5 papers
The Hitchhiker's Guide to Program Analysis, Part III: Mostly Harmless LLMs
Haonan Li, Tianyang Zhou, Manu Sridharan +2
LLMs are increasingly used in bug analysis to reason about code and judge whether a potential bug can be triggered in realistic execution contexts, with recent work showing promisi…
Verifier-Guided Code Translation via Meta-Step Decoding
Tianyang Zhou, Somesh Jha, Mihai Christodorescu +2
Test-time scaling is an important mechanism for improving large language models, especially on tasks with deterministic verifiers. Code translation is a canonical example: the sour…
Secret Stealing Attacks on Local LLM Fine-Tuning through Supply-Chain Model Code Backdoors
Zi Li, Tian Zhou, Wenze Li +3
Local fine-tuning datasets routinely contain sensitive secrets such as API keys, personal identifiers, and financial records. Although ''local offline fine-tuning'' is often viewed…
SACTOR: LLM-Driven Correct and Idiomatic C to Rust Translation with Static Analysis and FFI-Based Verification
Tianyang Zhou, Ziyi Zhang, Haowen Lin +4
Translating software written in C to Rust has significant benefits in improving memory safety. However, manual translation is cumbersome, error-prone, and often produces unidiomati…
SoK: Understanding (New) Security Issues Across AI4Code Use Cases
Qilong Wu, Taoran Li, Tianyang Zhou +1
AI-for-Code (AI4Code) systems are reshaping software engineering, with tools like GitHub Copilot accelerating code generation, translation, and vulnerability detection. Alongside t…