6 papers
No, Your Tools Are Not Enough: It's Time to Bring Agents to the Hunt
Ati Priya Bajaj, Xiang Mei, Tiffany Bao +3
Modern software systems are large and complex, demanding scalable and autonomous techniques for vulnerability discovery. Existing approaches still depend on human expertise for dom…
HoldSpec: A Machine-Checked Model and Conformance Suite for the Payment Authorization Hold Lifecycle
Abhishek Sharma
When a merchant authorizes a card and captures the funds later, the money sits in a state that neither party fully controls: held on the cardholder's account, not yet taken, and du…
Root-Cause-Driven Automated Vulnerability Repair
Hulin Wang, Zion Leonahenahe Basque, Jie Hu +13
Recent LLM-based systems have made automated vulnerability repair increasingly practical, but two challenges remain. First, without strong signals about where a bug originates, rep…
SCRIBE: Practical Static Binary Patching via Binary-Aware Recompilation of Decompiled Code
Han Dai, Soumyakant Priyadarshan, Abdullah Imran +2
When source code or the original toolchain is unavailable, patching binaries is difficult because it requires editing low-level assembly code directly. As an alternative, one can d…
BuildBench: Benchmarking LLM Agents on Compiling Real-World Open-Source Software
Zehua Zhang, Ati Priya Bajaj, Divij Handa +14
Automatically compiling open-source software (OSS) projects is a vital, labor-intensive, and complex task, which makes it a good challenge for LLM Agents. Existing methods rely on…
D-LiFT: Improving LLM-based Decompiler Backend via Code Quality-driven Fine-tuning
Muqi Zou, Hongyu Cai, Hongwei Wu +9
As one of the key tools in many security tasks, decompilers reconstruct human-readable source code from binaries. Yet, despite recent advances, their outputs often suffer from synt…