FIELD NOTES TOPIC
vulnerabilities
3 notes, newest first.
Bulkhead: Automated Semantic Detection and Remediation of Container Escape Vulnerabilities
Researchers present Bulkhead, an automated framework that uses large language models and formal methods to detect and fix container escape vulnerabilities called path traversal (PaTra) vulnerabilities. These…
Chai: Agentic Discovery of Cryptographic Misuse Vulnerabilities
The paper introduces Chai, an AI-based system that discovers and validates cryptographic misuse vulnerabilities using naturally occurring signals. Instead of auditing one codebase for many flaws, Chai catalogs flaws at…
Inherited Circuits, Learned Semantics: How Fine-Tuning Creates Evasion Vulnerabilities Invisible to Standard Evaluation
A study shows that Language Models (LLMs) fine-tuned for security classification can miss vulnerabilities due to learning token-level indicator semantics that preserve accuracy on their training data but fail under…
