activity
20242026
most citedAn Analysis of Malicious Packages in Open-Source Software in the Wild

2 citations · 2 across the 8 of their papers we have counts for

collaborators
Showing 2024Show all

5 papers · 1 filter

cs.CR2024

Tactics, Techniques, and Procedures (TTPs) in Interpreted Malware: A Zero-Shot Generation with Large Language Models

Ying Zhang, Xiaoyan Zhou, Hui Wen +4

Nowadays, the open-source software (OSS) ecosystem suffers from security threats of software supply chain (SSC) attacks. Interpreted OSS malware plays a vital role in SSC attacks,…

cs.CR2024

AutoFirm: Automatically Identifying Reused Libraries inside IoT Firmware at Large-Scale

YongLe Chen, Feng Ma, Ying Zhang +3

The Internet of Things (IoT) has become indispensable to our daily lives and work. Unfortunately, developers often reuse software libraries in the IoT firmware, leading to a major…

cs.CR2024

Obfuscating IoT Device Scanning Activity via Adversarial Example Generation

Haocong Li, Yaxin Zhang, Long Cheng +3

Nowadays, attackers target Internet of Things (IoT) devices for security exploitation, and search engines for devices and services compromise user privacy, including IP addresses,…

cs.SE2024

A Large-scale Fine-grained Analysis of Packages in Open-Source Software Ecosystems

Xiaoyan Zhou, Feiran Liang, Zhaojie Xie +5

Package managers such as NPM, Maven, and PyPI play a pivotal role in open-source software (OSS) ecosystems, streamlining the distribution and management of various freely available…

cs.CR2024★ 2 cited

An Analysis of Malicious Packages in Open-Source Software in the Wild

Xiaoyan Zhou, Ying Zhang, Wenjia Niu +3

The open-source software (OSS) ecosystem suffers from security threats caused by malware.However, OSS malware research has three limitations: a lack of high-quality datasets, a lac…