5 papers
Towards Secure Agent Skills: Architecture, Threat Taxonomy, and Security Analysis
Zhiyuan Li, Jingzheng Wu, Xiang Ling +2
Agent Skills is an emerging open standard that defines a modular, filesystem-based packaging format enabling LLM-based agents to acquire domain-specific expertise on demand. Despit…
SimFuzz: Similarity-guided Block-level Mutation for RISC-V Processor Fuzzing
Hao Lyu, Jingzheng Wu, Xiang Ling +3
The Instruction Set Architecture (ISA) defines processor operations and serves as the interface between hardware and software. As an open ISA, RISC-V lowers the barriers to process…
A Large Scale Empirical Analysis on the Adherence Gap between Standards and Tools in SBOM
Chengjie Wang, Jingzheng Wu, Hao Lyu +4
A Software Bill of Materials (SBOM) is a machine-readable artifact that systematically organizes software information, enhancing supply chain transparency and security. To facilita…
Version-level Third-Party Library Detection in Android Applications via Class Structural Similarity
Bolin Zhou, Jingzheng Wu, Xiang Ling +2
Android applications (apps) integrate reusable and well-tested third-party libraries (TPLs) to enhance functionality and shorten development cycles. However, recent research reveal…
The Seeds of the FUTURE Sprout from History: Fuzzing for Unveiling Vulnerabilities in Prospective Deep-Learning Libraries
Zhiyuan Li, Jingzheng Wu, Xiang Ling +3
The widespread application of large language models (LLMs) underscores the importance of deep learning (DL) technologies that rely on foundational DL libraries such as PyTorch and…