25 citations · 49 across the 12 of their papers we have counts for
13 papers
Mitigating Taint-Style Vulnerabilities in MCP Servers via Security-Aware Tool Descriptions
Yang Shi, Jiaheng Fu, Yihe Huang +3
Large language models (LLMs) are increasingly deployed as autonomous agents that interact with external tools and services via the Model Context Protocol (MCP), a standardized inte…
Bridging Generation and Training: A Systematic Review of Quality Issues in LLMs for Code
Kaifeng He, Xiaojun Zhang, Peiliang Cai +7
Large language models (LLMs) frequently generate defective code, ranging from logical bugs to security vulnerabilities. Training-data quality is one contributor to these outcomes a…
TigAug: Data Augmentation for Testing Traffic Light Detection in Autonomous Driving Systems
You Lu, Dingji Wang, Kaifeng Huang +2
Autonomous vehicle technology has been developed in the last decades with recent advances in sensing and computing technology. There is an urgent need to ensure the reliability and…
Lifting the Veil on Composition, Risks, and Mitigations of the Large Language Model Supply Chain
Kaifeng Huang, Bihuan Chen, You Lu +7
Large language models (LLMs) have sparked significant impact with regard to both intelligence and productivity. Numerous enterprises have integrated LLMs into their applications to…
LLMs Meet Library Evolution: Evaluating Deprecated API Usage in LLM-based Code Completion
Chong Wang, Kaifeng Huang, Jian Zhang +4
Large language models (LLMs), pre-trained or fine-tuned on large code corpora, have shown effectiveness in generating code completions. However, in LLM-based code completion, LLMs…
Detecting and Fixing Violations of Modification Terms in Open Source Licenses during Forking
Kaifeng Huang, Yingfeng Xia, Bihuan Chen +3
Open source software brings benefit to software community, but also introduces legal risks caused by license violations, which result in serious consequences such as lawsuits and f…
Killing Two Birds with One Stone: Malicious Package Detection in NPM and PyPI using a Single Model of Malicious Behavior Sequence
Junan Zhang, Kaifeng Huang, Yiheng Huang +4
Open-source software (OSS) supply chain enlarges the attack surface, which makes package registries attractive targets for attacks. Recently, package registries NPM and PyPI have b…
Scalable and Precise Application-Centered Call Graph Construction for Python
Kaifeng Huang, Yixuan Yan, Bihuan Chen +2
Call graph construction is the foundation of inter-procedural static analysis. PYCG is the state-of-the-art approach for constructing call graphs for Python programs. Unfortunately…
Understanding the Complexity and Its Impact on Testing in ML-Enabled Systems
Junming Cao, Bihuan Chen, Longjie Hu +3
Machine learning (ML) enabled systems are emerging with recent breakthroughs in ML. A model-centric view is widely taken by the literature to focus only on the analysis of ML model…
Demystifying Dependency Bugs in Deep Learning Stack
Kaifeng Huang, Bihuan Chen, Susheng Wu +3
Deep learning (DL) applications, built upon a heterogeneous and complex DL stack (e.g., Nvidia GPU, Linux, CUDA driver, Python runtime, and TensorFlow), are subject to software and…
Tracking Patches for Open Source Software Vulnerabilities
Congying Xu, Bihuan Chen, Chenhao Lu +3
Open source software (OSS) vulnerabilities threaten the security of software systems that use OSS. Vulnerability databases provide valuable information (e.g., vulnerable version an…
Interactive, Effort-Aware Library Version Harmonization
Kaifeng Huang, Bihuan Chen, Bowen Shi +3
As a mixed result of intensive dependency on third-party libraries, flexible mechanism to declare dependencies, and increased number of modules in a project, multiple versions of t…
An Empirical Study of Usages, Updates and Risks of Third-Party Libraries in Java Projects
Ying Wang, Bihuan Chen, Kaifeng Huang +5
Third-party libraries are a central building block to develop software systems. However, outdated third-party libraries are commonly used, and developers are usually less aware of…