1 citations · 1 across the 4 of their papers we have counts for
5 papers
PatchHolmes: Agentic Patch Retrieval via Listwise Selection
Guanqun Yang, Yingming Zhou, Jiangrui Zheng +2
Patch retrieval, the task of finding the commit that fixes a known vulnerability, is the foundation of vulnerability management workflows, yet 60% to 63% of CVEs in the major advis…
From Reviewers' Lens: Understanding Bug Bounty Report Invalid Reasons with LLMs
Jiangrui Zheng, Yingming Zhou, Ali Abdullah Ahmad +2
Bug bounty platforms (e.g., HackerOne, BugCrowd) leverage crowd-sourced vulnerability discovery to improve continuous coverage, reduce the cost of discovery, and serve as an integr…
SPFinder: Improving the Context Length and Scalability for Tracing Known Vulnerability Patches
Jiangrui Zheng, Xueqing Liu, Guanqun Yang +3
An upstream task for vulnerability management is the accurate localization of the patch that fixes a vulnerability. Existing works have proposed several approaches to trace or retr…
An Exploratory Study on Build Issue Resolution Among Computer Science Students
Sunzhou Huang, Na Meng, Xueqing Liu +1
When Computer Science (CS) students try to use or extend open-source software (OSS) projects, they often encounter the common challenge of OSS failing to build on their local machi…
Can Highlighting Help GitHub Maintainers Track Security Fixes?
Xueqing Liu, Yuchen Xiong, Qiushi Liu +1
In recent years, the rapid growth of security vulnerabilities poses great challenges to tracing and managing them. For example, it was reported that the NVD database experienced si…