Cybersecurity

YASA: Scalable Multi-Language Taint Analysis on the Unified AST at Ant Group

26 sec read100 views0 listens

Ant Group has developed YASA, a scalable multi-language static taint analysis framework that uses a Unified Abstract Syntax Tree (UAST) to analyze code across different programming languages efficiently. This tool outperforms existing single and multi-language analyzers in identifying security vulnerabilities, having detected 314 previously unknown taint paths, including 92 confirmed as zero-day vulnerabilities in real-world applications at Ant Group.

Read the full article at arXiv cs.CR (Cryptography & Security)

Want to create content about this topic? Use Nemati AI tools to generate articles, social posts, and more.

You Might Like

Cybersecurity15 hours ago22 sec read

When Malware Does Math: The Arms Race Between Sandboxes and Self-Aware Threats

Modern malware is increasingly capable of detecting sandbox environments and remaining inactive to evade detection, using techniques like trigonometry to analyze mouse movements and timing checks. This development challenges traditional security prac...

Ali Nemati

CybersecurityApr 121m & 2 s read

Binary Heaven - Reverse Engineering Go Binaries, ret2libc Buffer Overflow, and PATH Hijack to Root...

The provided document outlines a detailed walkthrough and analysis of an advanced penetration testing scenario involving multiple layers of security challenges, including anti-reversing techniques, buffer overflows, SUID vulnerabilities, and general ...

Ali Nemati

CybersecurityMar 1521 sec read

Analysis of the Spear-Phishing and KakaoTalk-Linked Threat Campaign by the Konni Group

The Konni Group conducted a spear-phishing campaign targeting North Korean human rights lecturers via KakaoTalk, using malicious LNK files to spread remote access malware. This highlights the importance of EDR systems for detecting and responding to ...

Ali Nemati