4 papers
An Empirical Analysis of ReDoS Vulnerabilities and ReDoS Detection Tools
N'Zolieh Ismaël Mahassadi, Raphaël Khoury, Justin Vallé +1
ReDoS vulnerabilities are a type of denial of service software weakness that occurs when a regex is used to validate user-supplied input. In some cases, the regex matching process…
Enhancing Network Intrusion Detection Systems: A Multi-Layer Ensemble Approach to Mitigate Adversarial Attacks
Nasim Soltani, Shayan Nejadshamsi, Zakaria Abou El Houda +4
Adversarial examples can represent a serious threat to machine learning (ML) algorithms. If used to manipulate the behaviour of ML-based Network Intrusion Detection Systems (NIDS),…
WildCode Revisited: A Comprehensive Empirical Study on the Security of LLM-Generated Code
Kobra Khanmohammadi, Pooria Roy, Raphael Khoury +4
LLM models are increasingly used to generate code, but the quality and security of this code are often uncertain. Several recent studies have raised alarm bells, indicating that su…
Half-Day Vulnerabilities: A study of the First Days of CVE Entries
Kobra Khanmohammadi, Raphael Khoury
The National Vulnerability Disclosure Database is an invaluable source of information for security professionals and researchers. However, in some cases, a vulnerability report is…