6 papers
Quality-Assured Fuzz Harness Generation via the Four Principles Framework
Ze Sheng, Dmitrijs Trizna, Luigino Camastra +3
Fuzz testing is the dominant technique for finding memory-safety vulnerabilities in C/C++ software, yet its effectiveness hinges on the quality of fuzz harnesses -- the programs th…
FuzzingBrain V2: A Multi-Agent LLM System for Automated Vulnerability Discovery and Reproduction
Ze Sheng, Zhicheng Chen, Qingxiao Xu +2
Software vulnerabilities pose critical security threats, with nearly 50,000 CVEs reported in 2025. While Large Language Models (LLMs) show promise for automated vulnerability detec…
TraceScope: Interactive URL Triage via Decoupled Checklist Adjudication
Haolin Zhang, William Reber, Yuxuan Zhang +2
Modern phishing campaigns increasingly evade snapshot-based URL classifiers using interaction gates (e.g., checkbox/slider challenges), delayed content rendering, and logo-less cre…
A Systematic Study of LLM-Based Architectures for Automated Patching
Qingxiao Xu, Ze Sheng, Zhicheng Chen +1
Large language models (LLMs) have shown promise for automated patching, but their effectiveness depends strongly on how they are integrated into patching systems. While prior work…
All You Need Is A Fuzzing Brain: An LLM-Powered System for Automated Vulnerability Detection and Patching
Ze Sheng, Qingxiao Xu, Jianwei Huang +5
Our team, All You Need Is A Fuzzing Brain, was one of seven finalists in DARPA's Artificial Intelligence Cyber Challenge (AIxCC), placing fourth in the final round. During the comp…
LLMs in Software Security: A Survey of Vulnerability Detection Techniques and Insights
Ze Sheng, Zhicheng Chen, Shuning Gu +3
Large Language Models (LLMs) are emerging as transformative tools for software vulnerability detection, addressing critical challenges in the security domain. Traditional methods,…