Image de couverture de livre

Beyond Static Pattern Matching? Rethinking Automatic Cryptographic API Misuse Detection in the Era of LLMs

Fuente: arXiv

Enregistré dans:

Détails bibliographiques
Auteurs principaux:	Xia, Yifan, Xie, Zichen, Liu, Peiyu, Lu, Kangjie, Liu, Yan, Wang, Wenhai, Ji, Shouling
Format:	Preprint
Publié:	2024
Sujets:	Cryptography and Security
Accès en ligne:	Acceder al recurso
Tags:	Ajouter un tag Pas de tags, Soyez le premier à ajouter un tag!

Documents similaires

Static Semantics Reconstruction for Enhancing JavaScript-WebAssembly Multilingual Malware Detection
par: Xia, Yifan, et autres
Publié: (2023)

Beyond Static Tools: Evaluating Large Language Models for Cryptographic Misuse Detection
par: Masood, Zohaib, et autres
Publié: (2024)

Mutation-based Evaluation of Cryptographic API Misuse Detectors
par: Ami, Amit Seal, et autres
Publié: (2021)

The Midas Touch: Triggering the Capability of LLMs for RM-API Misuse Detection
par: Yang, Yi, et autres
Publié: (2024)

Exploring ChatGPT's Capabilities on Vulnerability Management
par: Liu, Peiyu, et autres
Publié: (2023)

Generating API Parameter Security Rules with LLM for API Misuse Detection
par: Liu, Jinghua, et autres
Publié: (2024)

Evaluating Cryptographic API Misuse Detectors for Go
par: Andersson, Vivi, et autres
Publié: (2026)

Cuckoo Attack: Stealthy and Persistent Attacks Against AI-IDE
par: Liu, Xinpeng, et autres
Publié: (2025)

"MCP Does Not Stand for Misuse Cryptography Protocol": Uncovering Cryptographic Misuse in Model Context Protocol at Scale
par: Yan, Biwei, et autres
Publié: (2025)

From base cases to backdoors: An Empirical Study of Unnatural Crypto-API Misuse
par: Olaiya, Victor, et autres
Publié: (2025)

LibScan: Smart Contract Library Misuse Detection with Iterative Feedback and Static Verification
par: Wang, Yishun, et autres
Publié: (2026)

Confusion is the Final Barrier: Rethinking Jailbreak Evaluation and Investigating the Real Misuse Threat of LLMs
par: Yan, Yu, et autres
Publié: (2025)

LuaTaint: A Static Analysis System for Web Configuration Interface Vulnerability of Internet of Things Devices
par: Xiang, Jiahui, et autres
Publié: (2024)

FirmRCA: Towards Post-Fuzzing Analysis on ARM Embedded Firmware with Efficient Event-based Fault Localization
par: Chang, Boyu, et autres
Publié: (2024)

API Security Based on Automatic OpenAPI Mapping
par: Levi, Yarin, et autres
Publié: (2026)

R+R: Reassessing Java Security API Misuse in Current LLMs: A Replication on JCA and JSSE APIs with External Security Knowledge
par: Lu, Tianhe, et autres
Publié: (2026)

APILOT: Navigating Large Language Models to Generate Secure Code by Sidestepping Outdated API Pitfalls
par: Bai, Weiheng, et autres
Publié: (2024)

PolyJailbreak: Cross-Modal Jailbreaking Attacks on Black-Box Multimodal LLMs
par: Wang, Xinkai, et autres
Publié: (2025)

ChatGPT's Potential in Cryptography Misuse Detection: A Comparative Analysis with Static Analysis Tools
par: Firouzi, Ehsan, et autres
Publié: (2024)

Automatic Generation of a Cryptography Misuse Taxonomy Using Large Language Models
par: Zhang, Yang, et autres
Publié: (2025)

Beyond Input Guardrails: Reconstructing Cross-Agent Semantic Flows for Execution-Aware Attack Detection
par: Wei, Yangyang, et autres
Publié: (2026)

Detecting Cryptographically Relevant Software Packages with Collaborative LLMs
par: Hirsch, Eduard, et autres
Publié: (2026)

Safeguarding LLMs Against Misuse and AI-Driven Malware Using Steganographic Canaries
par: Raz, Md, et autres
Publié: (2026)

Rethinking the Vulnerabilities of Face Recognition Systems:From a Practical Perspective
par: Chen, Jiahao, et autres
Publié: (2024)

ReCIT: Reconstructing Full Private Data from Gradient in Parameter-Efficient Fine-Tuning of Large Language Models
par: Xie, Jin, et autres
Publié: (2025)

SQLaser: Detecting DBMS Logic Bugs with Clause-Guided Fuzzing
par: Wei, Jin, et autres
Publié: (2024)

Hierarchical Pattern Decryption Methodology for Ransomware Detection Using Probabilistic Cryptographic Footprints
par: Pekepok, Kevin, et autres
Publié: (2025)

Weaver: Fuzzing JavaScript Engines at the JavaScript-WebAssembly Boundary
par: Zhang, Lingming, et autres
Publié: (2026)

FoC: Figure out the Cryptographic Functions in Stripped Binaries with LLMs
par: Shang, Xiuwei, et autres
Publié: (2024)

Understanding AI Methods for Intrusion Detection and Cryptographic Leakage
par: Zilouchian, Reza, et autres
Publié: (2026)

Beyond Pattern Matching: Seven Cross-Domain Techniques for Prompt Injection Detection
par: Munirathinam, Thamilvendhan
Publié: (2026)

LASHED: LLMs And Static Hardware Analysis for Early Detection of RTL Bugs
par: Ahmad, Baleegh, et autres
Publié: (2025)

Cryptographic Choreographies
par: Mödersheim, Sebastian, et autres
Publié: (2026)

Beyond Surface Alignment: Rebuilding LLMs Safety Mechanism via Probabilistically Ablating Refusal Direction
par: Xie, Yuanbo, et autres
Publié: (2025)

SCRUTINEER: Detecting Logic-Level Usage Violations of Reusable Components in Smart Contracts
par: Lin, Xingshuang, et autres
Publié: (2025)

Detecting Misuse of Security APIs: A Systematic Review
par: Mousavi, Zahra, et autres
Publié: (2023)

Fundamentals, Recent Advances, and Challenges Regarding Cryptographic Algorithms for the Quantum Computing Era
par: Noetzold, Darlan, et autres
Publié: (2026)

On the Formalization of Cryptographic Migration
par: Loebenberger, Daniel, et autres
Publié: (2024)

Understanding Mobile App Reviews to Guide Misuse Audits
par: Garg, Vaibhav, et autres
Publié: (2023)

Persistent Human Feedback, LLMs, and Static Analyzers for Secure Code Generation and Vulnerability Detection
par: Firouzi, Ehsan, et autres
Publié: (2026)