5 papers
POLYFLOW: A Neuro-Symbolic Framework for Static Cross-Language Information Flow Analysis
Haoran Yang, Zhixuan Zhong, Jiawei Guo +1
Modern software systems are commonly constructed in multiple, interacting programming languages. This construction leads to additional, often stealthy vulnerabilities buried in com…
LLM-Based Agents for Software and Systems Security: Approaches, Applications, and Assessment
Jingjing Nie, Jiawei Guo, Krishna Meda +1
Software and systems security workflows are typically procedural: analysts inspect heterogeneous artifacts, form hypotheses, invoke tools, interpret outputs, and revise plans. Larg…
Local LLM Agents as Vulnerable Runtimes:A Source-Code Audit of the Agent Runtime Layer
Zhengsong Zhang, Zongze Li, Jiawei Guo +1
Local LLM agents such as OpenClaw and Nanobot run on end-user machines and act on host resources - the shell, filesystem, browser, stored credentials, and messaging applications -…
DualGauge: Automated Joint Security-Functionality Benchmarking of Specification-Only Code Generation by LLMs and Coding Agents
Rupam Patir, Keyan Guo, Suvadra Barua +5
Large language models (LLMs) and LLM-based coding agents are now used to generate code from natural-language specifications, yet ensuring such code is both functionally correct and…
System Prompt Poisoning: Persistent Attacks on Large Language Models Beyond User Injection
Zongze Li, Jiawei Guo, Haipeng Cai
Large language models (LLMs) have gained widespread adoption across diverse applications due to their impressive generative capabilities. Their plug-and-play nature enables both de…