4 papers
CLIR: Liveness-Driven and Structure-Aware Fuzzing for the Cranelift Compiler
Shangtong Cao, Tianlei Song, Qiuping Yi +4
Modern compilers are complex software systems that must correctly translate high-level programming languages into machine code across multiple architectures. Cranelift, a fast and…
A Dual-Loop Agent Framework for Automated Vulnerability Reproduction
Bin Liu, Yanjie Zhao, Zhenpeng Chen +2
Automated vulnerability reproduction from CVE descriptions requires generating executable Proof-of-Concept (PoC) exploits and validating them in target environments. This process i…
LLM Agents for Automated Web Vulnerability Reproduction: Are We There Yet?
Bin Liu, Yanjie Zhao, Guoai Xu +1
Large language model (LLM) agents have demonstrated remarkable capabilities in software engineering and cybersecurity tasks, including code generation, vulnerability discovery, and…
On the (In)Security of Non-resettable Device Identifiers in Custom Android Systems
Zikan Dong, Liu Wang, Guoai Xu +1
User tracking is critical in the mobile ecosystem, which relies on device identifiers to build clear user profiles. In earlier ages, Android allowed easy access to non-resettable d…