3 papers
cs.CR2026
ARQ: Agentic CodeQL Query Refinement for C/C++ Vulnerability Detection
Chunyi Wang, Yunfei Ke, Junfeng Yang +2
Static analyzers have been widely adopted for vulnerability detection in C/C++ programs. Query-based static analyzers (e.g., CodeQL) encode vulnerable code patterns in detection qu…
cs.CR2026
Detecting Privilege Escalation in Polyglot Microservices via Agentic Program Analysis
Penghui Li, Hong Yau Chong, Yinzhi Cao +1
Microservices are widely adopted in modern cloud systems due to their scalability and fault tolerance. However, microservice architectures introduce significant complexity in privi…
cs.CR2025
Neuro-symbolic Static Analysis with LLM-generated Vulnerability Patterns
Penghui Li, Songchen Yao, Josef Sarfati Korich +4
In this work, we present MoCQ, a neuro-symbolic static analysis framework that leverages large language models (LLMs) to automatically generate vulnerability detection patterns. Th…