2 papers
cs.CR2026
HoF-Bench: Rediscovering Real AI-Discovered CVEs Without Frontier Models
Petr Simecek, Elnaz Babayeva, Jiri Balhar +23
LLM-based analyzers have begun finding real vulnerabilities in mature open-source projects: AISLE's analyzer is credited with more than 280 CVEs across 78 projects, including OpenS…
cs.CR2026
Quality-Assured Fuzz Harness Generation via the Four Principles Framework
Ze Sheng, Dmitrijs Trizna, Luigino Camastra +3
Fuzz testing is the dominant technique for finding memory-safety vulnerabilities in C/C++ software, yet its effectiveness hinges on the quality of fuzz harnesses -- the programs th…