140 citations · 215 across the 18 of their papers we have counts for
19 papers
Narratives Mislead: An Empirical Study of How LLMs Misjudge CVSS Severity in Bug Bounty Reports
Ruitao Feng, Yuekang Li, Yao Zhang
Bug bounty platforms receive vulnerability reports faster than vendors can triage them, and Large Language Models (LLMs) are increasingly considered for assigning the Common Vulner…
Decoupling is a Necessity: Transformation-Agnostic Decompiled Code Recovery under Optimization and Obfuscation
Zhiping Zhou, Xiaohong Li, Ruitao Feng +3
Reverse engineering is essential for software security analysis and vulnerability detection. Decompilation, the process of lifting binaries to high-level pseudocode, is central to…
PriME-Deal: Privacy-Preserving Bilateral Data Trading with Efficient Matchmaking and Auditable Fair Exchange on Blockchain
Jie Zhang, Xiaohong Li, Shanshan Xu +3
Bilateral attribute-based access control for data trading must hide policies, provide cryptographic fairness, and avoid trusted third parties. Existing solutions either leak policy…
Privacy-Enhancing Encryption in Data Sharing: A Survey on Security, Performance and Functionality
Yongyang Lv, Xiaohong Li, Ruitao Feng +5
The vigorous development of the Internet has spurred exponential data growth, yet data is predominantly stored in isolated user entities, hampering its full value realization. In l…
MedExChain: Enabling Secure and Efffcient PHR Sharing Across Heterogeneous Blockchains
Yongyang Lv, Xiaohong Li, Kui Chen +3
With the proliferation of intelligent healthcare systems, patients' Personal Health Records (PHR) generated by the Internet of Medical Things (IoMT) in real-time play a vital role…
QAE-BAC: Achieving Quantifiable Anonymity and Efficiency in Blockchain-Based Access Control with Attribute
Jie Zhang, Xiaohong Li, Mengke Zhang +4
Blockchain-based Attribute-Based Access Control (BC-ABAC) offers a decentralized paradigm for secure data governance but faces two inherent challenges: the transparency of blockcha…
FidelityGPT: Correcting Decompilation Distortions with Retrieval Augmented Generation
Zhiping Zhou, Xiaohong Li, Ruitao Feng +5
Decompilation converts machine code into human-readable form, enabling analysis and debugging without source code. However, fidelity issues often degrade the readability and semant…
It Only Gets Worse: Revisiting DL-Based Vulnerability Detectors from a Practical Perspective
Yunqian Wang, Xiaohong Li, Yao Zhang +3
With the growing threat of software vulnerabilities, deep learning (DL)-based detectors have gained popularity for vulnerability detection. However, doubts remain regarding their c…
VeriFuzzy: A Dynamic Verifiable Fuzzy Search Service for Encrypted Cloud Data
Jie Zhang, Xiaohong Li, Man Zheng +4
Enabling search over encrypted cloud data is essential for privacy-preserving data outsourcing. While searchable encryption has evolved to support individual requirements like fuzz…
Cross-chain Sharing of Personal Health Records: Heterogeneous and Interoperable Blockchains
Yongyang Lv, Xiaohong Li, Yingwenbo Wang +3
With the widespread adoption of medical informatics, a wealth of valuable personal health records (PHR) has been generated. Concurrently, blockchain technology has enhanced the sec…
Multi-label Classification for Android Malware Based on Active Learning
Qijing Qiao, Ruitao Feng, Sen Chen +2
The existing malware classification approaches (i.e., binary and family classification) can barely benefit subsequent analysis with their outputs. Even the family classification ap…
FT2Ra: A Fine-Tuning-Inspired Approach to Retrieval-Augmented Code Completion
Qi Guo, Xiaohong Li, Xiaofei Xie +6
The rise of code pre-trained models has significantly enhanced various coding tasks, such as code completion, and tools like GitHub Copilot. However, the substantial size of these…
Beyond Fidelity: Explaining Vulnerability Localization of Learning-based Detectors
Baijun Cheng, Shengming Zhao, Kailong Wang +6
Vulnerability detectors based on deep learning (DL) models have proven their effectiveness in recent years. However, the shroud of opacity surrounding the decision-making process o…
A Comprehensive Study on Quality Assurance Tools for Java
Han Liu, Sen Chen, Ruitao Feng +6
Quality assurance (QA) tools are receiving more and more attention and are widely used by developers. Given the wide range of solutions for QA technology, it is still a question of…
TransRepair: Context-aware Program Repair for Compilation Errors
Xueyang Li, Shangqing Liu, Ruitao Feng +4
Automatically fixing compilation errors can greatly raise the productivity of software development, by guiding the novice or AI programmers to write and debug code. Recently, learn…
Enhancing Security Patch Identification by Capturing Structures in Commits
Bozhi Wu, Shangqing Liu, Ruitao Feng +3
With the rapid increasing number of open source software (OSS), the majority of the software vulnerabilities in the open source components are fixed silently, which leads to the de…
SeqMobile: A Sequence Based Efficient Android Malware Detection System Using RNN on Mobile Devices
Ruitao Feng, Jing Qiang Lim, Sen Chen +2
With the proliferation of Android malware, the demand for an effective and efficient malware detection system is on the rise. The existing device-end learning based solutions tend…
A Performance-Sensitive Malware Detection System Using Deep Learning on Mobile Devices
Ruitao Feng, Sen Chen, Xiaofei Xie +3
Currently, Android malware detection is mostly performed on server side against the increasing number of malware. Powerful computing resource provides more exhaustive protection fo…
An Orchestrated Empirical Study on Deep Learning Frameworks and Platforms
Qianyu Guo, Xiaofei Xie, Lei Ma +6
Deep learning (DL) has recently achieved tremendous success in a variety of cutting-edge applications, e.g., image recognition, speech and natural language processing, and autonomo…