9 citations · 12 across the 11 of their papers we have counts for
11 papers
VIGIL: Runtime Enforcement of Behavioral Specifications in AI Agent Skills
Ying Li, Yanju Chen, Hongbo Wen +5
Agentic systems increasingly act through third-party skills, allowing model-generated decisions to affect files, communication channels, and cyber-physical devices. These skills of…
Hunting Vulnerability Variants in AI Infra: Measurement and Reference-Driven Detection
Tian Dong, Yanjun Chen, Shoufeng Zhang +6
AI infra has become a shared execution layer for model training, deployment, and agent orchestration. Because many projects reimplement similar model-centric workflows, a vulnerabi…
No Attack Required: Semantic Fuzzing for Specification Violations in Agent Skills
Ying Li, Hongbo Wen, Yanju Chen +3
LLM-powered agents can silently delete documents, leak credentials, or transfer funds on a routine user request, not because the agent was attacked, but because the skill it invoke…
Options, Not Clicks: Lattice Refinement for Consent-Driven MCP Authorization
Ying Li, Yanju Chen, Peiran Wang +4
As Model Context Protocol adoption grows, securing tool invocations via meaningful user consent has become a critical challenge, as existing methods, broad always allow toggles or…
Semia: Auditing Agent Skills via Constraint-Guided Representation Synthesis
Hongbo Wen, Ying Li, Hanzhi Liu +4
An agent skill is a configuration package that equips an LLM-driven agent with a concrete capability, such as reading email, executing shell commands, or signing blockchain transac…
Synthesizing Multi-Agent Harnesses for Vulnerability Discovery
Hanzhi Liu, Chaofan Shou, Xiaonan Liu +4
LLM agents have begun to find real security vulnerabilities that human auditors and automated fuzzers missed for decades, in source-available targets where the analyst can build an…
Your Agent Is Mine: Measuring Malicious Intermediary Attacks on the LLM Supply Chain
Hanzhi Liu, Chaofan Shou, Hongbo Wen +3
Large language model (LLM) agents increasingly rely on third-party API routers to dispatch tool-calling requests across multiple upstream providers. These routers operate as applic…
Automated Repair of OpenID Connect Programs (Extended Version)
Tamjid Al Rahat, Yanju Chen, Yu Feng +1
OpenID Connect has revolutionized online authentication based on single sign-on (SSO) by providing a secure and convenient method for accessing multiple services with a single set…
FORAY: Towards Effective Attack Synthesis against Deep Logical Vulnerabilities in DeFi Protocols
Hongbo Wen, Hanzhi Liu, Jiaxin Song +3
Blockchain adoption has surged with the rise of Decentralized Finance (DeFi) applications. However, the significant value of digital assets managed by DeFi protocols makes them pri…
Automated Transpilation of Imperative to Functional Code using Neural-Guided Program Synthesis (Extended Version)
Benjamin Mariano, Yanju Chen, Yu Feng +2
While many mainstream languages such as Java, Python, and C# increasingly incorporate functional APIs to simplify programming and improve parallelization/performance, there are no…
SAILFISH: Vetting Smart Contract State-Inconsistency Bugs in Seconds
Priyanka Bose, Dipanjan Das, Yanju Chen +3
This paper presents SAILFISH, a scalable system for automatically finding state-inconsistency bugs in smart contracts. To make the analysis tractable, we introduce a hybrid approac…