Vulnerable Code Search: Transferable Attack for Code Language Models
Researchers demonstrate a transferable adversarial attack against code language models used in search tools by perturbing variable and function names while preserving code functionality, revealing how seemingly non-functional textual changes can manipulate neural retrieval systems. The attack generalizes across programming languages and between different models, highlighting a semantic-level vulnerability in code understanding.
Why this matters
Researchers demonstrate a transferable adversarial attack against code language models used in search tools by perturbing variable and function names while preserving code functionality, revealing how seemingly non-functional textual changes can manipulate neural retrieval systems. The attack generalizes across programming languages and between different models, highlighting a semantic-level vulnerability in code understanding.
Check the original work
This explanation is Korpalis’s guide to the material, not a replacement for it. Read the publisher’s page for the full method, evidence and limitations.