Hai Jin

LightZK: An Efficient GPU Acceleration Framework for Large-Scale Zero-Knowledge Proofs

Zero-Knowledge Proofs (ZKPs), particularly zk-SNARKs, have become a cornerstone for privacy-preserving protocols and blockchain scalability. However, the generation of proofs remains computationally prohibitive due to the immense overhead of underlying cryptographic primitives, n...

PatchPorter: LLM-Driven Security Patch Porting via Version Tracing and Context Selection for NPM

Third-Party Libraries are widely used in modern software development, yet their vulnerabilities pose serious security risks. This issue is particularly severe in the NPM ecosystem, where high-risk 1-day vulnerabilities can remain unpatched for extended periods. Although upgrading...

Semantically-Equivalent Transformations-Based Backdoor Attacks against Neural Code Models: Characterization and Mitigation

Neural code models are increasingly embedded in software development workflows, but their susceptibility to backdoor attacks presents a significant security risk. Existing studies have mainly examined injection-based attacks, which insert anomalous patterns into code and can ofte...

Understanding and Detecting Android R8 Compiler Bugs

Android apps currently dominate the smartphone app market, and their reliability will significantly affect user experience and even induce security risks. Since Android Gradle Plugin 3.4.0 (April 2019), the R8 compiler serves as the default infrastructure in the Android build pro...