AutoSec
Python · Java · C++ · LangGraph · LLM Agents · CodeQL · AWS EC2 · Static Analysis
- Contributing to an agentic security pipeline that autonomously detects, exploits, patches, and verifies software vulnerabilities using LLMs.
- Primary owner of end-to-end pipeline runs across 200+ Java and C++ repositories, producing the scans, exploits, and patches behind the paper's evaluation.
- Generated per-CVE CodeQL taint queries from fix commits on AWS EC2, verifying 505 of 1,817 candidate traces across 18 CWEs as patcher input, and certified per-CVE proof-of-vulnerability exploits against NVD and GHSA. This exposed patches that left vulnerabilities exploitable.
- Improved pipeline reliability to run unattended with LangGraph caching, exponential-backoff retries, and idempotency keys, eliminating prior startup failures.
- Co-authoring the work as a research manuscript for USENIX Security 2027, emphasizing system reliability, verification, and auditability.