4 papers
A Queryable Graph-Based Security Analysis Framework for O-RAN
Corban Villa, Michele Guerra, Syed Khandker +3
The Open Radio Access Network (O-RAN) replaces vendor-locked RANs with a modular and interoperable architecture that fosters competition and accelerates innovation. With this openn…
Antiproof: Synthesizing Vulnerability Detectors and Proofs of Exploitability
Alon Shakevsky, Corban Villa, Ion Stoica +1
Discovering vulnerabilities before attackers exploit them requires high recall and reliable automatic validation, but existing approaches struggle to achieve both without prohibiti…
Prismata: Confining Cross-Site Prompt Injection in Web Agents
Corban Villa, Alp Eren Ozdarendeli, Sijun Tan +1
Autonomous web agents promise to automate everyday browsing tasks, but inherit one of the web's oldest attack surfaces. Cross-Site Scripting proved that mixing trusted and untruste…
Chai: Agentic Discovery of Cryptographic Misuse Vulnerabilities
Corban Villa, Sohee Kim, Austin Chu +2
AI-assisted vulnerability discovery has proven effective for bug classes like memory safety, where instrumentation confirms memory violations and efficiently filters false positive…