Publications (26)
Control-Flow Integrity: Precision, Security, and Performance
Nathan Burow, Scott A. Carr, Joseph Nash +4
Memory corruption errors in C/C++ programs remain the most common source of security vulnerabilities in today's systems. Control-flow hijacking attacks exploit memory corruption vu…
Cuckoo Attack: Stealthy and Persistent Attacks Against AI-IDE
Xinpeng Liu, Junming Liu, Peiyu Liu +5
Modern AI-powered Integrated Development Environments (AI-IDEs) are increasingly defined by an Agent-centric architecture, where an LLM-powered Agent is deeply integrated to autono…
Fixing 7,400 Bugs for 1$: Cheap Crash-Site Program Repair
Han Zheng, Ilia Shumailov, Tianqi Fan +2
The rapid advancement of bug-finding techniques has led to the discovery of more vulnerabilities than developers can reasonably fix, creating an urgent need for effective Automated…
Could ChatGPT get an Engineering Degree? Evaluating Higher Education Vulnerability to AI Assistants
Beatriz Borges, Negar Foroutan, Deniz Bayazit +87
AI assistants are being increasingly used by students enrolled in higher education institutions. While these tools provide opportunities for improved teaching and education, they a…
PACSan: Enforcing Memory Safety Based on ARM PA
Yuan Li, Wende Tan, Zhizheng Lv +4
Memory safety is a key security property that stops memory corruption vulnerabilities. Existing sanitizers enforce checks and catch such bugs during development and testing. Howeve…
Designing a Provenance Analysis for SGX Enclaves
Flavio Toffalini, Mathias Payer, Jianying Zhou +1
Intel SGX enables memory isolation and static integrity verification of code and data stored in user-space memory regions called enclaves. SGX effectively shields the execution of…