Copertina

QLCoder: A Query Synthesizer For Static Analysis of Security Vulnerabilities

Fuente: arXiv

Salvato in:

Dettagli Bibliografici
Autori principali:	Wang, Claire, Li, Ziyang, Dutta, Saikat, Naik, Mayur
Natura:	Preprint
Pubblicazione:	2025
Soggetti:	Cryptography and Security Programming Languages Software Engineering
Accesso online:	Acceder al recurso
Tags:	Aggiungi Tag Nessun Tag, puoi essere il primo ad aggiungerne!!

Documenti analoghi

IRIS: LLM-Assisted Static Analysis for Detecting Security Vulnerabilities
di: Li, Ziyang, et al.
Pubblicazione: (2024)

Understanding the Effectiveness of Large Language Models in Detecting Security Vulnerabilities
di: Khare, Avishree, et al.
Pubblicazione: (2023)

Extracting Protocol Format as State Machine via Controlled Static Loop Analysis
di: Shi, Qingkai, et al.
Pubblicazione: (2023)

Static Deadlock Detection for Rust Programs
di: Zhang, Yu, et al.
Pubblicazione: (2024)

Argus: Reorchestrating Static Analysis via a Multi-Agent Ensemble for Full-Chain Security Vulnerability Detection
di: Liang, Zi, et al.
Pubblicazione: (2026)

SAGA: Detecting Security Vulnerabilities Using Static Aspect Analysis
di: Marquer, Yoann, et al.
Pubblicazione: (2026)

Demystifying Invariant Effectiveness for Securing Smart Contracts
di: Chen, Zhiyang, et al.
Pubblicazione: (2024)

iResolveX: Multi-Layered Indirect Call Resolution via Static Reasoning and Learning-Augmented Refinement
di: Santra, Monika, et al.
Pubblicazione: (2026)

DeepCode AI Fix: Fixing Security Vulnerabilities with Large Language Models
di: Berabi, Berkay, et al.
Pubblicazione: (2024)

Symbolic Execution Meets Multi-LLM Orchestration: Detecting Memory Vulnerabilities in Incomplete Rust CVE Snippets
di: Abdelrazek, Zeyad, et al.
Pubblicazione: (2026)

The Secrets Must Not Flow: Scaling Security Verification to Large Codebases (extended version)
di: Arquint, Linard, et al.
Pubblicazione: (2025)

YASA: Scalable Multi-Language Taint Analysis on the Unified AST at Ant Group
di: Wang, Yayi, et al.
Pubblicazione: (2026)

HardTaint: Production-Run Dynamic Taint Analysis via Selective Hardware Tracing
di: Zhang, Yiyu, et al.
Pubblicazione: (2024)

From Solitary Directives to Interactive Encouragement! LLM Secure Code Generation by Natural Language Prompting
di: Liu, Shigang, et al.
Pubblicazione: (2024)

Translating C To Rust: Lessons from a User Study
di: Li, Ruishi, et al.
Pubblicazione: (2024)

Many Tools, Few Exploitable Vulnerabilities: A Survey of 246 Static Code Analyzers for Security
di: Hermann, Kevin, et al.
Pubblicazione: (2026)

Artemis: Toward Accurate Detection of Server-Side Request Forgeries through LLM-Assisted Inter-Procedural Path-Sensitive Taint Analysis
di: Ji, Yuchen, et al.
Pubblicazione: (2025)

OpenTracer: A Dynamic Transaction Trace Analyzer for Smart Contract Invariant Generation and Beyond
di: Chen, Zhiyang, et al.
Pubblicazione: (2024)

UEFI Vulnerability Signature Generation using Static and Symbolic Analysis
di: Shafiuzzaman, Md, et al.
Pubblicazione: (2024)

Guiding Symbolic Execution with Static Analysis and LLMs for Vulnerability Discovery
di: Shafiuzzaman, Md, et al.
Pubblicazione: (2026)

UBfuzz: Finding Bugs in Sanitizer Implementations
di: Li, Shaohua, et al.
Pubblicazione: (2024)

Belobog: Move Language Fuzzing Framework For Real-World Smart Contracts
di: Kong, Ziqiao, et al.
Pubblicazione: (2025)

Static Security Vulnerability Scanning of Proprietary and Open-Source Software: An Adaptable Process with Variants and Results
di: Cusick, James J.
Pubblicazione: (2025)

SmartInv: Multimodal Learning for Smart Contract Invariant Inference
di: Wang, Sally Junsong, et al.
Pubblicazione: (2024)

CrossInspector: A Static Analysis Approach for Cross-Contract Vulnerability Detection
di: Chen, Xiao
Pubblicazione: (2024)

Can LLM Prompting Serve as a Proxy for Static Analysis in Vulnerability Detection
di: Ceka, Ira, et al.
Pubblicazione: (2024)

A Broad Comparative Evaluation of Software Debloating Tools
di: Brown, Michael D., et al.
Pubblicazione: (2023)

Hornet Node and the Hornet DSL: A Minimal, Executable Specification for Bitcoin Consensus
di: Sharp, Toby
Pubblicazione: (2025)

LuaTaint: A Static Analysis System for Web Configuration Interface Vulnerability of Internet of Things Devices
di: Xiang, Jiahui, et al.
Pubblicazione: (2024)

Arguzz: Testing zkVMs for Soundness and Completeness Bugs
di: Hochrainer, Christoph, et al.
Pubblicazione: (2025)

Beyond Imprecise Distance Metrics: Trace-Guided Directed Greybox Fuzzing via LLM-Predicted Call Stacks
di: Zhang, Yifan, et al.
Pubblicazione: (2025)

An Empirical Study of Bitwise Operators Intuitiveness through Performance Metrics
di: Joshi, Shubham
Pubblicazione: (2025)

Yaksha-Prashna: Understanding eBPF Bytecode Network Function Behavior
di: Singh, Animesh, et al.
Pubblicazione: (2026)

Dynamic Taint Tracking using Partial Instrumentation for Java Applications
di: Thakur, Manoj RameshChandra
Pubblicazione: (2024)

Fuzzing Processing Pipelines for Zero-Knowledge Circuits
di: Hochrainer, Christoph, et al.
Pubblicazione: (2024)

Accurate and Extensible Symbolic Execution of Binary Code based on Formal ISA Semantics
di: Tempel, Sören, et al.
Pubblicazione: (2024)

Large Language Models for Code: Security Hardening and Adversarial Testing
di: He, Jingxuan, et al.
Pubblicazione: (2023)

VERCATION: Precise Vulnerable Open-source Software Version Identification based on Static Analysis and LLM
di: Cheng, Yiran, et al.
Pubblicazione: (2024)

Agent Skills in the Wild: An Empirical Study of Security Vulnerabilities at Scale
di: Liu, Yi, et al.
Pubblicazione: (2026)

CrossCommitVuln-Bench: A Dataset of Multi-Commit Python Vulnerabilities Invisible to Per-Commit Static Analysis
di: Majumdar, Arunabh
Pubblicazione: (2026)