Enhancing Static Analysis for Practical Bug Detection: An LLM-Integrated Approach.
Proc. ACM Program. Lang., 2024
SymBisect: Accurate Bisection for Fuzzer-Exposed Vulnerabilities.
Proceedings of the 33rd USENIX Security Symposium, 2024
SyzGen++: Dependency Inference for Augmenting Kernel Driver Fuzzing.
Proceedings of the IEEE Symposium on Security and Privacy, 2024
SyzBridge: Bridging the Gap in Exploitability Assessment of Linux Kernel Bugs in the Linux Ecosystem.
Proceedings of the 31st Annual Network and Distributed System Security Symposium, 2024
E&V: Prompting Large Language Models to Perform Static Analysis by Pseudo-code Execution and Verification.
CoRR, 2023
The Hitchhiker's Guide to Program Analysis: A Journey with Large Language Models.
CoRR, 2023
SyzDescribe: Principled, Automated, Static Generation of Syscall Descriptions for Kernel Drivers.
Proceedings of the 44th IEEE Symposium on Security and Privacy, 2023
Assisting Static Analysis with Large Language Models: A ChatGPT Experiment.
Proceedings of the 31st ACM Joint European Software Engineering Conference and Symposium on the Foundations of Software Engineering, 2023
ConcSpectre: Be Aware of Forthcoming Malware Hidden in Concurrent Programs.
IEEE Trans. Reliab., 2022
Progressive Scrutiny: Incremental Detection of UBI bugs in the Linux Kernel.
,
,
,
,
,
,
,
,
,
,
Proceedings of the 29th Annual Network and Distributed System Security Symposium, 2022
Demystifying the Dependency Challenge in Kernel Fuzzing.
Proceedings of the 44th IEEE/ACM 44th International Conference on Software Engineering, 2022
Statically Discovering High-Order Taint Style Vulnerabilities in OS Kernels.
Proceedings of the CCS '21: 2021 ACM SIGSAC Conference on Computer and Communications Security, Virtual Event, Republic of Korea, November 15, 2021
Themis: Ambiguity-Aware Network Intrusion Detection based on Symbolic Model Comparison.
Proceedings of the MTD@CCS 2021: Proceedings of the 8th ACM Workshop on Moving Target Defense, 2021
Eluding ML-based Adblockers With Actionable Adversarial Examples.
,
,
,
,
,
,
,
,
,
,
,
,
,
Proceedings of the ACSAC '21: Annual Computer Security Applications Conference, Virtual Event, USA, December 6, 2021
Tell You a Definite Answer: Whether Your Data is Tainted During Thread Scheduling.
IEEE Trans. Software Eng., 2020
UBITect: a precise and scalable method to detect use-before-initialization bugs in Linux kernel.
Proceedings of the ESEC/FSE '20: 28th ACM Joint European Software Engineering Conference and Symposium on the Foundations of Software Engineering, 2020
Debugging Multithreaded Programs as if They Were Sequential.
IEEE Access, 2018
Automated Testing of Definition-Use Data Flow for Multithreaded Programs.
Proceedings of the 2017 IEEE International Conference on Software Testing, 2017
Debugging Multithreaded Programs as if They Were Sequential.
Proceedings of the International Conference on Software Analysis, Testing and Evolution, 2016