CWE labels in the National Vulnerability Database (NVD) are widely treated as ground truth for vulnerability search, scanner evaluation, benchmark construction, learning-based security tools, and vulnerability prioritization. Yet their reliability has not been systematically measured at scale, despite growing concerns...
Yu Nong, Yao Du, Majid Behravan et al.· 0 citations
This work investigates the data behind vulnerability analysis through a dataset-centric taxonomy that separates what an artifact is (code, metadata, patches, tests/PoCs, reasoning, traces), how good it is (realism, label evidence, scale, diversity, leakage, availability), and what it is used for.
Yu Nong, Yao Du, Tian-Xiang Xu et al.· 0 citations
POVGEN, a low-cost neuro-symbolic framework that makes PoV generation cost-effective via semantic focusing and LLM-guided constraint reasoning using open-weight models, and fine-tuned open-weight models match frontier commercial LLMs on key sub-tasks while running locally at no per-sample API cost.
Yu Nong, Hai-Peng Cai· 0 citations
We use cookies to run the site and, with your consent, for analytics and to show ads.
See our Cookie Policy.
