Alaid TechThread

Google & Arm - Raising The Bar on GPU Security

https://security.googleblog.com/2024/09/google-arm-raising-bar-on-gpu-security.html

Lessons from the buzz: What have we learned from fuzzing the eBPF verifier

https://lpc.events/event/18/contributions/1946/attachments/1473/3119/Lessons%20from%20the%20buzz%20-%20LPC.pdf

Securing the software
commons
Standards, Automation, and AI for a Resilient Open Source Future

FUZZING'24 Keynote: "Is 'AI' useful for fuzzing?"

https://www.youtube.com/watch?v=4BPJXmrdmls

Introducing Java fuzz harness synthesis using LLMs

https://blog.oss-fuzz.com/posts/introducing-java-auto-harnessing/

TROOPERS24: Fuzzing at Mach Speed: Uncovering IPC Vulnerabilities on MacOS

https://www.youtube.com/watch?v=tZmollb8NXk

Top Score on the Wrong Exam:
On Benchmarking in Machine Learning for Vulnerability Detection

https://arxiv.org/pdf/2408.12986

Transferring Backdoors between Large Language Models by Knowledge Distillation

https://arxiv.org/pdf/2408.09878

Exploring RAG-based Vulnerability Augmentation with LLMs

https://arxiv.org/pdf/2408.04125

ARVO: Atlas of Reproducible Vulnerabilities for Open Source Software

https://arxiv.org/pdf/2408.02153

On Understanding and Forecasting Fuzzers Performance with Static Analysis

https://s3.eurecom.fr/docs/ccs24_zhang.pdf

Code Structure-Aware through Line-level Semantic Learning for Code Vulnerability Detection

https://arxiv.org/pdf/2407.18877

LLM-Assisted Static Analysis for Detecting Security Vulnerabilities

https://arxiv.org/pdf/2405.17238v1

Expand the reach of Fuzzing

https://thuanpv.github.io/publications/NUS_Summer_School_Thuan_Pham_Final_Public.pdf

SoK: Where to Fuzz? Assessing Target Selection Methods in Directed Fuzzing

https://www.mlsec.org/docs/2024c-asiaccs.pdf

Hacking for Defenders: approaches to DARPA’s AI Cyber Challenge

https://security.googleblog.com/2024/06/hacking-for-defenders-approaches-to.html

Project Naptime: Evaluating Offensive Security Capabilities of Large Language Models

https://googleprojectzero.blogspot.com/2024/06/project-naptime.html

How to Fuzz Your Way to Android Universal Root: Attacking Android Binder

https://www.youtube.com/watch?v=U-xSM159YLI&list=PLYvhPWR_XYJlg1SfcKdZY6eXUTPPqnh_G&index=9