2 citations · 2 across the 7 of their papers we have counts for
7 papers
Detecting Avalanche Effect in Adversarial Settings: Spotting the Encryption Loops in Ransomware
Nanqing Luo, Xusheng Li, Haizhou Wang +3
Spotting encryption loops in binary-only ransomware is a critical reverse engineering task. Since the existence of avalanche effect, an intrinsic characteristic of any secure encry…
From IOCs to Regex: Automating CTI Operationalization for SOC with LLMs
Pei-Yu Tseng, Lan Zhang, ZihDwo Yeh +3
Cyber Threat Intelligence (CTI) reports contain Indicators of Compromise (IOCs) that are critical for security operations. To operationalize these IOCs across heterogeneous logs, a…
Unmasking the Shadows: Pinpoint the Implementations of Anti-Dynamic Analysis Techniques in Malware Using LLM
Haizhou Wang, Nanqing Luo, Xusheng Li +1
Sandboxes and other dynamic analysis processes are prevalent in malware detection systems nowadays to enhance the capability of detecting 0-day malware. Therefore, techniques of an…
Hide Your Malicious Goal Into Benign Narratives: Jailbreak Large Language Models through Carrier Articles
Zhilong Wang, Haizhou Wang, Nanqing Luo +4
Large Language Model (LLM) jailbreak refers to a type of attack aimed to bypass the safeguard of an LLM to generate contents that are inconsistent with the safe usage guidelines. B…
Hidden You Malicious Goal Into Benign Narratives: Jailbreak Large Language Models through Logic Chain Injection
Zhilong Wang, Yebo Cao, Peng Liu
Jailbreak attacks on Language Model Models (LLMs) entail crafting prompts aimed at exploiting the models to generate malicious content. Existing jailbreak attacks can successfully…
A hybrid LLM workflow can help identify user privilege related variables in programs of any size
Haizhou Wang, Zhilong Wang, Peng Liu
Many programs involves operations and logic manipulating user privileges, which is essential for the security of an organization. Therefore, one common malicious goal of attackers…
Identifying Non-Control Security-Critical Data through Program Dependence Learning
Zhilong Wang, Haizhou Wang, Hong Hu +1
As control-flow protection gets widely deployed, it is difficult for attackers to corrupt control-data and achieve control-flow hijacking. Instead, data-oriented attacks, which man…