3 citations · 9 across the 15 of their papers we have counts for
19 papers
AuthScribe: Supporting Agency and Authorship in LLM-Assisted Reflective Journaling
Lanping Hu, Yinsi Zhou, Zhenchang Xing +2
Large language models are increasingly used in reflective journaling, where articulating an experience is part of interpreting it. This raises questions about how writers retain au…
Understanding and Mitigating Cross-Session Attacks via Persistent Artifacts in Agent Skill Composition
Dianshu Liao, Shidong Pan, Guangdong Bai +2
Agent skills extend the capabilities of AI agents by bundling instructions, code, and resources into reusable packages. During skill execution, agents may produce or modify artifac…
An Empirical Study and Assessment of EU AI Act Compliance Checkers
Zhen Tao, Alize Kahraman, Shidong Pan +4
The EU AI Act introduces extensive compliance requirements for organizations that develop, deploy, or integrate AI systems. Many of these requirements are directly relevant to secu…
SkillGuard: A Permission-Centric Framework for Agent Skill Security
Shidong Pan, Xiaoyu Sun, Tianyi Zhang +3
Skills extend LLM agents with reusable instructions, scripts, data, and tool bindings. This shift makes skills a new security principal in agent systems: a skill can alter the agen…
Many a Little Makes a Mickle: A Code-Centric Empirical Study of Data Minimization Principle in Android App Development
Dianshu Liao, Shidong Pan, Zhenchang Xing +1
Modern mobile applications consume large amounts of data to function, raising significant privacy concerns and regulatory challenges. While prior work has primarily focused on dete…
LLMAID: Identifying AI Capabilities in Android Apps with LLMs
Pei Liu, Terry Zhuo, Jiawei Deng +7
Recent advancements in artificial intelligence (AI) and its widespread integration into mobile software applications have received significant attention, highlighting the growing p…
A Longitudinal Measurement of Privacy Policy Evolution for Large Language Models
Zhen Tao, Shidong Pan, Zhenchang Xing +3
Large language model (LLM) services have been rapidly integrated into people's daily lives as chatbots and agentic systems. They are nourished by collecting rich streams of data, r…
When AI Takes the Wheel: Security Analysis of Framework-Constrained Program Generation
Yue Liu, Zhenchang Xing, Shidong Pan +1
In recent years, the AI wave has grown rapidly in software development. Even novice developers can now design and generate complex framework-constrained software systems based on t…
Navigating the Labyrinth: Path-Sensitive Unit Test Generation with Large Language Models
Dianshu Liao, Xin Yin, Shidong Pan +3
Unit testing is essential for software quality assurance, yet writing and maintaining tests remains time-consuming and error-prone. To address this challenge, researchers have prop…
Towards Context-aware Mobile Privacy Notice: Implementation of A Deployable Contextual Privacy Policies Generator
Haochen Gong, Zhen Tao, Shidong Pan +2
Lengthy and legally phrased privacy policies impede users' understanding of how mobile applications collect and process personal data. Prior work proposed Contextual Privacy Polici…
Deployability-Centric Infrastructure-as-Code Generation: Fail, Learn, Refine, and Succeed through LLM-Empowered DevOps Simulation
Tianyi Zhang, Shidong Pan, Zejun Zhang +2
Infrastructure-as-Code (IaC) generation holds significant promise for automating cloud infrastructure provisioning. Recent advances in Large Language Models (LLMs) present a promis…
Privacy Bills of Materials: A Transparent Privacy Information Inventory for Collaborative Privacy Notice Generation in Mobile App Development
Zhen Tao, Shidong Pan, Zhenchang Xing +5
Privacy regulations mandate that developers must provide authentic and comprehensive privacy notices, e.g., privacy policies or labels, to inform users of their apps' privacy pract…
"I Don't Use AI for Everything": Exploring Utility, Attitude, and Responsibility of AI-empowered Tools in Software Development
Shidong Pan, Litian Wang, Tianyi Zhang +4
AI-empowered tools have emerged as a transformative force, fundamentally reshaping the software development industry and promising far-reaching impacts across diverse sectors. This…
Blockchain-Enabled Accountability in Data Supply Chain: A Data Bill of Materials Approach
Yue Liu, Dawen Zhang, Boming Xia +4
In the era of advanced artificial intelligence, highlighted by large-scale generative models like GPT-4, ensuring the traceability, verifiability, and reproducibility of datasets t…
A Solution toward Transparent and Practical AI Regulation: Privacy Nutrition Labels for Open-source Generative AI-based Applications
Meixue Si, Shidong Pan, Dianshu Liao +4
The rapid development and widespread adoption of Generative Artificial Intelligence-based (GAI) applications have greatly enriched our daily lives, benefiting people by enhancing c…
A Comparative Study of Android Performance Issues in Real-world Applications and Literature
Dianshu Liao, Shidong Pan, Siyuan Yang +3
Performance issues in Android applications significantly undermine users' experience, engagement, and retention, which is a long-lasting research topic in academia. Unlike function…
A Large-scale Investigation of Semantically Incompatible APIs behind Compatibility Issues in Android Apps
Shidong Pan, Tianchen Guo, Lihong Zhang +3
Application Programming Interface (API) incompatibility is a long-standing issue in Android application development. The rapid evolution of Android APIs results in a significant nu…
Do Chase Your Tail! Missing Key Aspects Augmentation in Textual Vulnerability Descriptions of Long-tail Software through Feature Inference
Linyi Han, Shidong Pan, Zhenchang Xing +4
Augmenting missing key aspects in Textual Vulnerability Descriptions (TVDs) is crucial for effective vulnerability analysis. For instance, in TVDs, key aspects include Attack Vecto…
{A New Hope}: Contextual Privacy Policies for Mobile Applications and An Approach Toward Automated Generation
Shidong Pan, Zhen Tao, Thong Hoang +7
Privacy policies have emerged as the predominant approach to conveying privacy notices to mobile application users. In an effort to enhance both readability and user engagement, th…