5 papers
SCRIBE: Practical Static Binary Patching via Binary-Aware Recompilation of Decompiled Code
Han Dai, Soumyakant Priyadarshan, Abdullah Imran +2
When source code or the original toolchain is unavailable, patching binaries is difficult because it requires editing low-level assembly code directly. As an alternative, one can d…
deepSURF: Detecting Memory Safety Vulnerabilities in Rust Through Fuzzing LLM-Augmented Harnesses
Georgios Androutsopoulos, Antonio Bianchi
Although Rust ensures memory safety by default, it also permits the use of unsafe code, which can introduce memory safety vulnerabilities if misused. Unfortunately, existing tools…
Investigating the Impact of Dark Patterns on LLM-Based Web Agents
Devin Ersoy, Brandon Lee, Ananth Shreekumar +4
As users increasingly turn to large language model (LLM) based web agents to automate online tasks, agents may encounter dark patterns: deceptive user interface designs that manipu…
Reactive Bottom-Up Testing
Siddharth Muralee, Sourag Cherupattamoolayil, James C. Davis +2
Modern computing systems remain rife with software vulnerabilities. Engineers apply many means to detect them, of which dynamic testing is one of the most common and effective. How…
LEMIX: Enabling Testing of Embedded Applications as Linux Applications (Extended Report)
Sai Ritvik Tanksalkar, Siddharth Muralee, Srihari Danduri +4
Dynamic analysis, through rehosting, is an important capability for security assessment in embedded systems software. Existing rehosting techniques aim to provide high-fidelity exe…