Evaluating and Improving Static Application Security Testing Tools for Rust

Rust has become a popular systems programming language in recent years because of its strong guarantees on memory and co

历史摘要 · 未重新核验 · arXiv cs.CR

QuasiLeak-Bench: Evaluating LLM-Based Privacy Detectors on Policy-Conditioned Quasi-Evidence Group Recovery

Natural language messages often contain quasi-identifiers that are weak in isolation but can jointly reveal an individua

历史摘要 · 未重新核验 · arXiv cs.CR

Combining LLM and Dynamic Analysis for Universal Testing of Static Application Security Testing Tools

Static application security testing (SAST) tools help detect potential software vulnerabilities, but they themselves con

历史摘要 · 未重新核验 · arXiv cs.CR

[原创]CVE-2020-6507利用链

CVE-2020-6507

[原创]CVE-2020-6507利用链

历史摘要 · 未重新核验 · 看雪

CVE-2026-39821：Go idna 纯 ASCII 标签解码漏报

CVE-2026-39821

CVE-2026-39821：Go idna 纯 ASCII 标签解码漏报

历史摘要 · 未重新核验 · 先知社区

CVE-2026-6791：8 MiB 输入击穿 glibc wordexp 栈

CVE-2026-6791

CVE-2026-6791：8 MiB 输入击穿 glibc wordexp 栈

历史摘要 · 未重新核验 · 先知社区

Bad Diagnosis: Analyzing Consent and Data Collection Practices of Mobile Medical Apps

Mobile health (mHealth) apps collect personally-identifiable information while handling uniquely sensitive medical data,

历史摘要 · 未重新核验 · arXiv cs.CR

Task-aware Kernel Stein certificates for Rényi differential privacy

Rènyi differential privacy, based on Rènyi divergence, has become a notion of choice for privacy guarantees. However, ou

历史摘要 · 未重新核验 · arXiv cs.CR

HardEval: An Execution-Verified Benchmark for AI-Driven Security Hardening and Compliance Remediation

Implementing Security Technical Implementation Guide (STIG) controls remains a demanding operating-system administration

历史摘要 · 未重新核验 · arXiv cs.CR

TUPLE-Bench: Evaluating and Mitigating Privacy-Utility Trade-offs in Typed Decision Models

Typed decision models often return more than a selected category. They also expose probabilities for each candidate and,

历史摘要 · 未重新核验 · arXiv cs.CR

From Billion-Scale to Million-Scale Language Models: Operational Capabilities for Embedded Post-Exploitation

Small Language Models (SLMs) are increasingly attractive for resource-constrained environments due to their low computat

历史摘要 · 未重新核验 · arXiv cs.CR

On the (In)stability of Adaptive Fee Mechanisms in Multi-Chain Systems

EIP-1559 has become the dominant transaction fee mechanism in permissionless blockchains, regulating scarce block space

历史摘要 · 未重新核验 · arXiv cs.CR

Trojan Horse: Automated Repository Poisoning against Coding Agents

Coding agents are increasingly capable with autonomy, which exposes them to repository-level poisoning. Existing red-tea

历史摘要 · 未重新核验 · arXiv cs.CR

Concrete Functions in Private Simultaneous Quantum Messages: Quantum Advantages and Structural Limitations

Private simultaneous quantum messages (PSQM) provide a minimal model of noninteractive secure multiparty quantum computa

历史摘要 · 未重新核验 · arXiv cs.CR

When Approval Becomes Execution: Authorization-Grounded Workflow Attacks on Tool-Using Agents

Tool-using language-model agents increasingly rely on local services for document access, approval management, and enter

历史摘要 · 未重新核验 · arXiv cs.CR

Aspire: Practical Batch Queries on Dynamic Encrypted Database with Full Leakage Suppression

Leakage-abuse attacks against encrypted database systems exploit semantic leakage and pose a severe threat to the confid

历史摘要 · 未重新核验 · arXiv cs.CR

Surprise Masking: Private Data Filtering with Model Likelihoods

Data useful for language model (LM) training can contain private or unwanted information that is at risk of being learne

历史摘要 · 未重新核验 · arXiv cs.CR

Towards Hyperparameter Transfer for Differentially Private Optimization

Scaling laws and hyperparameter tuning remain central challenges in training large-scale models, particularly under diff

历史摘要 · 未重新核验 · arXiv cs.CR

Provable Compliance: A Protocol for Runtime Compliance Evidence and Transaction-Specific Decisioning

Regulated institutions already perform onboarding, screening, monitoring, and review, but compliance evidence ages, and

历史摘要 · 未重新核验 · arXiv cs.CR

Provable Authority: A Protocol for Verifiable Authority Resolution and Control Across Human, Organizational, and Agentic Transactions

Payment systems authenticate users, devices, accounts, and cryptographic credentials, but a relying party, such as a cou

历史摘要 · 未重新核验 · arXiv cs.CR