4 papers
APISENSOR: Robust Discovery of Web API from Runtime Traffic Logs
Yanjing Yang, Chenxing Zhong, Ke Han +5
Large Language Model (LLM)-based agents increasingly rely on APIs to operate complex web applications, but rapid evolution often leads to incomplete or inconsistent API documentati…
BacAlarm: Mining and Simulating Composite API Traffic to Prevent Broken Access Control Violations
Yanjing Yang, He Zhang, Bohan Liu +5
Broken Access Control (BAC) violations, which consistently rank among the top five security risks in the OWASP API Security Top 10, refer to unauthorized access attempts arising fr…
Leveraging Self-Paced Learning for Software Vulnerability Detection
Zeru Cheng, Yanjing Yang, He Zhang +5
Software vulnerabilities are major risks to software systems. Recently, researchers have proposed many deep learning approaches to detect software vulnerabilities. However, their a…
Enhancing the Accuracy and Comprehensibility in Architectural Tactics Detection via Small Model-Augmented Prompt Engineering
Lingli Cao, He Zhang, Shanshan Li +5
Architectural tactics (ATs), as the concrete implementation of architectural decisions in code, address non-functional requirements of software systems. Due to the implicit nature…