Work

Using LLM Agents for Security Testing of Compiled Mobile Applications

Year: 2026

Type: conference-paper

Abstract: Security testing of compiled applications is crucial for organizations to assess the behavior and security of the software they deploy without relying on the vendor. In this paper, we present a case study that investigates the capability of autonomous Large Language Model (LLM) agents to detect security weaknesses and compliance risks in compiled code of a real-world iOS application. These application-layer vulnerabilities are often context-dependent: they arise from app logic patterns that violate security principles in ways that require a human-like understanding to recognize, making them resistant to detection via conventional static analysis methods.

DOI: 10.1145/3843781.3844621

Authors: Fabian Scherf, Florian Magin

Institutions: Fraunhofer Institute for Secure Information Technology, National Research Center for Applied Cybersecurity ATHENE

Language: English

Topic: Software Testing and Debugging Techniques

Subfield: Software

Field: Computer Science

Domain: Physical Sciences

Open Access status: gold

OpenAlex ID: W7220899651

FWCI:

Cites: 13

Cited by:

Related to: 10