4 papers
When Context Gets Root: Privilege Escalation in LLM Harnesses
Xingbang He, Yuanwei Chen, Yi Qian +6
Instruction hierarchy is a model-side defense that assigns instructions different levels of privilege according to their sources. These levels constrain which content may direct mo…
FeatureFuzz: Treating Bug-prone Features as Core Primitives for Compiler Fuzzing
Xingbang He, Yuanwei Chen, Hao Wu +9
CI/CD pipelines often execute build and test tasks with high privileges, making the compilation stage security-sensitive. In this setting, malicious pull requests may exploit caref…
Mind the Gap: Action Rebinding Attacks against Android GUI Agents
Yi Qian, Kunwei Qian, Xingbang He +7
Large multimodal model powered GUI agents are emerging as high-privilege operators on mobile platforms, entrusted to perceive screen content and inject inputs across application bo…
Unleashing the Power of LLM to Infer State Machine from the Protocol Implementation
Haiyang Wei, Ligeng Chen, Zhengjie Du +7
State machines are essential for enhancing protocol analysis to identify vulnerabilities. However, inferring state machines from network protocol implementations is challenging due…