1 citations · 1 across the 1 of their papers we have counts for
Showing cs.CRShow all
3 papers · 1 filter
cs.CR2024★ 1 cited
Coca: Improving and Explaining Graph Neural Network-Based Vulnerability Detection Systems
Sicong Cao, Xiaobing Sun, Xiaoxue Wu +4
Recently, Graph Neural Network (GNN)-based vulnerability detection systems have achieved remarkable success. However, the lack of explainability poses a critical challenge to deplo…
cs.CR2023★ 3 cited
ODDFUZZ: Discovering Java Deserialization Vulnerabilities via Structure-Aware Directed Greybox Fuzzing
Sicong Cao, Biao He, Xiaobing Sun +9
Java deserialization vulnerability is a severe threat in practice. Researchers have proposed static analysis solutions to locate candidate vulnerabilities and fuzzing solutions to…
cs.CR2023★ 2 cited
Improving Java Deserialization Gadget Chain Mining via Overriding-Guided Object Generation
Sicong Cao, Xiaobing Sun, Xiaoxue Wu +7
Java (de)serialization is prone to causing security-critical vulnerabilities that attackers can invoke existing methods (gadgets) on the application's classpath to construct a gadg…