5 papers
Why Static Skill Inconsistencies Do Not Equate to Runtime Risks: A Behavioral Analysis of LLM Agent Execution
Fengrui Fan, Huahao Wang, Jingyi Fang +3
LLM agent frameworks heavily rely on external skill assets to standardize tool usage, encode operational workflows, and supply executable runtime resources. Despite their widesprea…
Characterizing Security Effects of OSS Vulnerabilities in Agent Systems
Yu Ji, Yang Wei, Yutao Hu +3
Software agents increasingly depend on open-source components when executing tools and interacting with external systems. Security flaws in these dependencies may therefore influen…
Towards Security-Auditable LLM Agents: A Unified Graph Representation
Chaofan Li, Lyuye Zhang, Jintao Zhai +9
LLM-based agentic systems are rapidly evolving to perform complex autonomous tasks through dynamic tool invocation, stateful memory management, and multi-agent collaboration. Howev…
JC-Finder: Detecting Java Clone-based Third-Party Library by Class-level Tree Analysis
Lida Zhao, Chaofan Li, Yueming Wu +10
While reusing third-party libraries (TPL) facilitates software development, its chaotic management has brought great threats to software maintenance and the unauthorized use of sou…
Detecting Essence Code Clones via Information Theoretic Analysis
Lida Zhao, Shihan Dou, Yutao Hu +8
Code cloning, a widespread practice in software development, involves replicating code fragments to save time but often at the expense of software maintainability and quality. In t…