activity
20222026
most citedBugsInPy: A Database of Existing Bugs in Python Programs to Enable Controlled Testing and Debugging Studies

135 citations · 153 across the 17 of their papers we have counts for

collaborators
Showing cs.CRShow all

6 papers · 1 filter

cs.CR2026

VulContextBench: A Benchmark for Security Context Retrieval in Coding Agents

Yikun Li, Jinfeng Jiang, Yuheng Yieh +6

Vulnerability-detection benchmarks score the verdict an agent reaches, not the evidence it gathered. A model that recalls a CVE from pretraining therefore scores the same as one th…

cs.CR2026

CoSA: Context-Aware Severity Assessment via Context Analysis with Large Language Models

Jinfeng Jiang, Yikun Li, Chengran Yang +6

Accurate vulnerability severity assessment is essential for prioritizing remediation, yet manually assessing Common Vulnerability Scoring System (CVSS) base metrics remains labor-i…

cs.CR2026

Graph Is the Verifier: Agentic Reinforcement Learning for Interprocedural Vulnerability Detection

Yikun Li, Ting Zhang, Jiakun Liu +9

Real-world vulnerabilities often span multiple functions, yet most learning-based detectors classify each function in isolation: on a sample of real CVEs, we find that 71.7% of vul…

cs.CR2026

TitanCA: Lessons from Orchestrating LLM Agents to Discover 100+ CVEs

Ting Zhang, Yikun Li, Chengran Yang +15

Software vulnerabilities remain one of the most persistent threats to modern digital infrastructure. While static application security testing (SAST) tools have long served as the…

cs.CR2026★ 1 cited

Beyond Function-Level Analysis: Context-Aware Reasoning for Inter-Procedural Vulnerability Detection

Yikun Li, Ting Zhang, Jieke Shi +10

Recent progress in ML and LLMs has improved vulnerability detection, and recent datasets have reduced label noise and unrelated code changes. However, most existing approaches stil…

cs.CR2025

Out of Distribution, Out of Luck: How Well Can LLMs Trained on Vulnerability Datasets Detect Top 25 CWE Weaknesses?

Yikun Li, Ngoc Tan Bui, Ting Zhang +16

Automated vulnerability detection research has made substantial progress, yet its real-world impact remains limited. Prior work found that current vulnerability datasets suffer fro…