1 citations · 1 across the 15 of their papers we have counts for
18 papers
Answer Is Cheap, Show Me the Evidence! Augmenting Automated Vulnerability Assessment with Evidence
Shengyi Pan, Zelong Zheng, Jiayuan Zhou +3
Software vulnerability (SV) assessment helps prioritize remediation by characterizing reported vulnerabilities. Existing automated methods predict assessment results from SV report…
SmellCC: A Tool for Automated Code Smells Remediation
Xiaoting Zhang, Yujie Zhang, Zhipeng Gao +2
Code smells significantly threaten software maintainability by accumulating technical debt, yet developers often lack the resources to manually address these flaws under tight rele…
Automating Just-In-Time Python Type Annotation Updating
Zhipeng Xue, Zhipeng Gao, Xing Hu +3
Type annotations are more and more popular in Python projects to avoid type errors caused by Python's dynamic typing feature. However, when developers change source code, these typ…
Refploit: Facilitating Exploit Construction via Code-Agent Trajectory Repair
Zirui Chen, Zhipeng Xue, Jiayuan Zhou +3
Vulnerability exploits play a crucial role in assessing the downstream impact of Java library vulnerabilities. While some vulnerabilities are accompanied by disclosed exploit refer…
ATTAIN: Automated Exploit Failure Analysis through Trace-Driven Diff Analysis
Xinwei Mao, Zirui Chen, Xing Hu +1
Exploits are widely used to check whether library vulnerabilities appear in different versions and to mark affected version ranges. Exploit-based checks sometimes fail because expl…
On the Shoulders of Giants: Empowering Automated Smart Contract Auditing via the GiAnt Corpus
Xiaoting Zhang, Zhipeng Gao, Yiran Lv +3
High-quality smart contract auditing datasets are crucial for evaluating security tools and advancing smart contract security research. Two major limitations of existing datasets a…
Triggering and Detecting Exploitable Library Vulnerability from the Client by Directed Greybox Fuzzing
Yukai Zhao, Menghan Wu, Xing Hu +3
Developers utilize third-party libraries to improve productivity, which also introduces potential security risks. Existing approaches generate tests for public functions to trigger…
An Empirical Study of Speculative Decoding on Software Engineering Tasks
Yijia Li, Junkai Chen, Xing Hu +1
Large Language Models (LLMs) have become widely used for Software Engineering (SE) tasks, spanning from function-level code generation to complex repository-level workflows. Howeve…
Verify Implementation Equivalence of Large Models
Qi Zhan, Xing Hu, Xin Xia +1
Verifying whether two implementations of the same large model are equivalent across frameworks is difficult in practice. Even when they realize the same computation, their graphs m…
Actionable Warning Is Not Enough: Recommending Valid Actionable Warnings with Weak Supervision
Zhipeng Xue, Zhipeng Gao, Tongtong Xu +3
The use of static analysis tools has gained increasing popularity among developers in the last few years. However, the widespread adoption of static analysis tools is hindered by t…
Diffploit: Facilitating Cross-Version Exploit Migration for Open Source Library Vulnerabilities
Zirui Chen, Zhipeng Xue, Jiayuan Zhou +3
Exploits are commonly used to demonstrate the presence of library vulnerabilities and validate their impact across different versions. However, their direct application to alternat…
Clean Code, Better Models: Enhancing LLM Performance with Smell-Cleaned Dataset
Zhipeng Xue, Xiaoting Zhang, Zhipeng Gao +4
The Large Language Models (LLMs) have demonstrated great potential in code-related tasks. However, most research focuses on improving the output quality of LLMs (e.g., correctness)…
Verified Lifting of Deep learning Operators
Qi Zhan, Xing Hu, Xin Xia +1
Deep learning operators are fundamental components of modern deep learning frameworks. With the growing demand for customized operators, it has become increasingly common for devel…
SelfPiCo: Self-Guided Partial Code Execution with LLMs
Zhipeng Xue, Zhipeng Gao, Shaohua Wang +3
Code executability plays a vital role in software debugging and testing (e.g., detecting runtime exceptions or assertion violations). However, code execution, especially partial or…
Easy over Hard: A Simple Baseline for Test Failures Causes Prediction
Zhipeng Gao, Zhipeng Xue, Xing Hu +2
The test failure causes analysis is critical since it determines the subsequent way of handling different types of bugs, which is the prerequisite to get the bugs properly analyzed…
Automating Zero-Shot Patch Porting for Hard Forks
Shengyi Pan, You Wang, Zhongxin Liu +3
Forking is a typical way of code reuse, which provides a simple way for developers to create a variant software (denoted as hard fork) by copying and modifying an existing codebase…
PS: Precise Patch Presence Test based on Semantic Symbolic Signature
Qi Zhan, Xing Hu, Zhiyang Li +3
During software development, vulnerabilities have posed a significant threat to users. Patches are the most effective way to combat vulnerabilities. In a large-scale software syste…
ACWRecommender: A Tool for Validating Actionable Warnings with Weak Supervision
Zhipeng Xue, Zhipeng Gao, Xing Hu +1
Static analysis tools have gained popularity among developers for finding potential bugs, but their widespread adoption is hindered by the accomnpanying high false alarm rates (up…