Zheng-Jie Zhao

Evaluating and Improving Static Application Security Testing Tools for Rust

An empirical evaluation of mainstream Rust SAST tools using security vulnerabilities identified in real-world Rust applications is conducted and a large language model (LLM)-assisted automated testing framework, TRUST, is proposed, which automatically analyzes the official Rust reference to derive and implement semanti...