activity
20212026
most citedTBDetector:Transformer-Based Detector for Advanced Persistent Threats with Provenance Graph

5 citations · 10 across the 11 of their papers we have counts for

collaborators

11 papers

cs.CL2026

Tencent WorkBuddy Bench: A Multi-Domain Coding-Agent Benchmark with Contamination-Resistant Task Construction

Tencent WorkBuddy Bench Team, Siqi Cai, Shaopeng Chen +35

We introduce Tencent WorkBuddy Bench, a multi-domain evaluation suite for coding agents; this report documents its construction methodology, scoring protocol, and a cross-model lea…

cs.CR2026

SherAgent: Scaling Attack Investigation in the Wild via LLM-Empowered Iterative Query-Filter Backtracking

Zhenyuan Li, Zhengkai Wang, Ling Jiang +5

Provenance-based attack investigation enables viable automation by standardizing data and query logic; however, it is critically hindered in practice by dependency explosions and f…

cs.CR2026

How Far Should We Need to Go : Evaluate Provenance-based Intrusion Detection Systems in Industrial Scenarios

Yue Xiao, Ling Jiang, Sen Nie +4

Provenance-based Intrusion Detection Systems (PIDSes) have been widely used to detect Advanced Persistent Threats (APTs). Although many studies achieve high performance in the eval…

cs.CR2025

KEENHash: Hashing Programs into Function-Aware Embeddings for Large-Scale Binary Code Similarity Analysis

Zhijie Liu, Qiyi Tang, Sen Nie +3

Binary code similarity analysis (BCSA) is a crucial research area in many fields such as cybersecurity. Specifically, function-level diffing tools are the most widely used in BCSA:…

cs.SE2024

Preserving Privacy in Software Composition Analysis: A Study of Technical Solutions and Enhancements

Huaijin Wang, Zhibo Liu, Yanbo Dai +4

Software composition analysis (SCA) denotes the process of identifying open-source software components in an input software application. SCA has been extensively developed and adop…

cs.SE2024★ 2 cited

BinaryAI: Binary Software Composition Analysis via Intelligent Binary Source Code Matching

Ling Jiang, Junwen An, Huihui Huang +4

While third-party libraries are extensively reused to enhance productivity during software development, they can also introduce potential security risks such as vulnerability propa…

cs.SE2023★ 2 cited

Refining Decompiled C Code with Large Language Models

Wai Kin Wong, Huaijin Wang, Zongjie Li +5

A C decompiler converts an executable into source code. The recovered C source code, once re-compiled, is expected to produce an executable with the same functionality as the origi…

cs.CR2023★ 5 cited

TBDetector:Transformer-Based Detector for Advanced Persistent Threats with Provenance Graph

Nan Wang, Xuezhi Wen, Dalin Zhang +7

APT detection is difficult to detect due to the long-term latency, covert and slow multistage attack patterns of Advanced Persistent Threat (APT). To tackle these issues, we propos…

cs.SE2022★ 1 cited

Comparing One with Many -- Solving Binary2source Function Matching Under Function Inlining

Ang Jia, Ming Fan, Xi Xu +6

Binary2source function matching is a fundamental task for many security applications, including Software Component Analysis (SCA). The "1-to-1" mechanism has been applied in existi…

cs.SE2022

Unleashing the Power of Compiler Intermediate Representation to Enhance Neural Program Embeddings

Zongjie Li, Pingchuan Ma, Huaijin Wang +4

Neural program embeddings have demonstrated considerable promise in a range of program analysis tasks, including clone identification, program repair, code completion, and program…

cs.SE2021

1-to-1 or 1-to-n? Investigating the effect of function inlining on binary similarity analysis

Ang Jia, Ming Fan, Wuxia Jin +6

Binary similarity analysis is critical to many code-reuse-related issues and "1-to-1" mechanism is widely applied, where one function in a binary file is matched against one functi…