7 papers
When Context Gets Root: Privilege Escalation in LLM Harnesses
Xingbang He, Yuanwei Chen, Yi Qian +6
Instruction hierarchy is a model-side defense that assigns instructions different levels of privilege according to their sources. These levels constrain which content may direct mo…
FeatureFuzz: Treating Bug-prone Features as Core Primitives for Compiler Fuzzing
Xingbang He, Yuanwei Chen, Hao Wu +9
CI/CD pipelines often execute build and test tasks with high privileges, making the compilation stage security-sensitive. In this setting, malicious pull requests may exploit caref…
Mind the Gap: Action Rebinding Attacks against Android GUI Agents
Yi Qian, Kunwei Qian, Xingbang He +7
Large multimodal model powered GUI agents are emerging as high-privilege operators on mobile platforms, entrusted to perceive screen content and inject inputs across application bo…
Unleashing the Power of LLM to Infer State Machine from the Protocol Implementation
Haiyang Wei, Ligeng Chen, Zhengjie Du +7
State machines are essential for enhancing protocol analysis to identify vulnerabilities. However, inferring state machines from network protocol implementations is challenging due…
Nimbus: Toward Speed Up Function Signature Recovery via Input Resizing and Multi-Task Learning
Yi Qian, Ligeng Chen, Yuyang Wang +1
Function signature recovery is important for many binary analysis tasks such as control-flow integrity enforcement, clone detection, and bug finding. Existing works try to substitu…
AVMiner: Expansible and Semantic-Preserving Anti-Virus Labels Mining Method
Ligeng Chen, Zhongling He, Hao Wu +2
With the increase in the variety and quantity of malware, there is an urgent need to speed up the diagnosis and the analysis of malware. Extracting the malware family-related token…
RoBin: Facilitating the Reproduction of Configuration-Related Vulnerability
Ligeng Chen, Jian Guo, Zhongling He +2
Vulnerability reproduction paves a way in debugging software failures, which need intensive manual efforts. However, some key factors (e.g., software configuration, trigger method)…