6 papers
Weaver: Fuzzing JavaScript Engines at the JavaScript-WebAssembly Boundary
Lingming Zhang, Binbin Zhao, Puzhuo Liu +4
The security of modern JavaScript (JS) engines is critical since they provide the primary defense mechanism for executing untrusted code on the web. The recent integration of WebAs…
Beyond Static Pattern Matching? Rethinking Automatic Cryptographic API Misuse Detection in the Era of LLMs
Yifan Xia, Zichen Xie, Peiyu Liu +4
While the automated detection of cryptographic API misuses has progressed significantly, its precision diminishes for intricate targets due to the reliance on manually defined patt…
SCRUTINEER: Detecting Logic-Level Usage Violations of Reusable Components in Smart Contracts
Xingshuang Lin, Binbin Zhao, Jinwen Wang +3
Smart Contract Reusable Components(SCRs) play a vital role in accelerating the development of business-specific contracts by promoting modularity and code reuse. However, the risks…
PROMFUZZ: Leveraging LLM-Driven and Bug-Oriented Composite Analysis for Detecting Functional Bugs in Smart Contracts
Xingshuang Lin, Qinge Xie, Binbin Zhao +6
Smart contracts are fundamental pillars of the blockchain, playing a crucial role in facilitating various business transactions. However, these smart contracts are vulnerable to ex…
FirmRCA: Towards Post-Fuzzing Analysis on ARM Embedded Firmware with Efficient Event-based Fault Localization
Boyu Chang, Binbin Zhao, Qiao Zhang +4
While fuzzing has demonstrated its effectiveness in exposing vulnerabilities within embedded firmware, the discovery of crashing test cases is only the first step in improving the…
Understanding the AI-powered Binary Code Similarity Detection
Lirong Fu, Peiyu Liu, Wenlong Meng +5
AI-powered binary code similarity detection (BinSD), which transforms intricate binary code comparison to the distance measure of code embedding through neural networks, has been w…