Publications

Benchmarking Automated Security Patch Backporting: How Far Are We? to appear

Jincheng Yang, Yulong Fu, Chengwei Liu, Lyuye Zhang, Fangyuan Zhang, Bingyang Ren, Yang Liu, Hui Li

41st IEEE/ACM International Conference on Automated Software Engineering (ASE)

One Is Not Enough: The Untold Story of Multiple Security Patches for One Vulnerability to appear

Fangyuan Zhang, Lyuye Zhang (co-corresponding author), Lingling Fan, Chengwei Liu, Yinan Li, Liang Huang, Yang Liu, Zheli Liu, Sen Chen

41st IEEE/ACM International Conference on Automated Software Engineering (ASE)

Latent Reuse in Agent Skills: Multi-modal Clone Detection at Ecosystem Scale to appear

Jiaying Zhu, Lyuye Zhang (corresponding author), Wenbo Guo, Yang Liu

41st IEEE/ACM International Conference on Automated Software Engineering (ASE)

Implicit, Yet Impactful: Understanding Hidden Dependencies in Java Projects to appear

Lyuye Zhang, Chengwei Liu, Fangyuan Zhang, Yiran Zhang, Yuan Zhou, Yang Liu

41st IEEE/ACM International Conference on Automated Software Engineering (ASE)

Agent-Based Automated Remediation for Vulnerabilities in Maven Projects to appear

Lyuye Zhang, He Ye, Federica Sarro, Yuqiang Sun, Yang Liu

Proceedings of the ACM on Programming Languages (PACMPL), OOPSLA 2026

Mind the Gap: An Empirical Study of Synchronization Gaps, Delays, and Missed Opportunities in Software Forks to appear

Jiaying Zhu, Lyuye Zhang (corresponding), Jiahui Wu, Chengyue Liu, Yang Liu

35th ACM SIGSOFT International Symposium on Software Testing and Analysis (ISSTA)

Beyond Similarity Scores: Evidence-Based Third-Party Library Detection for C/C++ Binaries to appear

ACM SIGSOFT International Symposium on Software Testing and Analysis (ISSTA)

Demystifying and Exploiting ASLR on NVIDIA GPUs to appear

Ruofan Zhu, Ganhao Chen, Wenbo Shen, Lyuye Zhang, Dakun Shen, Rui Chang, Yanan Guo

47th IEEE Symposium on Security and Privacy (S&P)

Scratching the Iceberg: Unveiling the Outdated Third-Party Native Libraries in Android Apps to appear

Shiyang Zhang, Chengwei Liu, Sen Chen, Lyuye Zhang, Yang Liu

33rd IEEE International Conference on Software Analysis, Evolution and Reengineering (SANER)

FaultSeeker: LLM-Empowered Framework for Blockchain Transaction Fault Localization to appear

Kairan Sun, Zhengzi Xu, Kaixuan Li, Lyuye Zhang, Yang Liu

40th IEEE/ACM International Conference on Automated Software Engineering (ASE)

Learning from the Past: Real-World Exploit Migration for Smart Contract PoC Generation to appear

Kairan Sun, Zhengzi Xu, Kaixuan Li, Lyuye Zhang, Yebo Feng, Daoyuan Wu, Yang Liu

40th IEEE/ACM International Conference on Automated Software Engineering (ASE)

DroidNative: A Greedy-Constructed Large-Scale Indexing for Android Native Libraries to appear

Shiyang Zhang, Chengwei Liu, Sen Chen, Lyuye Zhang, Yang Liu

Workshop on Automated Mobile App Testing at ASE (ASE-AMOBILE)

ACFix: Guiding LLMs with Mined Common RBAC Practices for Context-Aware Repair of Access Control Vulnerabilities in Smart Contracts

Lyuye Zhang, Kaixuan Li, Kairan Sun, Daoyuan Wu, Ye Liu, Haoye Tian, Yang Liu

IEEE Transactions on Software Engineering (TSE)

Fixing Outside the Box: Uncovering Tactics for Open-Source Security Issue Management

Lyuye Zhang, Jiahui Wu, Chengwei Liu, Kaixuan Li, Xiaoyu Sun, Lida Zhao, Chong Wang, Yang Liu

ACM SIGSOFT International Symposium on Software Testing and Analysis (ISSTA)

Drop the Golden Apples: Identifying Third-Party Reuse by DB-Less Software Composition Analysis

Lyuye Zhang, Chengwei Liu, Jiahui Wu, Shiyang Zhang, Chengyue Liu, Zhengzi Xu, Sen Chen, Yang Liu

ACM International Conference on the Foundations of Software Engineering (FSE), Ideas, Visions and Reflections (IVR) Track

VFArchē: A Dual-Mode Framework for Locating Vulnerable Functions in Open-Source Software

Lyuye Zhang, Jian Zhang, Kaixuan Li, Chong Wang, Chengwei Liu, Jiahui Wu, Sen Chen, Yaowen Zheng, Yang Liu

arXiv preprint

Enhancing OSS Remediation with Patch Backporting

Lyuye Zhang

47th IEEE/ACM International Conference on Software Engineering (ICSE), ACM Student Research Competition

Minimizing Breaking Changes and Redundancy in Mitigating Technical Lag for Java Projects

Rui Lu, Lyuye Zhang (equal contribution), Kaixuan Li, Min Zhang, Yixiang Chen

47th IEEE/ACM International Conference on Software Engineering (ICSE)

LLMs Meet Library Evolution: Evaluating Deprecated API Usage in LLM-based Code Completion

Chong Wang, Kaifeng Huang, Jian Zhang, Yebo Feng, Lyuye Zhang, Yang Liu, Xin Peng

47th IEEE/ACM International Conference on Software Engineering (ICSE)

Towards Unveiling Vulnerability Remediation Tactics from OSS Community

Lyuye Zhang, Jiahui Wu, Chengwei Liu, Kaixuan Li, Sen Chen, Yang Liu

6th International Workshop on Automated Program Repair (APR), co-located with ICSE 2025

Vulnerability Root Cause Function Locating for Java Vulnerabilities

Lyuye Zhang

46th IEEE/ACM International Conference on Software Engineering (ICSE), ACM Student Research Competition

Empirical Analysis of Vulnerabilities Life Cycle in Golang Ecosystem

Jinchang Hu, Lyuye Zhang (equal contribution), Chengwei Liu, Sen Yang, Song Huang, Yang Liu

46th International Conference on Software Engineering (ICSE)

Software Composition Analysis for Vulnerability Detection: An Empirical Study on Java Projects

Lida Zhao, Sen Chen, Zhengzi Xu, Chengwei Liu, Lyuye Zhang, Jiahui Wu, Jun Sun, Yang Liu

The ACM Joint European Software Engineering Conference and Symposium on the Foundations of Software Engineering (ESEC/FSE)

Mitigating Persistence of Open-Source Vulnerabilities in Maven Ecosystem

Lyuye Zhang, Chengwei Liu, Sen Chen, Zhengzi Xu, Lingling Fan, Lida Zhao, Yiran Zhang, Yang Liu

the 38th IEEE/ACM International Conference on Automated Software Engineering (ASE 2023)

OSSFP: Precise and Scalable C/C++ Third-Party Library Detection using Fingerprinting Functions

Jiahui Wu, Zhengzi Xu, Wei Tang, Lyuye Zhang, Yueming Wu, Chengyue Liu, Kairan Sun, Lida Zhao, Yang Liu

45th IEEE/ACM International Conference on Software Engineering (ICSE)

Compatible Remediation on Vulnerabilities from Third-Party Libraries for Java Projects

Lyuye Zhang, Chengwei Liu, Zhengzi Xu, Sen Chen, Lingling Fan, Lida Zhao, Jiahui Wu, Yang Liu

45th IEEE/ACM International Conference on Software Engineering (ICSE)

Has My Release Disobeyed Semantic Versioning? Static Detection Based on Semantic Differencing for Java

Lyuye Zhang, Chengwei Liu, Zhengzi Xu, Sen Chen, Lingling Fan, Bihuan Chen, Yang Liu

The 37th IEEE/ACM International Conference on Automated Software Engineering (ASE)