Large Language Models for Validating Network Protocol Parsers

S. Chaki, E. M. Clarke, A. Groce, S. Jha, and H. Veith, “Modular verification of software components in C,” in ICSE . IEEE Computer Society, 2003, pp. 385–395

2003

Earlier work this paper cites.

M. Musuvathi and D. R. Engler, “Model checking large network protocol implementations,” in NSDI . USENIX, 2004, pp. 155–168

2004

Earlier work this paper cites.

G. Díaz, F. Cuartero, V. V. Ruiz, and F. L. Pelayo, “Automatic verification of the TLS handshake protocol,” in SAC . ACM, 2004, pp. 789–794

2004

Earlier work this paper cites.

Heartbleed, “The heartbleed bug,” https://heartbleed.com , 2020

2020

Earlier work this paper cites.

V.-T. Pham, M. Böhme, and A. Roychoudhury, “Aflnet: a greybox fuzzer for network protocols,” in 2020 IEEE 13th International Conference on Software Testing, Validation and Verification (ICST) . IEEE, 2020, pp. 460–465

2020

Earlier work this paper cites.

G. S. Reen and C. Rossow, “Dpifuzz: a differential fuzzing framework to detect dpi elusion strategies for quic,” in Proceedings of the 36th Annual Computer Security Applications Conference , ser. ACSAC ’20. ACM, 2020, pp. 332–344

2020

Earlier work this paper cites.

T. Brown, B. Mann, N. Ryder, M. Subbiah, J. D. Kaplan, P. Dhariwal, A. Neelakantan, P. Shyam, G. Sastry, A. Askell et al. , “Language models are few-shot learners,” Advances in neural information processing systems , vol. 33, pp. 1877–1901, 2020

2020

Earlier work this paper cites.

“Cve-2021-41773,” https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-41773

2021

Earlier work this paper cites.

M. Zheng, J. Yang, M. Wen, H. Zhu, Y. Liu, and H. Jin, “Why do developers remove lambda expressions in java?” in 2021 36th IEEE/ACM International Conference on Automated Software Engineering (ASE) , 2021, pp. 67–78

2021

Earlier work this paper cites.

T. Ferreira, H. Brewton, L. D’Antoni, and A. Silva, “Prognosis: closed-box analysis of network protocol implementations,” in Proceedings of the 2021 ACM SIGCOMM 2021 Conference , 2021, pp. 762–774

2021

Earlier work this paper cites.

S. Wang, Z. Li, H. Qian, C. Yang, Z. Wang, M. Shang, V. Kumar, S. Tan, B. Ray, P. Bhatia et al. , “Recode: Robustness evaluation of code generation models,” arXiv preprint arXiv:2212.10264 , 2022

Original

2022

Earlier work this paper cites.

J. Wei, X. Wang, D. Schuurmans, M. Bosma, F. Xia, E. Chi, Q. V. Le, D. Zhou et al. , “Chain-of-thought prompting elicits reasoning in large language models,” Advances in neural information processing systems , vol. 35, pp. 24 824–24 837, 2022

2022

Earlier work this paper cites.

Q. Shi, J. Shao, Y. Ye, M. Zheng, and X. Zhang, “Lifting network protocol implementation to precise format specification with security applications,” in Proceedings of the 2023 ACM SIGSAC Conference on Computer and Communications Security , ser. CCS ’23. ACM, 2023, p. 1287–1301

2023

Earlier work this paper cites.

C. Liu, S. Gong, and P. Fonseca, “Kit: Testing os-level virtualization for functional interference bugs,” in Proceedings of the 28th ACM International Conference on Architectural Support for Programming Languages and Operating Systems, Volume 2 , ser. ASPLOS 2023. New York, NY, USA: Association for Computing Machinery, 2023, p. 427–441. [Online]. Available: https://doi.org/10.1145/3575693.3575731

2023

Earlier work this paper cites.

J. Pereyda, “Boofuzz,” https://github.com/jtpereyda/boofuzz , 2023

2023

Earlier work this paper cites.

R. Li, L. B. Allal, Y. Zi, N. Muennighoff, D. Kocetkov, C. Mou, M. Marone, C. Akiki, J. Li, J. Chim et al. , “Starcoder: may the source be with you!” arXiv preprint arXiv:2305.06161 , 2023

Original

2023

Earlier work this paper cites.

Y. Deng, C. S. Xia, H. Peng, C. Yang, and L. Zhang, “Large language models are zero-shot fuzzers: Fuzzing deep-learning libraries via large language models,” in Proceedings of the 32nd ACM SIGSOFT international symposium on software testing and analysis , 2023, pp. 423–435

2023

Cited alongside, same era.

S. Kang, J. Yoon, and S. Yoo, “Large language models are few-shot testers: Exploring llm-based general bug reproduction,” in 2023 IEEE/ACM 45th International Conference on Software Engineering (ICSE) . IEEE, 2023, pp. 2312–2323

2023

Cited alongside, same era.

C. Yang, Y. Deng, R. Lu, J. Yao, J. Liu, R. Jabbarvand, and L. Zhang, “Whitefox: White-box compiler fuzzing empowered by large language models,” arXiv preprint arXiv:2310.15991 , 2023

Original

2023

Cited alongside, same era.

B. Steenhoek, M. M. Rahman, R. Jiles, and W. Le, “An empirical study of deep learning models for vulnerability detection,” in 2023 IEEE/ACM 45th International Conference on Software Engineering (ICSE) , 2023, pp. 2237–2248

G. Ryan, S. Jain, M. Shang, S. Wang, X. Ma, M. K. Ramanathan, and B. Ray, “Code-aware prompting: A study of coverage-guided test generation in regression setting using llm,” vol. 1, no. FSE, Jul. 2024. [Online]. Available: https://doi.org/10.1145/3643769

2024

Later among the works it cites.

H. Li, Y. Hao, Y. Zhai, and Z. Qian, “Enhancing static analysis for practical bug detection: An llm-integrated approach,” Proceedings of the ACM on Programming Languages , vol. 8, no. OOPSLA1, pp. 474–499, 2024

2024

Later among the works it cites.

C. Wang, W. Zhang, Z. Su, X. Xu, and X. Zhang, “Sanitizing large language models in bug detection with data-flow,” in Findings of the Association for Computational Linguistics: EMNLP 2024, Miami, Florida, USA, November 12-16, 2024 , Y. Al-Onaizan, M. Bansal, and Y. Chen, Eds. Association for Computational Linguistics, 2024, pp. 3790–3805. [Online]. Available: https://aclanthology.org/2024.findings-emnlp.217

2024

Later among the works it cites.