10 papers
FuseChain: Runtime Evidence Reconstruction for Software Supply-Chain Attacks
Zhuoran Tan, Yutian Tang, Jeremy Singer +2
Software supply-chain (SSC) attacks are increasingly multi-stage, cross-source, and temporally distributed. A single attack campaign may leave weak and fragmented traces across mul…
Attesting LLM Pipelines: Enforcing Verifiable Training and Release Claims
Zhuoran Tan, Jeremy Singer, Christos Anagnostopoulos
Modern Large Language Model (LLM) systems are assembled from third-party artifacts such as pre-trained weights, fine-tuning adapters, datasets, dependency packages, and container i…
An Empirical Study of Observability Limits in Advanced Software Supply Chain Attacks
Zhuoran Tan, Wenbo Guo, Jiewen Luo +3
Advanced software supply chain (SSC) attacks are increasingly runtime-only and leave fragmented evidence across hosts, services, and build/dependency layers, making any single tele…
Operational Runtime Behavior Mining for Open-Source Supply Chain Security
Zhuoran Tan, Ke Xiao, Jeremy Singer +1
Open-source software (OSS) is a critical component of modern software systems, yet supply chain security remains challenging in practice due to unavailable or obfuscated source cod…
MCP-SandboxScan: WASM-based Secure Execution and Runtime Analysis for MCP Tools
Zhuoran Tan, Run Hao, Jeremy Singer +2
Tool-augmented Large Language Model (LLM) agents create a new supply-chain surface: Model Context Protocol (MCP) tools are installed like third-party packages, yet their outputs ca…
FuzzRDUCC: Fuzzing with Reconstructed Def-Use Chain Coverage
Kai Feng, Jeremy Singer, Angelos K Marnerides
Binary-only fuzzing often struggles with achieving thorough code coverage and uncovering hidden vulnerabilities due to limited insight into a program's internal dataflows. Traditio…
Distributed Log-driven Anomaly Detection System based on Evolving Decision Making
Zhuoran Tan, Qiyuan Wang, Christos Anagnostopoulos +3
Effective anomaly detection from logs is crucial for enhancing cybersecurity defenses by enabling the early identification of threats. Despite advances in anomaly detection, existi…
Distributed Temporal Graph Learning with Provenance for APT Detection in Supply Chains
Zhuoran Tan, Christos Anagnostopoulos, Jeremy Singer
Cyber supply chain, encompassing digital asserts, software, hardware, has become an essential component of modern Information and Communications Technology (ICT) provisioning. Howe…
OSPtrack: A Labeled Dataset Targeting Simulated Execution of Open-Source Software
Zhuoran Tan, Christos Anagnosstopoulos, Jeremy Singer
Open-source software serves as a foundation for the internet and the cyber supply chain, but its exploitation is becoming increasingly prevalent. While advances in vulnerability de…
Unified Semantic Log Parsing and Causal Graph Construction for Attack Attribution
Zhuoran Tan, Christos Anagnostopoulos, Shameem P. Parambath +1
Multi-source logs provide a comprehensive overview of ongoing system activities, allowing for in-depth analysis to detect potential threats. A practical approach for threat detecti…