8 citations · 16 across the 12 of their papers we have counts for
12 papers
Quantitative Symbolic Patch Impact Analysis
Laboni Sarker, Abdus Satter, Tevfik Bultan
Traditional equivalence checking classifies programs as equivalent or non-equivalent, providing insufficient information for tasks like patch impact analysis where it is expected t…
Program Analysis Guided LLM Agent for Proof-of-Concept Generation
Achintya Desai, Md Shafiuzzaman, Wenbo Guo +1
Software developers frequently receive vulnerability reports that require them to reproduce the vulnerability in a reliable manner by generating a proof-of-concept (PoC) input that…
Guiding Symbolic Execution with Static Analysis and LLMs for Vulnerability Discovery
Md Shafiuzzaman, Achintya Desai, Wenbo Guo +1
Symbolic execution detects vulnerabilities with precision, but applying it to large codebases requires harnesses that set up symbolic state, model dependencies, and specify asserti…
Fuzzing the brain: Automated stress testing for the safety of ML-driven neurostimulation
Mara Downing, Matthew Peng, Jacob Granley +2
Objective: Machine learning (ML) models are increasingly used to generate electrical stimulation patterns in neuroprosthetic devices such as visual prostheses. While these models p…
Software Security Analysis in 2030 and Beyond: A Research Roadmap
Marcel Böhme, Eric Bodden, Tevfik Bultan +3
As our lives, our businesses, and indeed our world economy become increasingly reliant on the secure operation of many interconnected software systems, the software engineering res…
UEFI Vulnerability Signature Generation using Static and Symbolic Analysis
Md Shafiuzzaman, Achintya Desai, Laboni Sarker +1
Since its major release in 2006, the Unified Extensible Firmware Interface (UEFI) has become the industry standard for interfacing a computer's hardware and operating system, repla…
Assessing, Exploiting, and Mitigating Syntactic Robustness Failures in LLM-Based Code Generation
Laboni Sarker, Mara Downing, Achintya Desai +1
Rapid advances in the field of Large Language Models (LLMs) have made LLM-based code generation an important area for investigation. An LLM-based code generator takes a prompt as i…
Rare-Seed Generation for Fuzzing
Seemanta Saha, Laboni Sarker, Md Shafiuzzaman +4
Starting with a random initial seed, fuzzers search for inputs that trigger bugs or vulnerabilities. However, fuzzers often fail to generate inputs for program paths guarded by res…
CorbFuzz: Checking Browser Security Policies with Fuzzing
Chaofan Shou, Ismet Burak Kadron, Qi Su +1
Browsers use security policies to block malicious behaviors. Cross-Origin Read Blocking (CORB) is a browser security policy for preventing side-channel attacks such as Spectre. We…
Attack Synthesis for Strings using Meta-Heuristics
Seemanta Saha, Ismet Burak Kadron, William Eiers +2
Information leaks are a significant problem in modern computer systems and string manipulation is prevalent in modern software. We present techniques for automated synthesis of sid…
Incremental Adaptive Attack Synthesis
Seemanta Saha, William Eiers, Ismet Burak Kadron +2
Information leakage is a significant problem in modern software systems. Information leaks due to side channels are especially hard to detect and analyze. In this paper, we present…
Contracting the Facebook API
Ben Rubinger, Tevfik Bultan
In recent years, there has been an explosive growth in the popularity of online social networks such as Facebook. In a new twist, third party developers are now able to create thei…