CRAug 28, 2023
Using ChatGPT as a Static Application Security Testing ToolAtieh Bakhshandeh, Abdalsamad Keramatfar, Amir Norouzi et al.
In recent years, artificial intelligence has had a conspicuous growth in almost every aspect of life. One of the most applicable areas is security code review, in which a lot of AI-based tools and approaches have been proposed. Recently, ChatGPT has caught a huge amount of attention with its remarkable performance in following instructions and providing a detailed response. Regarding the similarities between natural language and code, in this paper, we study the feasibility of using ChatGPT for vulnerability detection in Python source code. Toward this goal, we feed an appropriate prompt along with vulnerable data to ChatGPT and compare its results on two datasets with the results of three widely used Static Application Security Testing tools (Bandit, Semgrep and SonarQube). We implement different kinds of experiments with ChatGPT and the results indicate that ChatGPT reduces the false positive and false negative rates and has the potential to be used for Python source code vulnerability detection.
39.5SYMay 1
Voltage Ride-Through in Large Loads- A Dual PQ ApproachAmir Norouzi, Michael Morel
This paper provides a detailed investigation of voltage ride-through in large loads, such as Artificial Intelligence data centers. Voltage ride-through capability of large loads during transient disturbances in the power grid is important because of the potential impact on the stability and reliability of the Bulk Power System. A mathematical analysis is presented and it is shown how the traditional approach, based on reactive power compensation, may not be adequate for voltage ride-through in large loads. Ultimately, due to capacity limits of the load's power distribution infrastructure and grid's constraints, there is a limit to using reactive power as a corrective tool. A new dual active and reactive power (PQ) approach is proposed in which non-grid resources with dynamic P and Q capabilities are shown to be needed to help with voltage ride-through. Additionally, the analysis illustrates that at extreme voltage dips in the power grid maintaining an acceptable level of load voltage can become practically or theoretically unattainable, which may lead to the load's disconnection from the grid. Analytical results are provided with practical numerical examples.