5 papers
Memoir: Learning, Verifying, and Evolving False-Positive Memories for Static Application Security Testing Tools
Shenyuan Guan, Qiaodan Hou, Yanjun Chen +4
Static Application Security Testing (SAST) tools have become indispensable in modern secure software devel- opment. However, these tools often generate false-positive (FP) alerts,…
VulnGym: Benchmarking Coding Agents for Repository-Level Vulnerability Detection
Kexing Ji, Jiachen Liu, Enze Hu +7
Recent advances in LLM-based vulnerability detection have shown promising results, while coding agents further extend this capability from isolated code snippets to complete reposi…
Hunting Vulnerability Variants in AI Infra: Measurement and Reference-Driven Detection
Tian Dong, Yanjun Chen, Shoufeng Zhang +6
AI infra has become a shared execution layer for model training, deployment, and agent orchestration. Because many projects reimplement similar model-centric workflows, a vulnerabi…
AI Code in the Wild: Measuring Security Risks and Ecosystem Shifts of AI-Generated Code in Modern Software
Bin Wang, Wenjie Yu, Yilu Zhong +6
Large language models (LLMs) for code generation are becoming integral to modern software development, but their real-world prevalence and security impact remain poorly understood.…
A.S.E: A Repository-Level Benchmark for Evaluating Security in AI-Generated Code
Keke Lian, Bin Wang, Lei Zhang +19
The increasing adoption of large language models (LLMs) in software engineering necessitates rigorous security evaluation of their generated code. However, existing benchmarks ofte…