PhantomCall: Evading ML Malware Detectors Via Function Call Graph Perturbation

Prior adversarial attacks on Windows PE malware detectors target raw bytes, PE headers, or intra-function control-flow graphs, leaving the function call graph FCG unexplored as an attack surface. Yet the FCG structure is an important feature in graph-based malware detectors. We present Phan-...

EntailLLM: Verifying LLM-Generated Vulnerability Discovery Paths with Domain Knowledge Via Logic Programming

Large language models are increasingly used to reason about software vulnerabilities, but their outputs can silently violate domain knowledge, limiting their reliability in safety-critical settings such as medical devices. Prior work either treats that output as a prediction to be scored or...