Smart contracts generated by large language models (LLMs) can compile yet still violate basic security obligations, and existing generation frameworks largely treat security as post-hoc verification rather than as a constraint that persists throughout generation and repair. We present SecChain, a multi-agent smart-cont...
Dian-Xiang Sun, Li-Ming Nie, Yang Liu· Proceedings of the 41st IEEE...· 0 citations
Locating a known source function in a stripped binary is a prerequisite for many security and software engineering tasks, including Software Composition Analysis (SCA) false-positive elimination, patch presence verification, malware analysis, code plagiarism detection, and license compliance auditing. We formalize this...
Jing-Yi Shi, Cheng-Yue Liu, Zheng-Zi Xu et al.· Proceedings of the ACM on Pr...· 0 citations
Remediating vulnerabilities in open-source software (OSS) dependencies is vital to maintaining software supply chain security. However, current automated approaches almost exclusively rely on dependency upgrades, which is limited by the nature of upgrades, i.e., the availability of secure versions, version pinning, and...
Lyuye Zhang, He Ye, Federica Sarro et al.· 0 citations
Text-to-SQL models translate natural language questions into SQL, enabling non-technical users to access databases. However, most existing research focuses on correctness, neglecting query efficiency. In this paper, we address the challenge of evaluating the execution efficiency of generated SQL in Text-to-SQL by intro...
Li Lin, Yun-Feng Shen, Ling-Feng Bao et al.· Proceedings of the ACM on So...· 0 citations
Statement-level fault localization (FL) is critical for effective software debugging, as it enables developers to precisely identify faulty lines of code. While traditional spectrum-based, mutation-based, and deep learning-based FL techniques have achieved notable progress, they remain limited in modeling rich fault se...
Hong-Wei Yu, Xu Wang, Jian Zhang et al.· Proceedings of the ACM on So...· 0 citations
KGMACG is evaluated on three industrial-scale case studies against six state-of-the-art multi-agent baselines: MetaGPT, AutoGen, CAMEL, CrewAI, ChatDev and CodeAgent and indicates that KGMACG advances the automation of application-level software development.
Bo Yang, Xiao Zhang, Wei-Song Sun et al.· ACM Transactions on Software...· 0 citations
Findings indicate that cross-model collaboration offers a practical and parameter-efficient alternative to scaling up monolithic models for code generation and maintains competitive accuracy when only 20% of test cases are available for diagnostic feedback.
Jiangping Huang, Wen-Guang Ye, Wei-Song Sun et al.· ACM Transactions on Software...· 0 citations
