Loading article...
Loading article...
Stream/Area:
-
Subject:
-
Paper ID:
IJSREM68630
Volume:
10 |
10 |
Oct 2026
Pages:
1-14
Publication Frequency:
Monthly (12 issues per year)
License:International Journal of Scientific Research in Engineering and Management follows the Creative Commons Attribution 4.0 (CC BY 4.0) License, allowing free use and distribution with proper attribution.
CSE (Cyber Security)
G H Raisoni College Of aEngineering And Management Nagpur
CSE (Cyber Security)
G H Raisoni College Of aEngineering And Management Nagpur
CSE (Cyber Security)
G H Raisoni College Of aEngineering And Management Nagpur
CSE (Cyber Security)
G H Raisoni College Of aEngineering And Management Nagpur
CSE (Cyber Security)
G H Raisoni College Of aEngineering And Management Nagpur
CSE (Cyber Security)
G H Raisoni College Of aEngineering And Management Nagpur
Code security review is an important part of software development because vulnerable coding patterns can introduce risks into applications. Manual review can be time-consuming, while rule-based scanners may not provide sufficient contextual explanations for developers. This paper presents CodeGuard AI, an AI-assisted code security review platform designed to identify potentially vulnerable code, explain findings, suggest remediation, and support verification after changes. The project’s described detection approach combines custom security rules and pattern matching with AI-generated explanations using Gemini. The workflow also includes code analysis through a web interface and support for scanning project files supplied in ZIP archives. Where implemented and enabled, post-fix verification can re-run analysis and tests to check whether a reported issue remains. The current project evidence described for this draft is limited to approximately 1–20 samples across multiple programming languages, with screenshots and scan records. Consequently, this paper treats the work as a preliminary implementation and does not claim statistically validated detection performance. Further evaluation using a larger, labelled benchmark and repeatable test protocol is required.
KEYWORDS
1) CodeGuard AI combines static code analysis and Artificial Intelligence to identify potential security issues in source code. It provides a structured approach to reviewing code security. 2) The system uses predefined rules and pattern matching to detect potentially insecure coding patterns. This helps developers recognize possible vulnerabilities during software development. 3) Gemini AI explains detected issues in simple and understandable language. This helps users understand the causes and possible security impacts of reported findings. 4) The platform provides remediation suggestions to help developers improve their source code. These recommendations encourage the use of safer coding practices. 5) CodeGuard AI supports source-code submission for security analysis. This allows users to examine individual code snippets and review potential security weaknesses. 6) ZIP-based project scanning can help analyze multiple source files within a software project. This provides a convenient approach to reviewing project code, depending on the supported implementation. 7) The post-fix verification process allows users to rescan modified source code. The new results help users check whether previously detected patterns remain after corrections. 8) Scan history and reporting help users organize and revisit previous analysis results. This supports the review of findings across multiple scanning sessions. 9) CodeGuard AI can assist students and beginner developers in learning about software vulnerabilities and secure coding practices. It connects practical code analysis with AI-generated explanations. 10) The system can be improved by expanding detection rules, supporting more programming languages, and strengthening verification methods. Further testing is required to evaluate its detection capabilities and the reliability of its recommendations.
[1] H. Pearce, B. Tan, B. Ahmad, R. Karri, and B. Dolan-Gavitt, “Examining Zero-Shot Vulnerability Repair with Large Language Models,” Proceedings of the IEEE Symposium on Security and Privacy (SP), 2023. DOI: 10.1109/SP46215.2023.10179324 [2] X. Zhou, S. Cao, X. Sun, and D. Lo, “Large Language Model for Vulnerability Detection and Repair: Literature Review and the Road Ahead,” arXiv preprint arXiv:2404.02525, 2024. Available: DOI : https://arxiv.org/abs/2404.02525. [3] D. de Fitero-Dominguez, E. Garcia-Lopez, A. Garcia-Cabot, and J.-J. Martinez-Herraiz, “Enhanced Automated Code Vulnerability Repair Using Large Language Models,” Engineering Applications of Artificial Intelligence, vol. 138, Part A, Article 109291, 2024. DOI: 10.1016/j.engappai.2024.109291. [4] X. Zhou, S. Cao, X. Sun, and D. Lo, “Large Language Model for Vulnerability Detection and Repair: Literature Review and the Road Ahead,” ACM Transactions on Software Engineering and Methodology, vol. 34, no. 5, Article 145, pp. 1–31, 2025. DOI: 10.1145/3708522. [5] D. Gnieciak and T. Szandala, “Large Language Models Versus Static Code Analysis Tools: A Systematic Benchmark for Vulnerability Detection,” arXiv preprint arXiv:2508.04448, 2025. Available DOI: https://arxiv.org/abs/2508.04448. [6] V. Belozerov, P. J. Barclay, and A. Sami, “Secure Coding with AI – From Detection to Repair,” Empirical Software Engineering, vol. 31, Article 93, 2026. DOI: 10.1007/s10664-026-10812-8
Publication Date
10/31/2026
Peer Review Type
Double-Blind Peer Review
Review Rounds: 2
Documents
Article Views
0
Total views since publication
PDF Downloads
5
Total downloads since publication
Geographic Reach
5
Digital Preservation: This article is permanently archived on Zenodo and complies with all data preservation standards across major indexing platforms.
Plagiarism Screening
This manuscript has been checked for plagiarism using TurnitinPlagiarismChecker software.
Conflict of Interest
The authors declare no conflict of interest related to this research work.
Funding Information
No funding information available for this research.
Related research in the same subject area
Loading similar articles...