55 citations · 110 across the 23 of their papers we have counts for
26 papers
An unscented universal filter for joint input-state-parameter estimation of a partially measured system: an application to drive-by structural health monitoring
Zihao Liu, Chul-Woo Kim, Mehrisadat Makki Alamdari
Drive-by structural health monitoring infers the condition of a bridge from the response of an instrumented vehicle, whose measurements are dominated by the road roughness and the…
Efficient and Sound Probabilistic Verification for AI Agents
Alaia Solko-Breslin, Pramod Kaushik Mudrakarta, Mihai Christodorescu +2
Securing AI agents that operate in complex digital environments has become a critical need, and runtime monitoring approaches that formulate and enforce policies expressed in a for…
Agent Security is a Systems Problem
Mihai Christodorescu, Earlence Fernandes, Ashish Hooda +11
We take the position that agent security must be approached as a systems problem: the AI model powering the agent must be treated as an untrusted component, and security invariants…
Verifiers in the Loop: Decoding Time Verification for Code Translation
Tianyang Zhou, Somesh Jha, Mihai Christodorescu +2
Test-time scaling is an important mechanism for improving large language models, especially on tasks with deterministic verifiers. Code translation is a canonical example: the sour…
Taint-Style Vulnerability Detection and Confirmation for Node.js Packages Using LLM Agent Reasoning
Ronghao Ni, Mihai Christodorescu, Limin Jia
The rapidly evolving Nodejs ecosystem currently includes millions of packages and is a critical part of modern software supply chains, making vulnerability detection of Nodej…
Uncovering Relationships between Android Developers, User Privacy, and Developer Willingness to Reduce Fingerprinting Risks
Alex Berke, Güliz Seray Tuncay, Michael Specter +1
The major mobile platforms, Android and iOS, have introduced changes that restrict user tracking to improve user privacy, yet apps continue to covertly track users via device finge…
Auto-SPT: Automating Semantic Preserving Transformations for Code
Ashish Hooda, Mihai Christodorescu, Chuangang Ren +3
Machine learning (ML) models for code clone detection determine whether two pieces of code are semantically equivalent, which in turn is a key building block for software-engineeri…
Systems Security Foundations for Agentic Computing
Mihai Christodorescu, Earlence Fernandes, Ashish Hooda +11
In recent years, agentic artificial intelligence (AI) systems are becoming increasingly widespread. These systems allow agents to use various tools, such as web browsers, compilers…
When "Correct" Is Not Safe: Can We Trust Functionally Correct Patches Generated by Code Agents?
Yibo Peng, James Song, Lei Li +6
Code agents are increasingly trusted to autonomously fix bugs on platforms such as GitHub, yet their security evaluation focuses almost exclusively on functional correctness. In th…
Fingerprinting SDKs for Mobile Apps and Where to Find Them: Understanding the Market for Device Fingerprinting
Michael A. Specter, Mihai Christodorescu, Abbie Farr +7
This paper presents a large-scale analysis of fingerprinting-like behavior in the mobile application ecosystem. We take a market-based approach, focusing on third-party tracking as…
SACTOR: LLM-Driven Correct and Idiomatic C to Rust Translation with Static Analysis and FFI-Based Verification
Tianyang Zhou, Ziyi Zhang, Haowen Lin +4
Translating software written in C to Rust has significant benefits in improving memory safety. However, manual translation is cumbersome, error-prone, and often produces unidiomati…
Natural Language Outlines for Code: Literate Programming in the LLM Era
Kensen Shi, Deniz Altınbüken, Saswat Anand +17
We propose using natural language outlines as a novel modality and interaction surface for providing AI assistance to developers throughout the software development process. An NL…
Securing the Future of GenAI: Policy and Technology
Mihai Christodorescu, Ryan Craven, Soheil Feizi +11
The rise of Generative AI (GenAI) brings about transformative potential across sectors, but its dual-use nature also amplifies risks. Governments globally are grappling with the ch…
Do Large Code Models Understand Programming Concepts? Counterfactual Analysis for Code Predicates
Ashish Hooda, Mihai Christodorescu, Miltiadis Allamanis +3
Large Language Models' success on text generation has also made them better at code generation and coding tasks. While a lot of work has demonstrated their remarkable performance o…
Burning the Adversarial Bridges: Robust Windows Malware Detection Against Binary-level Mutations
Ahmed Abusnaina, Yizhen Wang, Sunpreet Arora +3
Toward robust malware detection, we explore the attack surface of existing malware detection systems. We conduct root-cause analyses of the practical binary-level black-box adversa…
Identifying and Mitigating the Security Risks of Generative AI
Clark Barrett, Brad Boyd, Elie Burzstein +20
Every major technical invention resurfaces the dual-use dilemma -- the new technology has the potential to be used for good as well as for harm. Generative AI (GenAI) techniques, s…
Formal Analysis of the API Proxy Problem
Somesh Jha, Mihai Christodorescu, Anh Pham
Implementing a security mechanism on top of APIs requires clear understanding of the semantics of each API, to ensure that security entitlements are enforced consistently and compl…
Privacy-Preserving Application-to-Application Authentication Using Dynamic Runtime Behaviors
Mihai Christodorescu, Maliheh Shirvanian, Shams Zawoad
Application authentication is typically performed using some form of secret credentials such as cryptographic keys, passwords, or API keys. Since clients are responsible for secure…
Universal Payment Channels: An Interoperability Platform for Digital Currencies
Mihai Christodorescu, Erin English, Wanyun Catherine Gu +7
With the innovation of distributed ledger technology (DLT), often known as blockchain technology, there has been significant growth of digital tokens in the form of cryptocurrencie…
Towards a Two-Tier Hierarchical Infrastructure: An Offline Payment System for Central Bank Digital Currencies
Mihai Christodorescu, Wanyun Catherine Gu, Ranjit Kumaresan +8
Digital payments traditionally rely on online communications with several intermediaries such as banks, payment networks, and payment processors in order to authorize and process p…
Robust and Accurate Authorship Attribution via Program Normalization
Yizhen Wang, Mohannad Alhanahnah, Ke Wang +2
Source code attribution approaches have achieved remarkable accuracy thanks to the rapid advances in deep learning. However, recent studies shed light on their vulnerability to adv…
Privacy-Preserving Payment Splitting
Saba Eskandarian, Mihai Christodorescu, Payman Mohassel
Widely used payment splitting apps allow members of a group to keep track of debts between members by sending charges for expenses paid by one member on behalf of others. While off…
The House That Knows You: User Authentication Based on IoT Data
Talha Ongun, Oliver Spohngellert, Alina Oprea +3
Home-based Internet of Things (IoT) devices have gained in popularity and many households have become 'smart' by using devices such as smart sensors, locks, and voice-based assista…
COSET: A Benchmark for Evaluating Neural Program Embeddings
Ke Wang, Mihai Christodorescu
Neural program embedding can be helpful in analyzing large software, a task that is challenging for traditional logic-based program analyses due to their limited scalability. A key…