54 citations · 103 across the 10 of their papers we have counts for
10 papers
VELVET: a noVel Ensemble Learning approach to automatically locate VulnErable sTatements
Yangruibo Ding, Sahil Suneja, Yunhui Zheng +4
Automatically locating vulnerable statements in source code is crucial to assure software security and alleviate developers' debugging efforts. This becomes even more important in…
Data-Driven AI Model Signal-Awareness Enhancement and Introspection
Sahil Suneja, Yufan Zhuang, Yunhui Zheng +2
AI modeling for source code understanding tasks has been making significant progress, and is being adopted in production development pipelines. However, reliability concerns, espec…
D2A: A Dataset Built for AI-Based Vulnerability Detection Methods Using Differential Analysis
Yunhui Zheng, Saurabh Pujar, Burn Lewis +6
Static analysis tools are widely used for vulnerability detection as they understand programs with complex behavior and millions of lines of code. Despite their popularity, static…
Probing Model Signal-Awareness via Prediction-Preserving Input Minimization
Sahil Suneja, Yunhui Zheng, Yufan Zhuang +2
This work explores the signal awareness of AI models for source code understanding. Using a software vulnerability detection use case, we evaluate the models' ability to capture th…
Exploring Software Naturalness through Neural Language Models
Luca Buratti, Saurabh Pujar, Mihaela Bornea +8
The Software Naturalness hypothesis argues that programming languages can be understood through the same techniques used in natural language processing. We explore this hypothesis…
Learning to map source code to software vulnerability using code-as-a-graph
Sahil Suneja, Yunhui Zheng, Yufan Zhuang +2
We explore the applicability of Graph Neural Networks in learning the nuances of source code from a security perspective. Specifically, whether signatures of vulnerabilities in sou…
Opportunities in Software Engineering Research for Web API Consumption
Erik Wittern, Annie Ying, Yunhui Zheng +4
Nowadays, invoking third party code increasingly involves calling web services via their web APIs, as opposed to the more traditional scenario of downloading a library and invoking…
Z3str3: A String Solver with Theory-aware Branching
Murphy Berzish, Yunhui Zheng, Vijay Ganesh
We present a new string SMT solver, Z3str3, that is faster than its competitors Z3str2, Norn, CVC4, S3, and S3P over a majority of three industrial-strength benchmarks, namely Kalu…
Statically Checking Web API Requests in JavaScript
Erik Wittern, Annie T. T. Ying, Yunhui Zheng +2
Many JavaScript applications perform HTTP requests to web APIs, relying on the request URL, HTTP method, and request data to be constructed correctly by string operations. Traditio…
GaDei: On Scale-up Training As A Service For Deep Learning
Wei Zhang, Minwei Feng, Yunhui Zheng +8
Deep learning (DL) training-as-a-service (TaaS) is an important emerging industrial workload. The unique challenge of TaaS is that it must satisfy a wide range of customers who hav…