Concolic execution systematically explores program paths by solving symbolic constraints, but in object-oriented software its practical effectiveness is often limited by heap constraints over objects and heap structure, such as nullness, aliasing, runtime types, and field reachability. These constraints form a systemat...
Shao-Ran Xia, Le-Yi Cheng, Cai-Hua Dong et al.· Proceedings of the 41st IEEE...· 0 citations
Program verification establishes software correctness through machine-checkable proofs constructed in theorem provers. It's a guarantee especially valuable for code generated by large language models (LLMs), which is fluent but carries no assurance of correctness. Almost all existing provers, however, pursue pass rates...
Shuang-Jie Yao, Nikolaus Holzer, Mark Santolucito et al.· 0 citations
This work presents RedHerring, which inserts certifiably safe decoys that divert verification effort from real vulnerabilities, and shows that its effectiveness does not depend on decoy secrecy.
Kai-Kai Zhang, Zi-Han Zhang, Yu-Chong Xie et al.· 0 citations
This work proposes a novel defense that recovers necessary information needed to distinguish valid from invalid cache hits from the raw text of the cache key, and proves that Deletion Gain stays positive when a deletion leaves text close enough to the rewrite, and searches for such deletions with a sliding window.
Zi-Han Zhang, Shuang-Jie Yao, Ze-Sen Liu et al.· 0 citations
Self-evolving agent harnesses continually update persistent components such as memory, prompts, skills, and tools. We call this process harness evolution. However, such evolution could introduce unexpected safety risks. Existing work studies harness misevolution and validates candidate harnesses or attributed individua...
Zhi-Xiang Zhang, Ze-Sen Liu, Wai-Ip Lai et al.· 0 citations
LLM agents convert model outputs into consequential actions, including communications, code changes, and financial transactions. Developers often trust evidence such as test results and execution logs. We identify a response path integrity gap in Bring Your Own Key configurations used by roughly 88 percent of mainstrea...
Mingyu Luo, Zihan Zhang, Zesen Liu et al.· 0 citations
We use cookies to run the site and, with your consent, for analytics and to show ads.
See our Cookie Policy.
