11 citations · 12 across the 7 of their papers we have counts for
7 papers
FirmRCA: Towards Post-Fuzzing Analysis on ARM Embedded Firmware with Efficient Event-based Fault Localization
Boyu Chang, Binbin Zhao, Qiao Zhang +4
While fuzzing has demonstrated its effectiveness in exposing vulnerabilities within embedded firmware, the discovery of crashing test cases is only the first step in improving the…
Understanding the AI-powered Binary Code Similarity Detection
Lirong Fu, Peiyu Liu, Wenlong Meng +5
AI-powered binary code similarity detection (BinSD), which transforms intricate binary code comparison to the distance measure of code embedding through neural networks, has been w…
Beyond Static Pattern Matching? Rethinking Automatic Cryptographic API Misuse Detection in the Era of LLMs
Yifan Xia, Zichen Xie, Peiyu Liu +4
While the automated detection of cryptographic API misuses has progressed significantly, its precision diminishes for intricate targets due to the reliance on manually defined patt…
LuaTaint: A Static Analysis System for Web Configuration Interface Vulnerability of Internet of Things Devices
Jiahui Xiang, Lirong Fu, Tong Ye +4
The diversity of web configuration interfaces for IoT devices has exacerbated issues such as inadequate permission controls and insecure interfaces, resulting in various vulnerabil…
Exploring ChatGPT's Capabilities on Vulnerability Management
Peiyu Liu, Junming Liu, Lirong Fu +7
Recently, ChatGPT has attracted great attention from the code analysis domain. Prior works show that ChatGPT has the capabilities of processing foundational code analysis tasks, su…
CP-BCS: Binary Code Summarization Guided by Control Flow Graph and Pseudo Code
Tong Ye, Lingfei Wu, Tengfei Ma +5
Automatically generating function summaries for binaries is an extremely valuable but challenging task, since it involves translating the execution behavior and semantics of the lo…
Static Semantics Reconstruction for Enhancing JavaScript-WebAssembly Multilingual Malware Detection
Yifan Xia, Ping He, Xuhong Zhang +3
The emergence of WebAssembly allows attackers to hide the malicious functionalities of JavaScript malware in cross-language interoperations, termed JavaScript-WebAssembly multiling…