterprise…