Skip to content

Author

Xiao Cheng

We have 6 of 21 papers

We haven’t gathered this author’s papers yet. Follow them and we’ll fetch their work.

Not the right person? Other researchers publish under this name.

Book Open access Oct 2026

Harnessing Uncertainty in Code Language Models: Lessons from Vulnerability Detection

Code Language Models (CLMs) are increasingly adopted for vulnerability detection, yet knowing when to trust their predictions remains an open challenge. Uncertainty estimation has improved reliability in traditional discriminative models, but whether these benefits transfer to the generative paradigm of CLMs is unclear...

Hao-Dong Li, Xiao Cheng, Xu-Dong Wang et al. · 0 citations
Open access Oct 2026

Multi-stage On-Demand Program Slicing for Modular Analysis of Multi-threaded Programs

Precise analysis of multi-threaded programs requires combining flow-sensitive pointer analysis (FSPTA) with interleaving and lock analysis (ILA) to reason about cross-thread value flows under feasible concurrent executions. ILA computes may-happen-in-parallel (MHP) relations and lock-release spans to determine when sha...

Jia-Wei Yang, Xiao Cheng, Jia-Wei Wang et al. · 0 citations
#artificial intelligence Preprint Sep 2026

BenchShield: Formal Model-Backed Instrumentation for Reward Integrity in LLM-Agent Evaluation Infrastructure

BenchShield is presented, a model-backed instrumentation layer for reward integrity in LLM-agent evaluation that grounds detection in a finite lifecycle model of an evaluation's reward-relevant events and achieves 96% accuracy in detecting reward hacking from infrastructure-side evidence.

Sheng-Han Zheng, Zong-Lin Di, Yimin Liu et al. · 0 citations
Preprint Aug 2026

MalTotal: Cost-Effective and Language-Agnostic Malicious Code Poisoning Detection for Millions of Repositories

MalTotal leverages LLM-assisted semantic reasoning to identify sensitive APIs, perform hybrid semantic slicing, and reconstruct malicious behavior contexts while reducing analysis overhead, demonstrating the effectiveness, scalability, and cost-efficiency of MalTotal in mitigating large-scale code poisoning attacks.

Jian Zhao, Shenao Wang, Qingyang Wu et al. · 1 citation · ⚡1
Jul 2026

Neuro-Symbolic Reasoning for Vulnerability Detection

LeanGuard is presented, a neuro-symbolic framework that assigns each act to the side equipped for it, and it is argued that the remedy is not better prompting but a separation of roles: the component that interprets the code must not also be the one that decides a safety obligation is met.

Yanjie Zhao, Hongjie Chen, Li Lu et al. · 0 citations
Preprint Jul 2026

AgentFlow: Building Agent Dependency Graphs for Static Analysis of Agent Programs

The evaluation shows that AgentFlow recovers richer agent entities and dependencies than existing AST-based agent static analysis tools, generates more dependency-aware Agent BOMs, and uncovers 238 taint-style prompt-to-tool risks in real-world agent programs.

Shenao Wang, Xinyi Hou, Yanjie Zhao et al. · 0 citations

We use cookies to run the site and, with your consent, for analytics and to show ads. See our Cookie Policy.