111 citations · 409 across the 43 of their papers we have counts for
10 papers · 1 filter
A Survey of LLM-Driven Penetration Testing: Taxonomy, Co-Evolution, and Open Challenges
Zheyuan He, Jiaxun Dong, Zihao Li +6
Agents4Pentest, an emerging class of LLM-based autonomous penetration testing systems, has become a rapidly growing area in security research. Despite this growth, the field still…
Overeager Coding Agents: Measuring Out-of-Scope Actions on Benign Tasks
Yubin Qu, Ying Zhang, Yanjun Zhang +4
Coding agents now run autonomously with shell, file, and network privileges. When a user issues a benign request, the agent sometimes does more than asked: it deletes unrelated fil…
CognixShield: PoV-Guided Vulnerable API Usage Detection in Large Codebases via LLMs
Quanzhi Fu, Wang Lingxiang, Wenjia Song +4
The integration of open-source libraries in Java development introduces severe security risks through vulnerable APIs. Existing program analysis and deep learning tools face the ch…
SPOLRE: Semantic Preserving Object Layout Reconstruction for Image Captioning System Testing
Yi Liu, Guanyu Wang, Xinyi Zheng +4
Image captioning (IC) systems, such as Microsoft Azure Cognitive Service, translate image content into descriptive language but can generate inaccuracies leading to misinterpretati…
Source Code Summarization in the Era of Large Language Models
Weisong Sun, Yun Miao, Yuekang Li +6
To support software developers in understanding and maintaining programs, various automatic (source) code summarization techniques have been proposed to generate a concise natural…
MeTMaP: Metamorphic Testing for Detecting False Vector Matching Problems in LLM Augmented Generation
Guanyu Wang, Yuekang Li, Yi Liu +6
Augmented generation techniques such as Retrieval-Augmented Generation (RAG) and Cache-Augmented Generation (CAG) have revolutionized the field by enhancing large language model (L…
PentestGPT: An LLM-empowered Automatic Penetration Testing Tool
Gelei Deng, Yi Liu, Víctor Mayoral-Vilches +7
Penetration testing, a crucial industrial practice for ensuring system security, has traditionally resisted automation due to the extensive expertise required by human professional…
Automatic Code Summarization via ChatGPT: How Far Are We?
Weisong Sun, Chunrong Fang, Yudu You +10
To support software developers in understanding and maintaining programs, various automatic code summarization techniques have been proposed to generate a concise natural language…
Jailbreaking ChatGPT via Prompt Engineering: An Empirical Study
Yi Liu, Gelei Deng, Zhengzi Xu +7
Large Language Models (LLMs), like ChatGPT, have demonstrated vast potential but also introduce challenges related to content constraints and potential misuse. Our study investigat…
Morest: Model-based RESTful API Testing with Execution Feedback
Yi Liu, Yuekang Li, Gelei Deng +6
RESTful APIs are arguably the most popular endpoints for accessing Web services. Blackbox testing is one of the emerging techniques for ensuring the reliability of RESTful APIs. Th…