6 papers
Refploit: Facilitating Exploit Construction via Code-Agent Trajectory Repair
Zirui Chen, Zhipeng Xue, Jiayuan Zhou +3
Vulnerability exploits play a crucial role in assessing the downstream impact of Java library vulnerabilities. While some vulnerabilities are accompanied by disclosed exploit refer…
ATTAIN: Automated Exploit Failure Analysis through Trace-Driven Diff Analysis
Xinwei Mao, Zirui Chen, Xing Hu +1
Exploits are widely used to check whether library vulnerabilities appear in different versions and to mark affected version ranges. Exploit-based checks sometimes fail because expl…
Assessing the Cross-Version Applicability of Java Library Vulnerability Exploits
Zirui Chen, Qi Zhan, Jiayuan Zhou +3
Open-source software supply chain security relies heavily on assessing affected versions of library vulnerabilities. While prior studies have leveraged exploits for verifying vulne…
Diffploit: Facilitating Cross-Version Exploit Migration for Open Source Library Vulnerabilities
Zirui Chen, Zhipeng Xue, Jiayuan Zhou +3
Exploits are commonly used to demonstrate the presence of library vulnerabilities and validate their impact across different versions. However, their direct application to alternat…
Generating Mitigations for Downstream Projects to Neutralize Upstream Library Vulnerability
Zirui Chen, Xing Hu, Puhua Sun +2
Third-party libraries are essential in software development as they prevent the need for developers to recreate existing functionalities. However, vulnerabilities within these libr…
Vulnerability-Triggering Test Case Generation from Third-Party Libraries
Yi Gao, Xing Hu, Zirui Chen +1
Open-source third-party libraries are widely used in software development. These libraries offer substantial advantages in terms of time and resource savings. However, a significan…