backdoor detection 1code change analysis 1continuous integration 1fuzz testing 1supply chain security 1
From the 1 of 2 linked papers with an AI index.
2 papers
cs.CR2026
Not In My Git Yard: Catching Backdoors at Commit and Release Time
Dimitri Kokkonis, Michaël Marcozzi, Stefano Zacchiroli
The paper introduces Lily, a tool that automatically detects hidden backdoors in open‑source code during commit and release stages by combining CI‑compatible fuzzing with code‑chan…
cs.CR2025
ROSA: Finding Backdoors with Fuzzing
Dimitri Kokkonis, Michaël Marcozzi, Emilien Decoux +1
A code-level backdoor is a hidden access, programmed and concealed within the code of a program. For instance, hard-coded credentials planted in the code of a file server applicati…