Showing cs.CRShow all
3 papers · 1 filter
cs.CR2026
Ulysses: A Security Harness For Synthesizing Verifiable Web Exploits
Aditya Oke, André Vicente Duarte, Rui Melo +6
How can an AI agent automatically discover security vulnerabilities in any software repository? Existing approaches use LLMs to generate software vulnerability exploits. However, i…
cs.CR2026
Self-Evolving Static Analysis via LLM Pseudo-Labeling
Rui Melo, Andre Duarte, Aditya Oke +5
Security bugs often slip past static analysis not because they are impossible to detect, but because detection rules have not yet been written for the code in front of us. New fram…
cs.CR2026
ABSENTIA: Detecting Broken Access Control Vulnerabilities in Web Applications
André V. Duarte, Aditya Oke, Rui Melo +7
Broken access control, the failure of authorization, is one of the most prevalent web security risks. Unlike injection, a flow of untrusted input into a dangerous operation, author…