Towards Generic Database Management System Fuzzing
Discover how BUZZBEE framework revolutionizes database security testing by effectively fuzzing both SQL and NoSQL systems, revealing vulnerabilities and achieving superior code coverage compared to existing solutions.
Fuzzing BusyBox - Leveraging LLM and Crash Reuse for Embedded Bug Unearthing
Discover innovative techniques for enhancing embedded system security through LLM-powered fuzzing and crash reuse, focusing on BusyBox vulnerability detection and software testing optimization.
PentestGPT: Evaluating and Harnessing Large Language Models for Automated Penetration Testing
Explore how PentestGPT leverages LLMs to automate penetration testing, addressing challenges in context maintenance and demonstrating significant improvements in task completion for security testing.
Formalizing and Benchmarking Prompt Injection Attacks and Defenses
Explore a systematic framework for understanding and evaluating prompt injection attacks on LLM applications, including analysis of 5 attack types and 10 defense mechanisms across multiple models.
Vulnerability-oriented Testing for RESTful APIs
Discover a novel framework for detecting security vulnerabilities in RESTful APIs through functionality-based testing, featuring practical demonstrations and real-world applications in API security testing.
VulSim: Leveraging Similarity of Multi-Dimensional Neighbor Embeddings for Vulnerability Detection
Explore advanced vulnerability detection techniques using multi-dimensional neighbor embeddings and deep learning models to enhance software security through improved pattern recognition and data analysis.
FIRE: Combining Multi-Stage Filtering with Taint Analysis for Scalable Recurring Vulnerability Detection
Discover how FIRE combines multi-stage filtering and taint analysis to efficiently detect recurring vulnerabilities in open-source software, achieving 90% precision and superior performance over existing tools.
Large Language Models for Code Analysis - Evaluating LLM Performance and Limitations
Explore the capabilities and limitations of Large Language Models in code analysis, focusing on their effectiveness with obfuscated code and real-world applications through systematic evaluation.
Web Platform Threats: Automated Detection of Web Security Issues with WPT
Discover how automated detection frameworks identify security flaws in web browser mechanisms, exploring practical approaches to validate web invariants and detect vulnerabilities across major browsers.
A Binary-level Thread Sanitizer - Why Sanitizing on the Binary Level is Hard
Explore the challenges and solutions of binary-level thread sanitization through BINTSAN, a novel approach for detecting data races in Linux x86-64 targets without source code access.
Yes, One-Bit-Flip Matters! Universal DNN Model Inference Depletion with Runtime Code Fault Injection
Explore FrameFlip, a groundbreaking attack method that depletes DNN model inference through single-bit fault injections, demonstrating universal effectiveness across major machine learning frameworks.
A Taxonomy of C Decompiler Fidelity Issues
Explore a comprehensive analysis of C decompiler output fidelity issues, examining defects beyond missing names and types to improve reverse engineering effectiveness in security analysis.
HYPERPILL: Fuzzing for Hypervisor Bugs by Leveraging the Hardware Virtualization Interface
Discover a groundbreaking approach to hypervisor security testing through HYPERPILL - a universal fuzzing framework that identifies vulnerabilities across major hypervisors using hardware virtualization interfaces.
What IF Is Not Enough? Fixing Null Pointer Dereference with Contextual Check
Discover how CONCH improves null pointer dereference fixes by incorporating contextual checks, achieving 85%+ patch accuracy through innovative intraprocedural and interprocedural analysis techniques.
Ultimate Web Scraping Tutorial - From HTML Collection to Advanced Libraries
Master essential web scraping techniques using Python libraries like BeautifulSoup, Selenium, and Scrapy to efficiently collect and process data from websites while following best practices and security guidelines.
Breaking Espressif's ESP32 V3: Program Counter Control with Computed Values Using Fault Injection
Discover how researchers bypassed ESP32 V3's security features through fault injection attacks, exposing vulnerabilities in Secure Boot and Flash Encryption systems with electromagnetic glitching techniques.
Climbing Trees and Catching Bugs - Working with Tree Data Structures in APL
Explore tree data structures in APL through parent vector representation, with animated illustrations and practical examples for array-oriented manipulation and workspace management.
Beyond Selenium - Comparing Modern Web Testing Tools
Explore modern web testing alternatives to Selenium, comparing features and limitations of Playwright and Cypress to make informed decisions for your automation testing needs.
Effective Unit and Integration Testing - Pitfalls and How to Avoid Them
Master essential unit and integration testing practices through real-world examples, common pitfalls, and proven solutions for writing effective tests that enhance code quality and reliability.
The State of Web Testing in 2024 - Modern Tools and Strategies
Explore modern web testing tools and strategies beyond Selenium, covering end-to-end and component testing approaches for building effective automation frameworks in 2024.
Leveraging Pattern Object Model for Efficient Test Automation
Discover how Pattern Object Model revolutionizes test automation, enabling testers of all skill levels to create maintainable, efficient automated tests while reducing complexity and improving team collaboration.