4 papers
Beyond Static Pattern Matching? Rethinking Automatic Cryptographic API Misuse Detection in the Era of LLMs
Yifan Xia, Zichen Xie, Peiyu Liu +4
While the automated detection of cryptographic API misuses has progressed significantly, its precision diminishes for intricate targets due to the reliance on manually defined patt…
Exploring ChatGPT's Capabilities on Vulnerability Management
Peiyu Liu, Junming Liu, Lirong Fu +7
Recently, ChatGPT has attracted great attention from the code analysis domain. Prior works show that ChatGPT has the capabilities of processing foundational code analysis tasks, su…
Static Semantics Reconstruction for Enhancing JavaScript-WebAssembly Multilingual Malware Detection
Yifan Xia, Ping He, Xuhong Zhang +3
The emergence of WebAssembly allows attackers to hide the malicious functionalities of JavaScript malware in cross-language interoperations, termed JavaScript-WebAssembly multiling…
Efficient Query-Based Attack against ML-Based Android Malware Detection under Zero Knowledge Setting
Ping He, Yifan Xia, Xuhong Zhang +1
The widespread adoption of the Android operating system has made malicious Android applications an appealing target for attackers. Machine learning-based (ML-based) Android malware…