BestHub
Sign in
Tagged articles

Taint Analysis

6 articles · Page 1 of 1
Machine Heart
Machine Heart
Sep 29, 2026 · Artificial Intelligence

BenchShield: Formal Model-Backed Detection of Reward Hacking in LLM-Agent Evaluation

BenchShield introduces a formal, model-backed framework that extends reward hacking detection beyond static vulnerability audits to runtime verification, using phase-aware taint analysis and semantic audits to distinguish between exposed vulnerabilities and actual agent violations across the entire evaluation pipeline.

AI safetyBenchJackBenchShield
0 likes · 18 min read
BenchShield: Formal Model-Backed Detection of Reward Hacking in LLM-Agent Evaluation
AntTech
AntTech
Apr 7, 2026 · Information Security

How YASA Enables Scalable Multi‑Language Taint Analysis with a Unified AST

The article introduces YASA, a unified multi‑language static taint analysis framework built on a novel Unified Abstract Syntax Tree (UAST), explains its design, core components, open‑source releases, and benchmark results that demonstrate superior coverage, precision, and performance over existing single‑ and multi‑language tools.

Multi-languageSoftware SecurityTaint Analysis
0 likes · 9 min read
How YASA Enables Scalable Multi‑Language Taint Analysis with a Unified AST
vivo Internet Technology
vivo Internet Technology
May 10, 2023 · Information Security

Detecting Apache Commons Text RCE (CVE-2022-42889) with the Doop Static Analysis Framework

The Vivo Internet Security Team demonstrates how to extend the Doop static analysis framework with custom Datalog rules to detect the Apache Commons Text CVE‑2022‑42889 remote code execution vulnerability by tracing taint from StringSubstitutor.replace to ScriptEngine.eval, producing source‑sink CSV reports and showcasing Doop’s extensibility for security research.

Apache Commons TextCVE-2022-42889Datalog
0 likes · 14 min read
Detecting Apache Commons Text RCE (CVE-2022-42889) with the Doop Static Analysis Framework
58 Tech
58 Tech
Apr 23, 2021 · Information Security

Understanding AST, SAST, Taint Analysis, and CodeQL for Java Security Scanning

This article explains the fundamentals of abstract syntax trees, Java AST analysis with Spoon, the principles of static application security testing and taint analysis, and demonstrates how to use CodeQL to detect unsafe Fastjson usage and Spring web path bindings in a CI/CD pipeline.

ASTCodeQLJava
0 likes · 24 min read
Understanding AST, SAST, Taint Analysis, and CodeQL for Java Security Scanning