14 citations · 21 across the 7 of their papers we have counts for
7 papers
Your Fix Is My Exploit: Enabling Comprehensive DL Library API Fuzzing with Large Language Models
Kunpeng Zhang, Shuai Wang, Jitao Han +4
Deep learning (DL) libraries, widely used in AI applications, often contain vulnerabilities like buffer overflows and use-after-free errors. Traditional fuzzing struggles with the…
SHAPFUZZ: Efficient Fuzzing via Shapley-Guided Byte Selection
Kunpeng Zhang, Xiaogang Zhu, Xi Xiao +3
Mutation-based fuzzing is popular and effective in discovering unseen code and exposing bugs. However, only a few studies have concentrated on quantifying the importance of input b…
The "code'' of Ethics:A Holistic Audit of AI Code Generators
Wanlun Ma, Yiliao Song, Minhui Xue +2
AI-powered programming language generation (PLG) models have gained increasing attention due to their ability to generate source code of programs in a few seconds with a plain prog…
StyleFool: Fooling Video Classification Systems via Style Transfer
Yuxin Cao, Xi Xiao, Ruoxi Sun +3
Video classification systems are vulnerable to adversarial attacks, which can create severe security problems in video verification. Current black-box attacks need a large number o…
Characterizing Sensor Leaks in Android Apps
Xiaoyu Sun, Xiao Chen, Kui Liu +3
While extremely valuable to achieve advanced functions, mobile phone sensors can be abused by attackers to implement malicious activities in Android apps, as experimentally demonst…
Path Transitions Tell More:Optimizing Fuzzing Schedules via Runtime Program States
Kunpeng Zhang, Xi Xiao, Xiaogang Zhu +3
Coverage-guided Greybox Fuzzing (CGF) is one of the most successful and widely-used techniques for bug hunting. Two major approaches are adopted to optimize CGF: (i) to reduce sear…
NatiDroid: Cross-Language Android Permission Specification
Chaoran Li, Xiao Chen, Ruoxi Sun +5
The Android system manages access to sensitive APIs by permission enforcement. An application (app) must declare proper permissions before invoking specific Android APIs. However,…