6 citations · 9 across the 9 of their papers we have counts for
7 papers · 1 filter
Lares: LLM-driven Code Slice Semantic Search for Patch Presence Testing
Siyuan Li, Yaowen Zheng, Hong Li +7
In modern software ecosystems, 1-day vulnerabilities pose significant security risks due to extensive code reuse. Identifying vulnerable functions in target binaries alone is insuf…
Towards Reliable LLM-Driven Fuzz Testing: Vision and Road Ahead
Yiran Cheng, Hong Jin Kang, Lwin Khin Shar +4
Fuzz testing is a crucial component of software security assessment, yet its effectiveness heavily relies on valid fuzz drivers and diverse seed inputs. Recent advancements in Larg…
TransferFuzz: Fuzzing with Historical Trace for Verifying Propagated Vulnerability Code
Siyuan Li, Yuekang Li, Zuxin Chen +5
Code reuse in software development frequently facilitates the spread of vulnerabilities, making the scope of affected software in CVE reports imprecise. Traditional methods primari…
BinEnhance: An Enhancement Framework Based on External Environment Semantics for Binary Code Search
Yongpan Wang, Hong Li, Xiaojie Zhu +4
Binary code search plays a crucial role in applications like software reuse detection. Currently, existing models are typically based on either internal code semantics or a combina…
VERCATION: Precise Vulnerable Open-source Software Version Identification based on Static Analysis and LLM
Yiran Cheng, Ting Zhang, Lwin Khin Shar +6
Open-source software (OSS) has experienced a surge in popularity, attributed to its collaborative development model and cost-effective nature. However, the adoption of specific sof…
LibAM: An Area Matching Framework for Detecting Third-party Libraries in Binaries
Siyuan Li, Yongpan Wang, Chaopeng Dong +8
Third-party libraries (TPLs) are extensively utilized by developers to expedite the software development process and incorporate external functionalities. Nevertheless, insecure TP…
Asteria-Pro: Enhancing Deep-Learning Based Binary Code Similarity Detection by Incorporating Domain Knowledge
Shouguo Yang, Chaopeng Dong, Yang Xiao +4
The widespread code reuse allows vulnerabilities to proliferate among a vast variety of firmware. There is an urgent need to detect these vulnerable code effectively and efficientl…