Preprint

• [Preprint] Towards Secure Agent Skills: Architecture, Threat Taxonomy, and Security Analysis
  Zhiyuan Li, Jingzheng Wu, Xiang Ling, Xing Cui, Tianyue Luo
  arXiv preprint (cs.CR)
  

Journal

• [TOSEM'26] Confused Deputy Attack Against Model Context Protocol
  Zhiyuan Li, Jingzheng Wu, Yuhao Peng, Tianyue Luo, Xing Cui, Xiang Ling
  ACM Transactions on Software Engineering and Methodology (TOSEM)
  

Conference

• [ICSE'25] The Seeds of the FUTURE Sprout from History: Fuzzing for Unveiling Vulnerabilities in Prospective Deep Learning Libraries
  Zhiyuan Li, Jingzheng Wu, Xiang Ling, Tianyue Luo, Zhiqing Rui, Yanjun Wu
  In Proceedings of the 47th ACM SIGSOFT International Conference on Software Engineering, Ottawa, Canada
  

  🏆 ACM SIGSOFT Distinguished Paper Award
  

• [DATE'26] Similarity-guided Block-level Mutation for RISC-V Processor Fuzzing
  

  Hao Lyu, Jingzheng Wu, Xiang Ling, Yicheng Zhong, Zhiyuan Li, Tianyue Luo
  In Proceedings of the 29th Design, Automation and Test in Europe Conference, Verona, Italy
  

• [AAAI'26] VFCionX: Bridging Large and Small Models for Robust Vulnerability-Fixing Commit Identification
  

  Xing Cui, Jingzheng Wu, Wenxiang Ou, Tianyue Luo, Zhiyuan Li, Xiang Ling
  In Proceedings of the 40th Annual AAAI Conference on Artificial Intelligence, Singapore
  

• [ICSME'25] OptionFuzz: Fuzzing SMT Solvers with Optimized Option Exploration via Large Language Models
  

  Yuhao Peng, Jingzheng Wu, Xiang Ling, Zhiyuan Li, Tianyue Luo, Yanjun Wu
  In Proceedings of the 41th IEEE International Conference on Software Maintenance and Evolution, Auckland, New Zealand
  

• [ICSME'25] RMGenie: An LLM-Based Agent Framework for Open Source Software README Generation
  

  Xing Cui, Jingzheng Wu, Zhiyuan Li, Tianyue Luo, Xiang Ling
  In Proceedings of the 41th IEEE International Conference on Software Maintenance and Evolution, Auckland, New Zealand