Demo Data from SIGIR 2026 / reviewers in the wild / expert
Fute Sun
dblp:419/0116
· DBLP profile ↗
3ranked-venue papers
1as first author
3since 2021 · last 2026
0009-0006-5523-1916ORCID · corroborated
Domains — the database's venue-derived domains; a paper can count in several
Security and privacy · 2 · 1 first-author · 2 since 2021Software engineering, systems software and programming languages · 1 · 1 since 2021
Expertise — from the expertise taxonomy: the topics of the expert's papers under the CCF categories. A weight counts papers with recency: 1 for a paper about the topic, 0.3 when the topic is its context, halved every five years.
| Software engineering, system software, and programming languages
3 papers |
Program analysis · 81% Software maintenance and evolution · 19% | |
| Network and information security
3 papers |
Blockchain and cryptocurrency security · 59% Systems and software security · 41% |
Topics — the 7 heaviest of 7, each with the papers that count most for it
| Topic | Weight | Papers | Last | Evidence papers |
|---|---|---|---|---|
Blockchain and cryptocurrency security › smart contract security
vulnerability detection |
1.3 | 2 | 2026 | Fine-Grained Detection of Java Cross-Library Vulnerability Propagation by Extracting Semantic Constraints From Security Patches · IEEE Trans. Dependable Secur. Comput. 2026 Exploring Static Taint Analysis in LLMs: A Dynamic Benchmarking Framework for Measurement and Enhancement · ASE 2025 |
Systems and software security › software vulnerability
denial-of-service vulnerability |
0.9 | 1 | 2025 | Careless Retention and Management: Understanding and Detecting Data Retention Denial-of-Service Vulnerabilities in Java Web Containers · USENIX Security Symposium 2025 |
Program analysis
static analysis |
0.9 | 1 | 2025 | Exploring Static Taint Analysis in LLMs: A Dynamic Benchmarking Framework for Measurement and Enhancement · ASE 2025 |
Program analysis › static analysis
taint analysis |
0.9 | 1 | 2025 | Exploring Static Taint Analysis in LLMs: A Dynamic Benchmarking Framework for Measurement and Enhancement · ASE 2025 |
Program analysis › static analysis
vulnerability detection |
0.9 | 1 | 2025 | Careless Retention and Management: Understanding and Detecting Data Retention Denial-of-Service Vulnerabilities in Java Web Containers · USENIX Security Symposium 2025 |
Software maintenance and evolution › software ecosystems
package dependencies |
0.3 | 1 | 2026 | Fine-Grained Detection of Java Cross-Library Vulnerability Propagation by Extracting Semantic Constraints From Security Patches · IEEE Trans. Dependable Secur. Comput. 2026 |
Software maintenance and evolution
software ecosystems |
0.3 | 1 | 2026 | Fine-Grained Detection of Java Cross-Library Vulnerability Propagation by Extracting Semantic Constraints From Security Patches · IEEE Trans. Dependable Secur. Comput. 2026 |
Methods — techniques the papers use, named apart from their topics
semantic constraint extraction · 2.0security patch analysis · 2.0large language model · 1.7dynamic taint analysis · 1.7benchmark generation · 1.7
| Year | Publication | Venue | Position |
|---|---|---|---|
| 2026 | Fine-Grained Detection of Java Cross-Library Vulnerability Propagation by Extracting Semantic Constraints From Security Patches
Fute Sun, Lei Zhang 0096, Zhiyu Wu, Tianyang Han, Min Yang 0002 |
IEEE Trans. Dependable Secur. Comput. | 1 |
| 2025 | Exploring Static Taint Analysis in LLMs: A Dynamic Benchmarking Framework for Measurement and EnhancementabstractLLMs offer a promising avenue to overcome the limitations of traditional taint analysis techniques, with a growing number of studies leveraging LLMs for taint analysis and its downstream applications. However, these studies lack a systematic understanding of LLMs’ taint analysis capabilities, limiting their transferability and reliability. To bridge this gap and better apply LLMs to static taint analysis, we aim to comprehensively measure and understand LLMs’ taint analysis capabilities.Using existing benchmarks is a straightforward approach, but they are unsuitable due to issues such as training data leakage, not accounting for LLMs’ features, and improper assessment criteria. Manually constructing new benchmarks is not only labor-intensive but also struggles to remain effective as LLMs evolve. To address these, we propose LLMCapLens, a dynamic benchmark generation framework to systematically measure and enhance LLMs’ capabilities. LLMCapLens models influencing factors of LLMs’ taint analysis capabilities, employing a Basic Unit-Based generation method and a lightweight dynamic taint analysis-based verification method to implement the automated generation of targeted benchmarks, ensuring both diversity and correctness. Furthermore, LLMCapLens proposes a measurement-driven, training-free, model-specific enhancement approach.We apply LLMCapLens to 10 mainstream LLMs, revealing how they perform under various influencing factors and identifying unique characteristics, such as the underlying error causes for each model. Notably, our enhancement approach significantly improves LLM performance—GPT-4 Turbo, for instance, achieved improvements across 16 out of 19 factors, with an average True Negative Rate increase of 21.29%. Finally, we validate the real-world impact of our method by applying enhanced LLMs to vulnerability detection, demonstrating a substantial improvement over prior approaches. Lei Zhang 0006, Keke Lian, Fute Sun, Bofei Chen, Yongheng Liu, Zhiyu Wu, Yuan Zhang 0009, Min Yang 0002 |
ASE | 4 |
| 2025 | Careless Retention and Management: Understanding and Detecting Data Retention Denial-of-Service Vulnerabilities in Java Web Containers
Keke Lian, Lei Zhang 0096, Yinzhi Cao, Yongheng Liu, Fute Sun, Yuan Zhang 0009, Min Yang 0002 |
USENIX Security Symposium | 6 |