5 papers · 1 filter
Taint-Based Code Slicing for LLMs-based Malicious NPM Package Detection
Dang-Khoa Nguyen, Gia-Thang Ho, Quang-Minh Pham +5
Software supply chain attacks on the npm ecosystem have grown increasingly sophisticated, exploiting obfuscation and complex logic to evade detection. Large Language Models (LLMs)…
Towards Classifying Benign And Malicious Packages Using Machine Learning
Thanh-Cong Nguyen, Ngoc-Thanh Nguyen, Van-Giau Ung +1
Recently, the number of malicious open-source packages in package repositories has been increasing dramatically. While major security scanners focus on identifying known Common Vul…
Pack-A-Mal: A Malware Analysis Framework for Open-Source Packages
Duc-Ly Vu, Thanh-Cong Nguyen, Minh-Khanh Vu +2
The increasingly sophisticated environment in which attackers operate makes software security an even greater challenge in open-source projects, where malicious packages are preval…
A Study of Malware Prevention in Linux Distributions
Duc-Ly Vu, Trevor Dunlap, Karla Obermeier-Velazquez +4
Malicious attacks on open-source software packages are a growing concern. The discovery of the XZ Utils backdoor intensified these concerns because of the potential widespread impa…
A Convolutional Transformation Network for Malware Classification
Duc-Ly Vu, Trong-Kha Nguyen, Tam V. Nguyen +3
Modern malware evolves various detection avoidance techniques to bypass the state-of-the-art detection methods. An emerging trend to deal with this issue is the combination of imag…