"Understanding Regular Expression Denial of Service (ReDoS): Insights from LLM-Generated Regexes and Developer Forums" accepted at ICPC 2024.

"Understanding Regular Expression Denial of Service (ReDoS): Insights from LLM-Generated Regexes and Developer Forums" accepted at ICPC 2024.

Feb 1, 2024. | By: Mohammed Latif Siddiq

Our paper, Understanding Regular Expression Denial of Service (ReDoS): Insights from LLM-Generated Regexes and Developer Forums, got accepted for the 32nd ACM/IEEE International Conference on Program Comprehension (ICPC 2024). In this work, we analyzed the robustness in generating functionally correct and ReDoS-free RegEx by LLMs, how understandable the LLM-generated and real world ReDoS-vulnerable RegEx and what are the perspective of the developers for ReDoS vulnerability.

Related Links

BibTeX

@inproceedings{siddiq2024regex,
  author={Siddiq, Mohammed Latif and Zhang, Jiahao and Santos, Joanna C. S.},
  booktitle={32nd IEEE/ACM International Conference on Program Comprehension (ICPC 2024)}, 
  title={Understanding Regular Expression Denial of Service (ReDoS): Insights from LLM-Generated Regexes and Developer Forums}, 
  year={2024},
  doi={10.1145/3643916.3644424}
}

About

Security and Software Engineering Lab at University of Notre Dame, Notre Dame, IN USA 46556

twitter github

Where We Are

University of Notre Dame
College of Engineering
382 Fitzpatrick Hall
Notre Dame, IN 46556