Detecting and Fixing Violations of Modification Terms in Open Source Licenses during Forking. - Kaifeng Huang 001; Yingfeng Xia; Bihuan Chen 001; Zhuotong Zhou; Jin Guo; Xin Peng 001 (CoRR, 2023)

Your "Notice" Is Missing: Detecting and Fixing Violations of Modification Terms in Open Source Licenses during Forking. - Kaifeng Huang 001; Yingfeng Xia; Bihuan Chen 001; Siyang He; Huazheng Zeng; Zhuotong Zhou; Jin Guo; Xin Peng 001 (ISSTA, 2024)

SpiderScan: Practical Detection of Malicious NPM Packages Based on Graph-Based Behavior Modeling and Matching. - Yiheng Huang; Ruisi Wang; Wen Zheng; Zhuotong Zhou; Susheng Wu; Shulin Ke; Bihuan Chen 001; Shan Gao; Xin Peng 001 (ASE, 2024)

Vision: Identifying Affected Library Versions for Open Source Software Vulnerabilities. - Susheng Wu; Ruisi Wang; Kaifeng Huang 001; Yiheng Cao; Wenyan Song; Zhuotong Zhou; Yiheng Huang; Bihuan Chen 001; Xin Peng 001 (ASE, 2024)

Magneto: A Step-Wise Approach to Exploit Vulnerabilities in Dependent Libraries via LLM-Empowered Directed Fuzzing. - Zhuotong Zhou; Yongzhuo Yang; Susheng Wu; Yiheng Huang; Bihuan Chen 001; Xin Peng 001 (ASE, 2024)

Lifting the Veil on the Large Language Model Supply Chain: Composition, Risks, and Mitigations. - Kaifeng Huang 001; Bihuan Chen 001; You Lu 005; Susheng Wu; Dingji Wang; Yiheng Huang; Haowen Jiang; Zhuotong Zhou; Junming Cao; Xin Peng 001 (CoRR, 2024)

Recurring Vulnerability Detection: How Far Are We? - Yiheng Cao; Susheng Wu; Ruisi Wang; Bihuan Chen 001; Yiheng Huang; Chenhao Lu; Zhuotong Zhou; Xin Peng 001 (Proc. ACM Softw. Eng., 2025)

Mystique: Automated Vulnerability Patch Porting with Semantic and Syntactic-Enhanced LLM. - Susheng Wu; Ruisi Wang; Yiheng Cao; Bihuan Chen 001; Zhuotong Zhou; Yiheng Huang; Junpeng Zhao; Xin Peng 001 (Proc. ACM Softw. Eng., 2025)