Automated program repair (APR) aims to fix software bugs automatically and plays a crucial
role in software development and maintenance. With the recent advances in deep learning …

In the research of mining software repositories, we need to label a large amount of data to
construct a predictive model. The correctness of the labels will affect the performance of a …

The rapid advancement of Large Language Models (LLMs) has opened up new
opportunities for leveraging artificial intelligence in various domains, including cybersecurity …

Various approaches are proposed to help under-resourced security researchers to detect
and analyze software vulnerabilities. It is still incredibly time-consuming and labor-intensive …

Vulnerabilities publicly disclosed in the National Vulnerability Database (NVD) are assigned
with CVE (Common Vulnerabilities and Exposures) IDs and associated with specific …

Continuous fuzzing is an increasingly popular technique for automated quality and security
assurance. Google maintains OSS-Fuzz: a continuous fuzzing service for open source …

Modern software systems are increasingly relying on dependencies from the ecosystem. A
recent estimation shows that around 35% of an open-source project's code come from its …

The energy allocation strategy is one of the most popular techniques in fuzzing to improve
code coverage and vulnerability discovery. The core intuition is that fuzzers should allocate …

Different security issues are a common problem for open source packages archived to and
delivered through software ecosystems. These often manifest themselves as software …

Fuzzing has emerged as the most effective bug-finding technique. The output of a fuzzer is a
set of proof-of-concept (PoC) test cases for all observed" unique''crashes. It costs developers …