Towards security defect prediction with AI