6 papers
Domain Decoupling Attack: Exploiting the Validation Gap Between Protective DNS and Shared Edge Routing
Weizhe Wang, Minhong Dong, Jinhao Li +6
Network attackers often conceal malicious communication within legitimate Internet traffic. Existing CDN-based evasion techniques rely on SNI--Host inconsistency, insufficient doma…
SFCoT: Safer Chain-of-Thought via Active Safety Evaluation and Calibration
Yu Pan, Wenlong Yu, Tiejun Wu +4
Large language models (LLMs) have demonstrated remarkable capabilities in complex reasoning tasks. However, they remain highly susceptible to jailbreak attacks that undermine their…
PolyJailbreak: Cross-Modal Jailbreaking Attacks on Black-Box Multimodal LLMs
Xinkai Wang, Beibei Li, Zerui Shao +3
Multimodal large language models (MLLMs) have become integral to a wide range of real-world applications by jointly reasoning over text and visual inputs. However, despite recent a…
Agent Skills in the Wild: An Empirical Study of Security Vulnerabilities at Scale
Yi Liu, Weizhe Wang, Ruitao Feng +5
The rise of AI agent frameworks has introduced agent skills, modular packages containing instructions and executable code that dynamically extend agent capabilities. While this arc…
ThreatIntel-Andro: Expert-Verified Benchmarking for Robust Android Malware Research
Hongpeng Bai, Minhong Dong, Yao Zhang +5
The rapidly evolving Android malware ecosystem demands high-quality, real-time datasets as a foundation for effective detection and defense. With the widespread adoption of mobile…
VulnRepairEval: An Exploit-Based Evaluation Framework for Assessing Large Language Model Vulnerability Repair Capabilities
Weizhe Wang, Wei Ma, Qiang Hu +6
The adoption of Large Language Models (LLMs) for automated software vulnerability patching has shown promising outcomes on carefully curated evaluation sets. Nevertheless, existing…