Institution profile

University of Michigan-Dearborn

Academic institutionnorthamerica · us
Official website
Research library42linked papers
Opportunities0open roles
Selected work

Representative Papers

TaintRadar: Semantic-Aware Taint-Style Vulnerability Detection via Augmented Code Property Graphs

Jul 17, 2026

Static taint analysis often suffers from high false positives or false negatives due to coarse-grained sanitization modeling, blind spots in database propagation, and insufficient handling of object-level data flows. This work proposes an enhanced code property graph approach that jointly models sanitization logic, persistent propagation, and object field–level name semantics for the first time. It introduces vulnerability-type-aware sanitization analysis, a database-state-aware cross-script propagation mechanism, and object-aware reaching definitions, further integrating context-sensitive parameter binding, database schema constraints, and query safety verification. Evaluated on the SARD benchmark, the method maintains 80% accuracy while significantly reducing false positives. In experiments on 19 real-world PHP applications, it successfully reproduces most known CVEs and uncovers 29 previously undisclosed zero-day vulnerabilities—26 SQL injections and 3 stored XSS flaws.

0 citationsRead paper

Mind the Privileged-to-Camera Gap: Actor-Centric Sidecar Supervision for Camera-First Open-Loop Waypoint Prediction

Jun 18, 2026

This work addresses the representational gap between perception and behavior prediction in purely vision-based autonomous driving models, which arises from the absence of explicit role-level supervision for surrounding road users when trained solely with waypoint supervision. To bridge this gap, the authors propose a role-centric “sidecar” supervision mechanism that leverages simulator-generated labels—including road user positions, post-hoc relevance annotations, and short-term motion cues—to enhance the waypoint prediction capability of a model fusing multi-view RGB images, ego-vehicle states, and route commands during training. Notably, this approach requires no additional inputs at inference time and substantially narrows the performance gap between vision-only and privileged-information methods. Evaluated in open-loop trajectory prediction, the method achieves a final displacement error (FDE) of 1.223 ± 0.01 meters, a 32.6% improvement over the baseline, with particularly pronounced gains in multi-agent interactions and scenarios involving vulnerable road users.

0 citationsRead paper
Recent publications

Latest Papers

TaintRadar: Semantic-Aware Taint-Style Vulnerability Detection via Augmented Code Property Graphs

Jul 17, 2026

Static taint analysis often suffers from high false positives or false negatives due to coarse-grained sanitization modeling, blind spots in database propagation, and insufficient handling of object-level data flows. This work proposes an enhanced code property graph approach that jointly models sanitization logic, persistent propagation, and object field–level name semantics for the first time. It introduces vulnerability-type-aware sanitization analysis, a database-state-aware cross-script propagation mechanism, and object-aware reaching definitions, further integrating context-sensitive parameter binding, database schema constraints, and query safety verification. Evaluated on the SARD benchmark, the method maintains 80% accuracy while significantly reducing false positives. In experiments on 19 real-world PHP applications, it successfully reproduces most known CVEs and uncovers 29 previously undisclosed zero-day vulnerabilities—26 SQL injections and 3 stored XSS flaws.

0 citationsRead paper

Mind the Privileged-to-Camera Gap: Actor-Centric Sidecar Supervision for Camera-First Open-Loop Waypoint Prediction

Jun 18, 2026

This work addresses the representational gap between perception and behavior prediction in purely vision-based autonomous driving models, which arises from the absence of explicit role-level supervision for surrounding road users when trained solely with waypoint supervision. To bridge this gap, the authors propose a role-centric “sidecar” supervision mechanism that leverages simulator-generated labels—including road user positions, post-hoc relevance annotations, and short-term motion cues—to enhance the waypoint prediction capability of a model fusing multi-view RGB images, ego-vehicle states, and route commands during training. Notably, this approach requires no additional inputs at inference time and substantially narrows the performance gap between vision-only and privileged-information methods. Evaluated in open-loop trajectory prediction, the method achieves a final displacement error (FDE) of 1.223 ± 0.01 meters, a 32.6% improvement over the baseline, with particularly pronounced gains in multi-agent interactions and scenarios involving vulnerable road users.

0 citationsRead paper