Junfeng Yang

The paper introduces Neo, an agentic program analysis framework that successfully detects zero-day privilege escalation vulnerabilities in complex, polyglot microservices by combining LLMs with advanced code analysis.

This paper introduces TRIM, an algorithm that minimizes redundant edits in AI-generated code, called CodeSlop, by minimizing agent trajectories, reducing CodeSlop by 17.9%-32.9% with negligible performance regression and efficiency.