V UL G ENIE is a patch-driven framework that extracts precise API security rules from confirmed security patches to then detect API misuse vulnerabilities, and scales analysis with adaptive, deviation-guided static analysis to balance precision and performance.
Experimental results show that AST-based structural features substantially improve recall compared with the TF-IDF baseline, while the combined TF-IDF and AST representation maintains this improved performance.
Vani Pasupula, M. N. V. Manikanth, Nagaraju Vassey· International Journal of Cre...· 0 citations
SA2Pat (Security Advisory to Patch), a framework that accurately localizes security patches by learning from patterns in historical vulnerability fixes, is proposed, and a fine-tuned SecureBERT model is employed to predict the likely CWE ID, ensuring that the input information remains complete.
Ze-Tan Li, Xiaoya Zhu, Zhuo Li et al.· Empirical Software Engineeri...· 0 citations
The Static-Pass Dynamic-Fail (SPDF) phenomenon and a three-stage agentic pipeline combining static scanning, LLM-driven Common Weakness Enumeration (CWE) reasoning, and autonomous exploit verification in isolated Docker containers are introduced.
Jessica Pourleyli, Maitreyee Das Urmi, Glaucia Melo· 0 citations
SETYPE is presented, a semantics-aware type system that can be derived directly from source code based solely on the meanings of symbols and expressions in natural language that achieves 87% detection precision and 88% detection accuracy on real-world applications.
This work presents an intelligent approach for improving web application security through the prediction and detection of SQL injection attacks using machine learning techniques, enabling faster, more reliable, and automated detection of SQL injection vulnerabilities.
D. A. Reddy, G.Rajini· International Journal of Eng...· 0 citations
A defensive capability analysis for JavaScript libraries that soundly reports every exercised capability for code executed under a lightweight protected runtime, complementing the static analysis with a lightweight runtime enforcement mechanism that blocks those patterns.
Unknown authors· 1 citation
We use cookies to run the site and, with your consent, for analytics and to show ads.
See our Cookie Policy.
