Evidence Assurance for AI Assisted Static Application Security Testing Provenance Falsification and Validation
This technical report presents an evidence-assurance framework for AI-assisted Static Application Security Testing (AI-SAST), showing how AI can be used in security testing without treating its output as proof. It treats AI-generated findings as candidate security hypotheses rather than final determinations and propose...