An empirical evaluation of mainstream Rust SAST tools using security vulnerabilities identified in real-world Rust applications is conducted and a large language model (LLM)-assisted automated testing framework, TRUST, is proposed, which automatically analyzes the official Rust reference to derive and implement semanti...
Huai-En Zhang, Zheng-Jie Zhao, Yu Pei et al.· 0 citations
LLM agents use skills to improve performance on specialized tasks. To complete a user request, an agent may invoke several skills in sequence, allowing information produced under one skill to guide the next. Because skills may come from open-source repositories, this handoff can also carry attacker-controlled claims in...
Tian Dong, Zi-Xuan Ma, Haodong Zhao et al.· 1 citation
VulnGym is a real-world repository-level benchmark for evaluating vulnerability detection by coding agents that aligns reviewed GitHub advisories with their corresponding vulnerable version repositories and defines an end-to-end detection task and three oracle-based subtasks to jointly evaluate vulnerability detection...
Kexing Ji, Jiachen Liu, En-Ze Hu et al.· 2 citations
We use cookies to run the site and, with your consent, for analytics and to show ads.
See our Cookie Policy.