4 papers
Finding Vulnerabilities via LLM-Augmented Semantics-Aware Type-Checking
Ruizhe Wang, Meng Xu, N. Asokan
Vulnerability detection via static analysis traditionally relies on security experts encoding insecure coding patterns into algorithmic rules. However, this approach often focuses…
BliMe Linter
Hossam ElAtali, Xiaohe Duan, Hans Liljestrand +2
Outsourced computation presents a risk to the confidentiality of clients' sensitive data since they have to trust that the service providers will not mishandle this data. Blinded M…
SeMalloc: Semantics-Informed Memory Allocator
Ruizhe Wang, Meng Xu, N. Asokan
Use-after-free (UAF) is a critical and prevalent problem in memory unsafe languages. While many solutions have been proposed, balancing security, run-time cost, and memory overhead…
S2malloc: Statistically Secure Allocator for Use-After-Free Protection And More
Ruizhe Wang, Meng Xu, N. Asokan
Attacks on heap memory, encompassing memory overflow, double and invalid free, use-after-free (UAF), and various heap spraying techniques are ever-increasing. Existing entropy-base…