110 citations · 123 across the 9 of their papers we have counts for
9 papers
Well Begun is Half Done: Location-Aware and Trace-Guided Iterative Automated Vulnerability Repair
Zhenlei Ye, Xiaobing Sun, Sicong Cao +2
The advances of large language models (LLMs) have paved the way for automated software vulnerability repair approaches, which iteratively refine the patch until it becomes plausibl…
Federated Unlearning in the Wild: Rethinking Fairness and Data Discrepancy
ZiHeng Huang, Di Wu, Jun Bai +4
Machine unlearning is critical for enforcing data deletion rights like the "right to be forgotten." As a decentralized paradigm, Federated Learning (FL) also requires unlearning, b…
MalGuard: Towards Real-Time, Accurate, and Actionable Detection of Malicious Packages in PyPI Ecosystem
Xingan Gao, Xiaobing Sun, Sicong Cao +5
Malicious package detection has become a critical task in ensuring the security and stability of the PyPI. Existing detection approaches have focused on advancing model selection,…
Large Language Model for Vulnerability Detection and Repair: Literature Review and the Road Ahead
Xin Zhou, Sicong Cao, Xiaobing Sun +1
The significant advancements in Large Language Models (LLMs) have resulted in their widespread adoption across various tasks within Software Engineering (SE), including vulnerabili…
Coca: Improving and Explaining Graph Neural Network-Based Vulnerability Detection Systems
Sicong Cao, Xiaobing Sun, Xiaoxue Wu +4
Recently, Graph Neural Network (GNN)-based vulnerability detection systems have achieved remarkable success. However, the lack of explainability poses a critical challenge to deplo…
A Systematic Literature Review on Explainability for Machine/Deep Learning-based Software Engineering Research
Sicong Cao, Xiaobing Sun, Ratnadira Widyasari +8
The remarkable achievements of Artificial Intelligence (AI) algorithms, particularly in Machine Learning (ML) and Deep Learning (DL), have fueled their extensive deployment across…
ODDFUZZ: Discovering Java Deserialization Vulnerabilities via Structure-Aware Directed Greybox Fuzzing
Sicong Cao, Biao He, Xiaobing Sun +9
Java deserialization vulnerability is a severe threat in practice. Researchers have proposed static analysis solutions to locate candidate vulnerabilities and fuzzing solutions to…
Improving Java Deserialization Gadget Chain Mining via Overriding-Guided Object Generation
Sicong Cao, Xiaobing Sun, Xiaoxue Wu +7
Java (de)serialization is prone to causing security-critical vulnerabilities that attackers can invoke existing methods (gadgets) on the application's classpath to construct a gadg…
MVD: Memory-Related Vulnerability Detection Based on Flow-Sensitive Graph Neural Networks
Sicong Cao, Xiaobing Sun, Lili Bo +3
Memory-related vulnerabilities constitute severe threats to the security of modern software. Despite the success of deep learning-based approaches to generic vulnerability detectio…