4 papers
SEEK: Agentic Knowledge Graph Retrieval for Secure Code Generation
Varun Gadey, Markus Tohn, Lichao Wu +2
Large Language Models (LLMs) can generate functionally correct code while introducing exploitable security weaknesses, particularly when developers specify functionality without ex…
CodePoisonRAG: Knowledge Poisoning Attacks on Retrieval-Augmented Code Generation
Varun Gadey, Ziad Marey, Alexandra Dmitrienko
Retrieval-Augmented Code Generation (RACG) improves LLM-based software development by retrieving external code artifacts, documentation, and patches, and incorporating them into th…
RAVEN: Agentic RAG for Automated Vulnerability Repair
Varun Gadey, Zijie Liu, Alexandra Dmitrienko
Automated vulnerability repair has emerged as a promising direction to mitigate the growing number of software vulnerabilities. Recent advances in Large Language Models (LLMs) have…
GNN-Based Code Annotation Logic for Establishing Security Boundaries in C Code
Varun Gadey, Raphael Goetz, Christoph Sendner +2
Securing sensitive operations in today's interconnected software landscape is crucial yet challenging. Modern platforms rely on Trusted Execution Environments (TEEs), such as Intel…