37 citations · 42 across the 9 of their papers we have counts for
9 papers · 1 filter
Minimizing Breaking Changes and Redundancy in Mitigating Technical Lag for Java Projects
Rui Lu, Lyuye Zhang, Kaixuan Li +2
Re-using open-source software (OSS) can avoid reinventing the wheel, but failing to keep it up-to-date can lead to missing new features and persistent bugs or vulnerabilities that…
Real-World Usability of Vulnerability Proof-of-Concepts: A Comprehensive Study
Wenjing Dang, Kaixuan Li, Sen Chen +3
The Proof-of-Concept (PoC) for a vulnerability is crucial in validating its existence, mitigating false positives, and illustrating the severity of the security threat it poses. Ho…
A Systematic Study on Generating Web Vulnerability Proof-of-Concepts Using Large Language Models
Mengyao Zhao, Kaixuan Li, Lyuye Zhang +4
Recent advances in Large Language Models (LLMs) have brought remarkable progress in code understanding and reasoning, creating new opportunities and raising new concerns for softwa…
VFArchē: A Dual-Mode Framework for Locating Vulnerable Functions in Open-Source Software
Lyuye Zhang, Jian Zhang, Kaixuan Li +6
Software Composition Analysis (SCA) has become pivotal in addressing vulnerabilities inherent in software project dependencies. In particular, reachability analysis is increasingly…
Fixing Outside the Box: Uncovering Tactics for Open-Source Security Issue Management
Lyuye Zhang, Jiahui Wu, Chengwei Liu +5
In the rapidly evolving landscape of software development, addressing security vulnerabilities in open-source software (OSS) has become critically important. However, existing rese…
A Comprehensive Study on Static Application Security Testing (SAST) Tools for Android
Jingyun Zhu, Kaixuan Li, Sen Chen +3
To identify security vulnerabilities in Android applications, numerous static application security testing (SAST) tools have been proposed. However, it poses significant challenges…
Static Application Security Testing (SAST) Tools for Smart Contracts: How Far Are We?
Kaixuan Li, Yue Xue, Sen Chen +6
In recent years, the importance of smart contract security has been heightened by the increasing number of attacks against them. To address this issue, a multitude of static applic…
DeepFWI: Identifying Bug-Sensitive Warnings with Multi-Modal Code-Warning Semantics
Han Liu, Jian Zhang, Cen Zhang +7
Static analysis tools have evolved over time to assist in detecting bugs. However, the excessive false warnings can impede developers' productivity and confidence in the tools. Pre…
ACFIX: Guiding LLMs with Mined Common RBAC Practices for Context-Aware Repair of Access Control Vulnerabilities in Smart Contracts
Lyuye Zhang, Kaixuan Li, Kairan Sun +4
Smart contracts are susceptible to various security issues, among which access control (AC) vulnerabilities are particularly critical. While existing research has proposed multiple…