7 citations · 22 across the 25 of their papers we have counts for
3 papers · 1 filter
Towards Personalizing Secure Programming Education with LLM-Injected Vulnerabilities
Matthew Frazier, Kostadin Damevski
According to constructivist theory, students learn software security more effectively when examples are grounded in their own code. Generic examples often fail to connect with stud…
AXE: Grey-Box Exploitability Confirmation for Localized Vulnerability Reports
Amirali Sajadi, Tu Nguyen, Kostadin Damevski +1
Vulnerability detection tools are widely adopted in software projects, yet they often overwhelm maintainers with false positives and non-actionable reports. Automated exploitation…
How Safe Are AI-Generated Patches? A Large-scale Study on Security Risks in LLM and Agentic Automated Program Repair on SWE-bench
Amirali Sajadi, Kostadin Damevski, Preetha Chatterjee
Large language models (LLMs) and their agentic frameworks are increasingly adopted to perform development tasks such as automated program repair (APR). While prior work has identif…