DESSERT Research Lab (University of Naples Federico II, Italy)

DESSERT Research Lab (University of Naples Federico II, Italy)'s repositories

cti-to-mitre-with-nlp

Replication package for the paper "Automatic Mapping of Unstructured Cyber Threat Intelligence: An Experimental Study" published at the IEEE International Symposium on Software Reliability Engineering (ISSRE) 2022

Language:Jupyter NotebookCC-BY-SA-4.046 10

Shellcode_IA32

Shellcode_IA32 is a dataset consisting of challenging but common assembly instructions, collected from real shellcodes, with their natural language descriptions. The dataset can be used for neural machine translation tasks to automatically generate software exploits from natural language.

GPL-3.037 2 1

EVIL

EVIL (Exploiting software VIa natural Language) is an approach to automatically generate software exploits in assembly/Python language from descriptions in natural language. The approach leverages Neural Machine Translation (NMT) techniques and a dataset that we developed for this work.

Language:PythonGPL-3.028 4 2

CTI-HAL

1400

DeVAIC

DeVAIC (Detection of Vulnerabilities in AI-generated Code) is a static code analyzer for security issues in Python code snippets. It detects vulnerabilities belonging to the OWASP categories listed in the Top 10 of 2021.

Language:ShellGPL-3.011 1 1

Targeted-Data-Poisoning-Attacks

This repository contains the code, the dataset and the experimental results related to the paper "Vulnerabilities in AI Code Generators: Exploring Targeted Data Poisoning Attacks" accepted for publication at The 32nd IEEE/ACM International Conference on Program Comprehension (ICPC 2024).

Language:PythonGPL-3.011 10

thorfi

ThorFI: A Novel Approach for Network Fault Injection as a Service

Language:PythonGPL-3.08 2 1

OpenStack-Fault-Injection-Environment

Tools to repeat the fault-injection experiments presented in the paper "How Bad Can a Bug Get? An Empirical Analysis of Software Failures in the OpenStack Cloud Computing Platform" (ESEC/FSE '19).

Language:ShellAGPL-3.07 3 2

powershell-offensive-code-generation

Language:PowerShellGPL-3.07 20

iris

Repository linked to DSN 2023 paper "IRIS: a Record and Replay Framework to Enable Hardware-assisted Virtualization Fuzzing"

Language:CGPL-3.03 20

violent-python

This repo contains a manually curated dataset, where a sample contains a piece of Python code from an offensive software, and its corresponding description in natural language (plain English).

GPL-3.03 10

DeepSample

Language:Java2 10

generative-ai-cybersecurity

This repository contains the materials and scripts for the talk titled "Generative AI in Cybersecurity: Generating Offensive Code from Natural Language" by Pietro Liguori, University of Naples Federico II, DESSERT group. The talk is part of ARTISAN 2024: Summer School on the role and effects of ARTificial Intelligence in Secure ApplicatioNs.

Language:PythonGPL-3.02 30