Copertina

Artemis: Toward Accurate Detection of Server-Side Request Forgeries through LLM-Assisted Inter-Procedural Path-Sensitive Taint Analysis

Fuente: arXiv

Salvato in:

Dettagli Bibliografici
Autori principali:	Ji, Yuchen, Dai, Ting, Zhou, Zhichao, Tang, Yutian, He, Jingzhu
Natura:	Preprint
Pubblicazione:	2025
Soggetti:	Cryptography and Security Programming Languages Software Engineering
Accesso online:	Acceder al recurso
Tags:	Aggiungi Tag Nessun Tag, puoi essere il primo ad aggiungerne!!

Documenti analoghi

HardTaint: Production-Run Dynamic Taint Analysis via Selective Hardware Tracing
di: Zhang, Yiyu, et al.
Pubblicazione: (2024)

Harnessing the Power of LLM to Support Binary Taint Analysis
di: Liu, Puzhuo, et al.
Pubblicazione: (2023)

An LLM-based Readability Measurement for Unit Tests' Context-aware Inputs
di: Zhou, Zhichao, et al.
Pubblicazione: (2024)

Multi-Agent Taint Specification Extraction for Vulnerability Detection
di: Ghebremichael, Jonah, et al.
Pubblicazione: (2026)

Beyond Function-Level Analysis: Context-Aware Reasoning for Inter-Procedural Vulnerability Detection
di: Li, Yikun, et al.
Pubblicazione: (2026)

On the Effectiveness of Function-Level Vulnerability Detectors for Inter-Procedural Vulnerabilities
di: Li, Zhen, et al.
Pubblicazione: (2024)

YASA: Scalable Multi-Language Taint Analysis on the Unified AST at Ant Group
di: Wang, Yayi, et al.
Pubblicazione: (2026)

Taint-Style Vulnerability Detection and Confirmation for Node.js Packages Using LLM Agent Reasoning
di: Ni, Ronghao, et al.
Pubblicazione: (2026)

ZTaint-Havoc: From Havoc Mode to Zero-Execution Fuzzing-Driven Taint Inference
di: Xie, Yuchong, et al.
Pubblicazione: (2025)

LLM-Redactor: An Empirical Evaluation of Eight Techniques for Privacy-Preserving LLM Requests
di: Agyemang, Justice Owusu, et al.
Pubblicazione: (2026)

Dynamic Taint Tracking using Partial Instrumentation for Java Applications
di: Thakur, Manoj RameshChandra
Pubblicazione: (2024)

LuaTaint: A Static Analysis System for Web Configuration Interface Vulnerability of Internet of Things Devices
di: Xiang, Jiahui, et al.
Pubblicazione: (2024)

Taint Analysis for Graph APIs Focusing on Broken Access Control
di: Lambers, Leen, et al.
Pubblicazione: (2025)

Learning to Triage Taint Flows Reported by Dynamic Program Analysis in Node.js Packages
di: Ni, Ronghao, et al.
Pubblicazione: (2025)

MCP-SandboxScan: WASM-based Secure Execution and Runtime Analysis for MCP Tools
di: Tan, Zhuoran, et al.
Pubblicazione: (2026)

Auditing MCP Servers for Over-Privileged Tool Capabilities
di: Huang, Charoes, et al.
Pubblicazione: (2026)

When MCP Servers Attack: Taxonomy, Feasibility, and Mitigation
di: Zhao, Weibo, et al.
Pubblicazione: (2025)

KEENHash: Hashing Programs into Function-Aware Embeddings for Large-Scale Binary Code Similarity Analysis
di: Liu, Zhijie, et al.
Pubblicazione: (2025)

Fuzzing Frameworks for Server-side Web Applications: A Survey
di: Dharmaadi, I Putu Arya, et al.
Pubblicazione: (2024)

SmartOracle: Generating Smart Contract Oracle via Fine-Grained Invariant Detection
di: Su, Jianzhong, et al.
Pubblicazione: (2024)

LLM-Assisted Model-Based Fuzzing of Protocol Implementations
di: Huang, Changze, et al.
Pubblicazione: (2025)

From Component Manipulation to System Compromise: Understanding and Detecting Malicious MCP Servers
di: Huang, Yiheng, et al.
Pubblicazione: (2026)

Security in the Age of AI Teammates: An Empirical Study of Agentic Pull Requests on GitHub
di: Siddiq, Mohammed Latif, et al.
Pubblicazione: (2026)

Coverage Goal Selector for Combining Multiple Criteria in Search-Based Unit Test Generation
di: Zhou, Zhichao, et al.
Pubblicazione: (2023)

Finding Missing Input Validation in TEEs via LLM-Assisted Symbolic Execution
di: Ma, Chengyan, et al.
Pubblicazione: (2026)

Towards Demystifying and Repairing LLM-in-the-Loop Vulnerabilities
di: Ma, Yujie, et al.
Pubblicazione: (2026)

OpDiffer: LLM-Assisted Opcode-Level Differential Testing of Ethereum Virtual Machine
di: Ma, Jie, et al.
Pubblicazione: (2025)

Automated Repair of TEE Partitioning Issues via DSL-Guided and LLM-Assisted Patching
di: Ma, Chengyan, et al.
Pubblicazione: (2026)

LSPFuzz: Hunting Bugs in Language Servers
di: Zhu, Hengcheng, et al.
Pubblicazione: (2025)

SABER: Benchmarking Operational Safety of LLM Coding Agents in Stateful Project Workspaces
di: Hu, Qi, et al.
Pubblicazione: (2026)

Fast and Accurate Silent Vulnerability Fix Retrieval
di: Liu, Xueqing, et al.
Pubblicazione: (2025)

iblock: Accurate and Scalable Bitcoin Simulations with OMNeT++
di: Scatena, Niccolò, et al.
Pubblicazione: (2025)

An Automated Blackbox Noncompliance Checker for QUIC Server Implementations
di: Ang, Kian Kai, et al.
Pubblicazione: (2025)

Probing Privacy Leaks in LLM-based Code Generation via Test Generation
di: Ge, Yifei, et al.
Pubblicazione: (2026)

LeakGuard: Detecting Memory Leaks Accurately and Scalably
di: Liang, Hongliang, et al.
Pubblicazione: (2025)

IRIS: LLM-Assisted Static Analysis for Detecting Security Vulnerabilities
di: Li, Ziyang, et al.
Pubblicazione: (2024)

VIPER-MCP: Detecting and Exploiting Taint-Style Vulnerabilities in Model Context Protocol Servers
di: Sun, Pengyu, et al.
Pubblicazione: (2026)

Towards Understanding and Characterizing Vulnerabilities in Intelligent Connected Vehicles through Real-World Exploits
di: Wang, Yuelin, et al.
Pubblicazione: (2026)

Measuring and Exploiting Contextual Bias in LLM-Assisted Security Code Review
di: Mitropoulos, Dimitris, et al.
Pubblicazione: (2026)

Needles at Scale: LLM-Assisted Target Selection for Windows Vulnerability Research
di: Bommarito II, Michael J.
Pubblicazione: (2026)