5 papers
Viverra: Text-to-Code with Guarantees
Haoze Wu, Rocky Klopfenstein, Keith Farkas +1
A fundamental limitation of Text-to-Code is that no guarantee can be obtained about the correctness of the generated code. Therefore, to ensure its correctness, the generated code…
Usability as a Weapon: Attacking the Safety of LLM-Based Code Generation via Usability Requirements
Yue Li, Xiao Li, Hao Wu +5
Large Language Models (LLMs) are increasingly used for automated software development, making their ability to preserve secure coding practices critical. In practice, however, many…
"MCP Does Not Stand for Misuse Cryptography Protocol": Uncovering Cryptographic Misuse in Model Context Protocol at Scale
Biwei Yan, Yue Zhang, Minghui Xu +5
The Model Context Protocol (MCP) is rapidly emerging as the middleware for LLM-based applications, offering a standardized interface for tool integration. However, its built-in sec…
When LLMs Copy to Think: Uncovering Copy-Guided Attacks in Reasoning LLMs
Yue Li, Xiao Li, Hao Wu +4
Large Language Models (LLMs) have become integral to automated code analysis, enabling tasks such as vulnerability detection and code comprehension. However, their integration intr…
Say What You Mean: Natural Language Access Control with Large Language Models for Internet of Things
Ye Cheng, Minghui Xu, Yue Zhang +7
Access control in the Internet of Things (IoT) is becoming increasingly complex, as policies must account for dynamic and contextual factors such as time, location, user behavior,…