4 papers
ProfMalPlus: Agent-Coordinated Detection of Malicious NPM Packages via Static-Dynamic Analysis Synergy
Yiheng Huang, Zhijia Zhao, Bihuan Chen +6
Open source software is vulnerable to supply-chain attacks through transitive dependencies, especially malicious code injected into NPM packages. Existing detectors often inadequat…
An Empirical Study of LLM-Generated Specifications for VeriFast
Wen Fan, Minh Tran, Sanya Dod +5
Static verification tools can assure industrial scale software, but require significant human labor to write specifications. This is particularly true of static verifiers based on…
VulWeaver: Weaving Broken Semantics for Grounded Vulnerability Detection
Yiheng Cao, Yihao Chen, Xin Hu +9
Detecting vulnerabilities in source code remains critical yet challenging, as conventional static analysis tools construct inaccurate program representations, while existing LLM-ba…
Evaluating the Ability of Large Language Models to Generate Verifiable Specifications in VeriFast
Wen Fan, Marilyn Rego, Xin Hu +5
Static verification is a powerful method for enhancing software quality, but it demands significant human labor and resources. This is particularly true of static verifiers that re…