110 citations · 120 across the 6 of their papers we have counts for
4 papers · 1 filter
Coca: Improving and Explaining Graph Neural Network-Based Vulnerability Detection Systems
Sicong Cao, Xiaobing Sun, Xiaoxue Wu +4
Recently, Graph Neural Network (GNN)-based vulnerability detection systems have achieved remarkable success. However, the lack of explainability poses a critical challenge to deplo…
ODDFUZZ: Discovering Java Deserialization Vulnerabilities via Structure-Aware Directed Greybox Fuzzing
Sicong Cao, Biao He, Xiaobing Sun +9
Java deserialization vulnerability is a severe threat in practice. Researchers have proposed static analysis solutions to locate candidate vulnerabilities and fuzzing solutions to…
Improving Java Deserialization Gadget Chain Mining via Overriding-Guided Object Generation
Sicong Cao, Xiaobing Sun, Xiaoxue Wu +7
Java (de)serialization is prone to causing security-critical vulnerabilities that attackers can invoke existing methods (gadgets) on the application's classpath to construct a gadg…
MVD: Memory-Related Vulnerability Detection Based on Flow-Sensitive Graph Neural Networks
Sicong Cao, Xiaobing Sun, Lili Bo +3
Memory-related vulnerabilities constitute severe threats to the security of modern software. Despite the success of deep learning-based approaches to generic vulnerability detectio…