DualGuard: Comprehensive and Efficient Memory Safety across Sequential and Speculative Execution
Although decades of research have yielded sophisticated mechanisms for enforcing memory safety, speculative execution ca
#cs.PL
共收录 42 条相关情报。
← 返回所有主题BUSTA: Teaching Small Language Models to Reason About Binary Execution
Large Language Models (LLM) are increasingly applied to Reverse Engineering (RE) workflows. RE, however, differs from co
safeL4: Rethinking Safe-Language-Based Single Address Space Microkernels
Microkernels provide good features such as high security, safety, and flexibility, but their reliance on hardware-based
A Rowhammer attack on Fil-C's software capabilities
Rowhammer is a hardware vulnerability in dynamic random-access memory (DRAM) in which repeated accesses to one or more a
Can Agentic Code Review Catch Vulnerabilities Before They Are Merged?
LLM agents have been increasingly adopted for security-focused code review, but existing benchmarks mostly derive the re
Execution-Time Validation of Context-Carrying Action Intents in Industrial Cyber-Physical Systems
In industrial cells, commands from learned policies, operators and schedulers reach the controller after inference, conf
Blame-aware Recomposition for Secure Compilation Proofs of Low-Level Compartment Isolation
The security guarantees of existing formally verified compilers for compartmentalized programs in unsafe languages like
VulnSAGE: Adjudicating SAST Reports by Connecting LLM Reasoning to Program Structure
Static Application Security Testing (SAST) reports flag operations whose safety depends on project-specific context, and
Faultless: A Program Equivalence Technique for Validating and Evaluating Neural Decompilers
该论文聚焦神经反编译器（neural decompiler）的可信度问题。神经反编译器是采用机器学习模型完成反编译任务的系统，作用是把低层语言（如汇编/中间表示）提升为高层语言（如 C 代码）。相比传统确定性反编译器，它的核心优势在于能够以
Automated Abstraction Refinement for Information Flow Security in Embedded Systems
本文聚焦安全敏感嵌入式系统的信息流安全验证问题。信息流分析（IFA）是验证机密性与完整性的重要手段，但嵌入式系统天然具有并发性与时间相关性，导致既有 IFA 方法往往陷入两难：要么抽象过于粗糙而精度不足、无法判定非法信息流是否存在，要么保持
TRACTOR Benchmark for Evaluating C to Rust Translators
该论文介绍 DARPA「Translating All C to Rust (TRACTOR)」项目框架下的一套标准化评测基准。研究背景是:C 与 C++ 等内存不安全语言长期承载大量关键软件,缓冲区溢出、释放后使用等内存安全漏洞也随之成为
Authorization Revocation for Long-Running AI Agents: Root-Scoped Quiescence under Delegation and Asynchronous Execution
该论文研究长时运行的 AI 智能体（long-running AI agents）在授权撤销方面的根本性缺陷。这类智能体往往比发起它的进程存活更久，其存活载体包括长期凭据、委托出去的子任务、消息队列、回调、资源预留以及服务提供方侧的操作记录
Type-Directed, Secure-by-Construction Enclave Partitioning for LLVM
本文针对可信执行环境（TEE）与低层语言（如 LLVM IR）结合时面临的安全分区问题展开研究。TEE 通过 enclave 提供硬件级隔离，但仅依靠它无法保证信息流安全；LLVM 这类语言允许不受限制的指针操作和非结构化控制流，进一步加剧
Griotte: Verified Compartmentalisation via Capabilities
本文提出 Griotte 和 Griotte OS，这是对 CHERIoT 硬件能力机器与 CHERIoT RTOS 的抽象化但忠实的建模，旨在为 CHERIoT 的分区隔离（compartmentalisation）安全保证提供形式化验证
POLYFLOW: A Neuro-Symbolic Framework for Static Cross-Language Information Flow Analysis
现代软件系统通常由多种编程语言混合构建（如 Python 与 C、Java 与 C 的交互），这种跨语言架构会因语言间的语义差异和隐式交互引入难以察觉的漏洞。传统静态分析器受限于不同语言语义的异构性，往往无法有效建模跨语言的数据流；动态分析
Information Flow Control in Off-Chain Components
本文针对带有链下组件的区块链智能合约语言，建立了一种形式化模型。链下组件是在区块链节点网络之外的指定位置执行的智能合约片段，但它们与链上合约状态保持同步。它们不仅响应链上状态的变化，还能将外部世界的事件（如股票价格、天气数据）通知给链上组件
When Can Agents Safely Checkpoint, Fork, Restore, and Merge? Exact Checking for Execution Edits
本文研究智能体（Agent）运行时环境中一种被称为“执行编辑”（execution edits）的操作安全性问题。执行编辑包括 Checkpoint（记录当前执行状态）、Fork（分支）、Restore（恢复某个检查点）和 Merge（合并
Rust for Secure Backend Development: A Critical Review and Extended Vulnerability Comparison with Node.js and Django
该论文对 Rust 在安全后端开发中的适用性进行了批判性回顾与扩展性漏洞比较。作者首先回顾了既有关于 Rust 安全性的工业研究，指出现有分类法（基于 SANS Top 25、OWASP Top 10 和 19 Deadly Sins 框架
SpecTrum: Specification-Guided Differential Fuzzing for Ethereum Consensus Clients
以太坊的共识安全依赖于多个独立实现的共识客户端在每个状态转换上保持一致。若实现差异导致分歧，网络可能分叉、最终性停滞，并引发严重攻击。为防止此类共识分歧，以太坊提供了 Python 参考实现（consensus-spec）作为规范，并附带手
Beyond Single-Vulnerability Evaluation: Closing the Engineering Decision Gap Between C Retrofits and Native Safety
本文针对C语言内存安全加固研究中普遍存在的“单漏洞类孤立评估”问题，提出了一种全新的跨语言比较评估范式。过去数十年，研究者提出了许多针对C语言的内存安全回填机制，但这些机制几乎总是在孤立条件下、针对特定漏洞类型进行评估，导致实际工程实践中难