Skip to content

Author

Yi-Feng Di

2 papers indexed here

We haven’t gathered this author’s papers yet. Follow them and we’ll fetch their work.

Not the right person? Other researchers publish under this name.

Book Open access Oct 2026

When Dependencies Depend: A Large-Scale Study on Conditional Dependencies and Their Security Implications in C/C++

Condor is developed, a static analysis approach that parses CMake build files to extract conditional dependencies together with their inclusion logic, revealing a C/C++-specific landscape of dependency variability that is difficult for existing SCA tools to capture.

Yi-Feng Di, Jue-Wei Zhang, Tian-Yi Zhang · 0 citations
#machine learning Preprint Sep 2026

VEX-Bench: Benchmarking LLM Agents for Assessing Exploitability of Software Supply Chain Vulnerabilities

VEX-Bench is introduced, the first benchmark for evaluating LLM agents'ability to assess the exploitability of software supply chain vulnerabilities, and contains 75 real-world cases mined from GitHub and labeled by security experts, covering Python, Java, and Go.

Jia-Hao Shi, Edward Tsien, Yi-Feng Di et al. · 1 citation

We use cookies to run the site and, with your consent, for analytics and to show ads. See our Cookie Policy.