research
∙
12/19/2021
What are Weak Links in the npm Supply Chain?
Modern software development frequently uses third-party packages, raisin...
share
research
∙
03/05/2021
Anomalicious: Automated Detection of Anomalous and Potentially Malicious Commits on GitHub
Security is critical to the adoption of open source software (OSS), yet ...
research
∙
12/21/2020
Universal Policies for Software-Defined MDPs
We introduce a new programming paradigm called oracle-guided decision pr...
research
∙
05/23/2020
Pythia: Grammar-Based Fuzzing of REST APIs with Coverage-guided Feedback and Learning-based Mutations
This paper introduces Pythia, the first fuzzer that augments grammar-bas...
research
∙
06/26/2018
REST-ler: Automatic Intelligent REST API Fuzzing
Cloud services have recently exploded with the advent of powerful cloud-...
research
∙
01/14/2018
Deep Reinforcement Fuzzing
Fuzzing is the process of finding security vulnerabilities in input-proc...
research
∙
01/25/2017