5 papers
Blue Teaming Function-Calling Agents
Greta Dolcetti, Giulio Zizzo, Sergio Maffeis
We present an experimental evaluation that assesses the robustness of four open source LLMs claiming function-calling capabilities against three different attacks, and we measure t…
Clutch Control: An Attention-based Combinatorial Bandit for Efficient Mutation in JavaScript Engine Fuzzing
Myles Foley, Sergio Maffeis, Muhammad Fakhrur Rozi +1
JavaScript engines are widely used in web browsers, PDF readers, and server-side applications. The rise in concern over their security has led to the development of several targete…
Detecting APT Malware Command and Control over HTTP(S) Using Contextual Summaries
Almuthanna Alageel, Sergio Maffeis, Imperial College London
Advanced Persistent Threats (APTs) are among the most sophisticated threats facing critical organizations worldwide. APTs employ specific tactics, techniques, and procedures (TTPs)…
Helping LLMs Improve Code Generation Using Feedback from Testing and Static Analysis
Greta Dolcetti, Vincenzo Arceri, Eleonora Iotti +3
Large Language Models (LLMs) are one of the most promising developments in the field of artificial intelligence, and the software engineering community has readily noticed their po…
APIRL: Deep Reinforcement Learning for REST API Fuzzing
Myles Foley, Sergio Maffeis
REST APIs have become key components of web services. However, they often contain logic flaws resulting in server side errors or security vulnerabilities. HTTP requests are used as…