4 papers
Ulysses: A Security Harness For Synthesizing Verifiable Web Exploits
Aditya Oke, André Vicente Duarte, Rui Melo +6
How can an AI agent automatically discover security vulnerabilities in any software repository? Existing approaches use LLMs to generate software vulnerability exploits. However, i…
Self-Evolving Static Analysis via LLM Pseudo-Labeling
Rui Melo, Andre Duarte, Aditya Oke +5
Security bugs often slip past static analysis not because they are impossible to detect, but because detection rules have not yet been written for the code in front of us. New fram…
ABSENTIA: Detecting Broken Access Control Vulnerabilities in Web Applications
André V. Duarte, Aditya Oke, Rui Melo +7
Broken access control, the failure of authorization, is one of the most prevalent web security risks. Unlike injection, a flow of untrusted input into a dangerous operation, author…
Sem-Detect: Semantic Level Detection of AI Generated Peer-Reviews
André V. Duarte, Brian Tufts, Aditya Oke +3
How can we distinguish whether a peer review was written by a human or generated by an AI model? We argue that, in this setting, authorship should not be attributed solely from the…