8 papers
Taming the Drift: Context-aware Repair of Dockerfile Drift during Software Evolution
Chengjie Wang, Jingzheng Wu, Xiang Ling +2
The paper introduces Cadre, a framework that uses a context-aware dependency graph to automatically repair Dockerfile drift by selecting relevant code context and generating target…
Correct Code, Vulnerable Dependencies: A Large Scale Measurement Study of LLM-Specified Library Versions
Chengjie Wang, Jingzheng Wu, Xiang Ling +2
Large language models (LLMs) are now largely involved in software development workflows, and the code they generate routinely includes third-party library (TPL) imports annotated w…
Towards Secure Agent Skills: Architecture, Threat Taxonomy, and Security Analysis
Zhiyuan Li, Jingzheng Wu, Xiang Ling +2
Agent Skills is an emerging open standard that defines a modular, filesystem-based packaging format enabling LLM-based agents to acquire domain-specific expertise on demand. Despit…
SimFuzz: Similarity-guided Block-level Mutation for RISC-V Processor Fuzzing
Hao Lyu, Jingzheng Wu, Xiang Ling +3
The Instruction Set Architecture (ISA) defines processor operations and serves as the interface between hardware and software. As an open ISA, RISC-V lowers the barriers to process…
A Large Scale Empirical Analysis on the Adherence Gap between Standards and Tools in SBOM
Chengjie Wang, Jingzheng Wu, Hao Lyu +4
A Software Bill of Materials (SBOM) is a machine-readable artifact that systematically organizes software information, enhancing supply chain transparency and security. To facilita…
Feature Slice Matching for Precise Bug Detection
Ke Ma, Jianjun Huang, Wei You +4
Measuring the function similarity to detect bugs is effective, but the statements unrelated to the bugs can impede the performance due to the noise interference. Suppressing the no…