3 papers
cs.SE2025
VulRTex: A Reasoning-Guided Approach to Identify Vulnerabilities from Rich-Text Issue Report
Ziyou Jiang, Mingyang Li, Guowei Yang +2
Software vulnerabilities exist in open-source software (OSS), and the developers who discover these vulnerabilities may submit issue reports (IRs) to describe their details. Securi…
cs.CR2024
CodePurify: Defend Backdoor Attacks on Neural Code Models via Entropy-based Purification
Fangwen Mu, Junjie Wang, Zhuohao Yu +4
Neural code models have found widespread success in tasks pertaining to code intelligence, yet they are vulnerable to backdoor attacks, where an adversary can manipulate the victim…
cs.CR2024
PatUntrack: Automated Generating Patch Examples for Issue Reports without Tracked Insecure Code
Ziyou Jiang, Lin Shi, Guowei Yang +1
Security patches are essential for enhancing the stability and robustness of projects in the software community. While vulnerabilities are officially expected to be patched before…