{"data":{"id":"10.48550/arxiv.2610.14960","type":"dois","attributes":{"doi":"10.48550/arxiv.2610.14960","prefix":"10.48550","suffix":"arxiv.2610.14960","identifiers":[{"identifier":"2610.14960","identifierType":"arXiv"}],"alternateIdentifiers":[{"alternateIdentifierType":"arXiv","alternateIdentifier":"2610.14960"}],"creators":[{"name":"Doria, Samuele","nameType":"Personal","givenName":"Samuele","familyName":"Doria","affiliation":[],"nameIdentifiers":[]},{"name":"De Rosa, Stefano","nameType":"Personal","givenName":"Stefano","familyName":"De Rosa","affiliation":[],"nameIdentifiers":[]},{"name":"Wang, Ruoyu","nameType":"Personal","givenName":"Ruoyu","familyName":"Wang","affiliation":[],"nameIdentifiers":[]},{"name":"Basque, Zion Leonahenahe","nameType":"Personal","givenName":"Zion Leonahenahe","familyName":"Basque","affiliation":[],"nameIdentifiers":[]},{"name":"Losiouk, Eleonora","nameType":"Personal","givenName":"Eleonora","familyName":"Losiouk","affiliation":[],"nameIdentifiers":[]},{"name":"Aonzo, Simone","nameType":"Personal","givenName":"Simone","familyName":"Aonzo","affiliation":[],"nameIdentifiers":[]}],"titles":[{"title":"Humans vs. Machines: A Comparison With AI Agents in Software Reverse Engineering"}],"publisher":"arXiv","container":{},"publicationYear":2026,"subjects":[{"lang":"en","subject":"Software Engineering (cs.SE)","subjectScheme":"arXiv"},{"lang":"en","subject":"Artificial Intelligence (cs.AI)","subjectScheme":"arXiv"},{"subject":"FOS: Computer and information sciences","subjectScheme":"Fields of Science and Technology (FOS)"}],"contributors":[],"dates":[{"date":"2026-10-10T14:32:31Z","dateType":"Submitted","dateInformation":"v1"},{"date":"2026-10-14T00:53:02Z","dateType":"Updated","dateInformation":"v1"},{"date":"2026-10","dateType":"Available","dateInformation":"v1"}],"language":null,"types":{"ris":"GEN","bibtex":"misc","citeproc":"article","schemaOrg":"CreativeWork","resourceType":"Article","resourceTypeGeneral":"Preprint"},"relatedIdentifiers":[],"relatedItems":[],"sizes":[],"formats":[],"version":"1","rightsList":[{"rights":"arXiv.org perpetual, non-exclusive license","rightsUri":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/"}],"descriptions":[{"description":"Can an autonomous AI agent reverse engineer a binary as well as a skilled human analyst? Do they adopt the same strategy, and can agents scale to real-world programs? We compare human and LLM-based software reverse engineering (SRE): nine models tackle two compact static-analysis challenges previously solved by human analysts, scored with a common understanding rubric, and we record their complete interactions with IDA Pro. This lets us compare not only what humans and agents recover, but also how they investigate a binary. The best agents (GPT-5.5 Pro, Claude Opus 4.8, and Kimi K3) achieve statistically human-competitive understanding on both tasks, while weaker models remain far behind. Ablations show that the gap depends on code representation and workflow demands, not on model capability alone: open-weight models improve substantially with richer code representations, whereas frontier models show no significant change. Similar success rates hide different workflows. Humans repeatedly revisit functions and follow local program structure; strong agents jump across the binary, retrieve information broadly, and rarely return to inspected code, a behavior we call greedy fetching. This strategy is not fixed: given semantically richer code, agents fetch less without losing understanding. Because greedy fetching aggregates large amounts of code in the agent's context, we measure context-window saturation across 4,000 real-world binaries: large windows accommodate many programs, but larger applications and lower-level representations quickly exhaust them. Autonomous reverse engineering is becoming competitive, with a large speed advantage, but scaling it will require better navigation, selective retrieval, and persistent analysis state, not merely larger context windows.","descriptionType":"Abstract"}],"geoLocations":[],"fundingReferences":[],"xml":"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","url":"https://arxiv.org/abs/2610.14960","contentUrl":null,"metadataVersion":0,"schemaVersion":"http://datacite.org/schema/kernel-4","source":"mds","isActive":true,"state":"findable","reason":null,"viewCount":0,"viewsOverTime":[],"downloadCount":0,"downloadsOverTime":[],"referenceCount":0,"citationCount":0,"citationsOverTime":[],"partCount":0,"partOfCount":0,"versionCount":0,"versionOfCount":0,"created":"2026-10-14T06:31:20.000Z","registered":"2026-10-14T06:31:20.000Z","published":"2026","updated":"2026-10-14T06:31:20.000Z"},"relationships":{"client":{"data":{"id":"arxiv.content","type":"clients"}},"provider":{"data":{"id":"arxiv","type":"providers"}},"media":{"data":{"id":"10.48550/arxiv.2610.14960","type":"media"}},"references":{"data":[]},"citations":{"data":[]},"parts":{"data":[]},"partOf":{"data":[]},"versions":{"data":[]},"versionOf":{"data":[]}}}}