160 citations · 1.2k across the 101 of their papers we have counts for
34 papers · 1 filter
XRFix: Exploring Performance Bug Repair of Extended Reality Applications with Large Language Models
Jingwen Wu, Hanyang Guo, Hong-Ning Dai +1
As an emerging technology, Extended Reality provides end-users with an immersive experience of interacting with virtual and physical environments. Unlike traditional software, the…
A Survey of LLM-Driven Penetration Testing: Taxonomy, Co-Evolution, and Open Challenges
Zheyuan He, Jiaxun Dong, Zihao Li +6
Agents4Pentest, an emerging class of LLM-based autonomous penetration testing systems, has become a rapidly growing area in security research. Despite this growth, the field still…
FDI: Attack Neural Code Generation Systems through User Feedback Channel
Zhensu Sun, Xiaoning Du, Xiapu Luo +3
Neural code generation systems have recently attracted increasing attention to improve developer productivity and speed up software development. Typically, these systems maintain a…
Demystifying the DAO Governance Process
Junjie Ma, Muhui Jiang, Jinan Jiang +5
Decentralized Autonomous Organization (DAO) becomes a popular governance solution for decentralized applications (dApps) to achieve decentralized governance. In the DAO, no single…
LLM-CompDroid: Repairing Configuration Compatibility Bugs in Android Apps with Pre-trained Large Language Models
Zhijie Liu, Yutian Tang, Meiyun Li +4
XML configurations are integral to the Android development framework, particularly in the realm of UI display. However, these configurations can introduce compatibility issues (bug…
An Empirical Study on Oculus Virtual Reality Applications: Security and Privacy Perspectives
Hanyang Guo, Hong-Ning Dai, Xiapu Luo +3
Although Virtual Reality (VR) has accelerated its prevalent adoption in emerging metaverse applications, it is not a fundamentally new technology. On one hand, most VR operating sy…
Are We There Yet? Unraveling the State-of-the-Art Smart Contract Fuzzers
Shuohan Wu, Zihao Li, Luyi Yan +5
Given the growing importance of smart contracts in various applications, ensuring their security and reliability is critical. Fuzzing, an effective vulnerability detection techniqu…
SliceLocator: Locating Vulnerable Statements with Graph-based Detectors
Baijun Cheng, Kailong Wang, Cuiyun Gao +5
Vulnerability detection is a crucial component in the software development lifecycle. Existing vulnerability detectors, especially those based on deep learning (DL) models, have ac…
VGX: Large-Scale Sample Generation for Boosting Learning-Based Software Vulnerability Analyses
Yu Nong, Richard Fang, Guangbei Yi +4
Accompanying the successes of learning-based defensive software vulnerability analyses is the lack of large and quality sets of labeled vulnerable program samples, which impedes fu…
Coverage Goal Selector for Combining Multiple Criteria in Search-Based Unit Test Generation
Zhichao Zhou, Yuming Zhou, Chunrong Fang +4
Unit testing is critical to the software development process, ensuring the correctness of basic programming units in a program (e.g., a method). Search-based software testing (SBST…
Large Language Models for Software Engineering: A Systematic Literature Review
Xinyi Hou, Yanjie Zhao, Yue Liu +7
Large Language Models (LLMs) have significantly impacted numerous domains, including Software Engineering (SE). Many recent publications have explored LLMs applied to various SE ta…
No Need to Lift a Finger Anymore? Assessing the Quality of Code Generation by ChatGPT
Zhijie Liu, Yutian Tang, Xiapu Luo +2
Large language models (LLMs) have demonstrated impressive capabilities across various NLP tasks. Additionally, LLMs are also highly valuable in supporting software engineering task…
ChatGPT vs SBST: A Comparative Assessment of Unit Test Suite Generation
Yutian Tang, Zhijie Liu, Zhichao Zhou +1
Recent advancements in large language models (LLMs) have demonstrated exceptional success in a wide range of general domain tasks, such as question answering and following instruct…
Black-box Adversarial Example Attack towards FCG Based Android Malware Detection under Incomplete Feature Information
Heng Li, Zhang Cheng, Bang Wu +4
The function call graph (FCG) based Android malware detection methods have recently attracted increasing attention due to their promising performance. However, these methods are su…
Characterizing and Detecting WebAssembly Runtime Bugs
Yixuan Zhang, Shangtong Cao, Haoyu Wang +6
WebAssembly (abbreviated WASM) has emerged as a promising language of the Web and also been used for a wide spectrum of software applications such as mobile applications and deskto…
Demystifying Privacy Policy of Third-Party Libraries in Mobile Apps
Kaifa Zhao, Xian Zhan, Le Yu +5
The privacy of personal information has received significant attention in mobile software. Although previous researchers have designed some methods to identify the conflict between…
Do Pre-trained Language Models Indeed Understand Software Engineering Tasks?
Yao Li, Tao Zhang, Xiapu Luo +3
Artificial intelligence (AI) for software engineering (SE) tasks has recently achieved promising performance. In this paper, we investigate to what extent the pre-trained language…
SelfAPR: Self-supervised Program Repair with Test Execution Diagnostics
He Ye, Matias Martinez, Xiapu Luo +2
Learning-based program repair has achieved good results in a recent series of papers. Yet, we observe that the related work fails to repair some bugs because of a lack of knowledge…
Aper: Evolution-Aware Runtime Permission Misuse Detection for Android Apps
Sinan Wang, Yibo Wang, Xian Zhan +4
The Android platform introduces the runtime permission model in version 6.0. The new model greatly improves data privacy and user experience, but brings new challenges for app deve…
Research on Third-Party Libraries in AndroidApps: A Taxonomy and Systematic LiteratureReview
Xian Zhan, Tianming Liu, Lingling Fan +4
Third-party libraries (TPLs) have been widely used in mobile apps, which play an essential part in the entire Android ecosystem. However, TPL is a double-edged sword. On the one ha…
A Systematic Assessment on Android Third-party Library Detection Tools
Xian Zhan, Tianming Liu, Yepang Liu +4
Third-party libraries (TPLs) have become a significant part of the Android ecosystem. Developers can employ various TPLs to facilitate their app development. Unfortunately, the pop…
Smart Contract Security: a Practitioners' Perspective
Zhiyuan Wan, Xin Xia, David Lo +3
Smart contracts have been plagued by security incidents, which resulted in substantial financial losses. Given numerous research efforts in addressing the security issues of smart…
A Systematical Study on Application Performance Management Libraries for Apps
Yutian Tang, Haoyu Wang, Xian Zhan +6
Being able to automatically detect the performance issues in apps can significantly improve apps' quality as well as having a positive influence on user satisfaction. Application P…
CHAMP: Characterizing Undesired App Behaviors from User Comments based on Market Policies
Yangyu Hu, Haoyu Wang, Tiantong Ji +4
Millions of mobile apps have been available through various app markets. Although most app markets have enforced a number of automated or even manual mechanisms to vet each app bef…