21 citations · 46 across the 12 of their papers we have counts for
6 papers · 1 filter
POLYFLOW: A Neuro-Symbolic Framework for Static Cross-Language Information Flow Analysis
Haoran Yang, Zhixuan Zhong, Jiawei Guo +1
Modern software systems are commonly constructed in multiple, interacting programming languages. This construction leads to additional, often stealthy vulnerabilities buried in com…
How Reliable Are NVD CWE Labels? A Large-Scale Semantic Audit with Seclometry
Yu Nong, Yao Du, Majid Behravan +1
CWE labels in the National Vulnerability Database (NVD) are widely treated as ground truth for vulnerability search, scanner evaluation, benchmark construction, learning-based secu…
System Prompt Poisoning: Persistent Attacks on Large Language Models Beyond User Injection
Zongze Li, Jiawei Guo, Haipeng Cai
Large language models (LLMs) have gained widespread adoption across diverse applications due to their impressive generative capabilities. Their plug-and-play nature enables both de…
Enhancing Android Malware Detection: The Influence of ChatGPT on Decision-centric Task
Yao Li, Sen Fang, Tao Zhang +1
With the rise of large language models, such as ChatGPT, non-decisional models have been applied to various tasks. Moreover, ChatGPT has drawn attention to the traditional decision…
APPATCH: Automated Adaptive Prompting Large Language Models for Real-World Software Vulnerability Patching
Yu Nong, Haoran Yang, Long Cheng +2
Timely and effective vulnerability patching is essential for cybersecurity defense, for which various approaches have been proposed yet still struggle to generate valid and correct…
Chain-of-Thought Prompting of Large Language Models for Discovering and Fixing Software Vulnerabilities
Yu Nong, Mohammed Aldeen, Long Cheng +3
Security vulnerabilities are increasingly prevalent in modern software and they are widely consequential to our society. Various approaches to defending against these vulnerabiliti…