18 citations · 21 across the 2 of their papers we have counts for
4 papers · 1 filter
Ulysses: A Security Harness For Synthesizing Verifiable Web Exploits
Aditya Oke, André Vicente Duarte, Rui Melo +6
How can an AI agent automatically discover security vulnerabilities in any software repository? Existing approaches use LLMs to generate software vulnerability exploits. However, i…
Self-Evolving Static Analysis via LLM Pseudo-Labeling
Rui Melo, Andre Duarte, Aditya Oke +5
Security bugs often slip past static analysis not because they are impossible to detect, but because detection rules have not yet been written for the code in front of us. New fram…
When Models Know but Can't Linearly Say: Relational Encoding Limits Linear Vulnerability Classification in Code LLMs
Rui Melo, Andre Catarino, Claudia Mamede +2
Large language models can detect vulnerable code, yet the form of vulnerability encoding in their representations remains unclear. We analyze 8 code models spanning 6.7B-15B parame…
ABSENTIA: Detecting Broken Access Control Vulnerabilities in Web Applications
André V. Duarte, Aditya Oke, Rui Melo +7
Broken access control, the failure of authorization, is one of the most prevalent web security risks. Unlike injection, a flow of untrusted input into a dangerous operation, author…