Demonstration venue · read-only. Every page can be browsed; the buttons that would change it are switched off. Create an account to run TaxoReview on your own data. A simulation from public publication records: the people listed were not invited and did not agree to review.
? Tutorial for this page

Guangbei Yi

dblp:353/7616 · DBLP profile ↗
← Back
2ranked-venue papers
0as first author
2since 2021 · last 2024
0009-0009-6679-5153ORCID · reported

Domains — the database's venue-derived domains; a paper can count in several

Security and privacy · 1 · 1 since 2021Software engineering, systems software and programming languages · 1 · 1 since 2021

Expertise — from the expertise taxonomy: the topics of the expert's papers under the CCF categories. A weight counts papers with recency: 1 for a paper about the topic, 0.3 when the topic is its context, halved every five years.

Software engineering, system software, and programming languages
2 papers
Software testing · 76% Program analysis · 24%
Network and information security
1 paper
Systems and software security · 100%

Topics — the 6 heaviest of 6, each with the papers that count most for it

TopicWeightPapersLastEvidence papers
Systems and software security › vulnerability discovery
vulnerability dataset generation
0.812024
VGX: Large-Scale Sample Generation for Boosting Learning-Based Software Vulnerability Analyses · ICSE 2024
Systems and software security
vulnerability discovery
0.812024
VGX: Large-Scale Sample Generation for Boosting Learning-Based Software Vulnerability Analyses · ICSE 2024
Software testing
fuzzing
0.712023
PolyFuzz: Holistic Greybox Fuzzing of Multi-Language Systems · USENIX Security Symposium 2023
Software testing › fuzzing
greybox fuzzing
0.712023
PolyFuzz: Holistic Greybox Fuzzing of Multi-Language Systems · USENIX Security Symposium 2023
Program analysis
code representation learning
0.212024
VGX: Large-Scale Sample Generation for Boosting Learning-Based Software Vulnerability Analyses · ICSE 2024
Program analysis
dynamic analysis
0.212023
PolyFuzz: Holistic Greybox Fuzzing of Multi-Language Systems · USENIX Security Symposium 2023

Methods — techniques the papers use, named apart from their topics

value-flow-based position encoding · 1.5transformer · 1.5pre-training · 1.5greybox fuzzing · 0.7
YearPublicationVenuePosition
2024 VGX: Large-Scale Sample Generation for Boosting Learning-Based Software Vulnerability Analyses
abstract
Accompanying the successes of learning-based defensive software vulnerability analyses is the lack of large and quality sets of labeled vulnerable program samples, which impedes further advancement of those defenses. Existing automated sample generation approaches have shown potentials yet still fall short of practical expectations due to the high noise in the generated samples. This paper proposes VGX, a new technique aimed for large-scale generation of high-quality vulnerability datasets. Given a normal program, VGX identifies the code contexts in which vulnerabilities can be injected, using a customized Transformer featured with a new value-flow-based position encoding and pre-trained against new objectives particularly for learning code structure and context. Then, VGX materializes vulnerability-injection code editing in the identified contexts using patterns of such edits obtained from both historical fixes and human knowledge about real-world vulnerabilities.
Yu Nong, Richard Fang, Guangbei Yi, Kunsong Zhao, Xiapu Luo, Feng Chen 0001, Haipeng Cai
ICSE3
2023 PolyFuzz: Holistic Greybox Fuzzing of Multi-Language Systems
Wen Li 0007, Jinyang Ruan, Guangbei Yi, Long Cheng 0005, Xiapu Luo, Haipeng Cai
USENIX Security Symposium3