{"id":"https://openalex.org/W4403788859","doi":"https://doi.org/10.1145/3658644.3691367","title":"Demo: SGCode: A Flexible Prompt-Optimizing System for Secure Generation of Code","display_name":"Demo: SGCode: A Flexible Prompt-Optimizing System for Secure Generation of Code","publication_year":2024,"publication_date":"2024-12-02","ids":{"openalex":"https://openalex.org/W4403788859","doi":"https://doi.org/10.1145/3658644.3691367"},"language":"en","primary_location":{"id":"doi:10.1145/3658644.3691367","is_oa":true,"landing_page_url":"https://doi.org/10.1145/3658644.3691367","pdf_url":"https://dl.acm.org/doi/pdf/10.1145/3658644.3691367","source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the 2024 on ACM SIGSAC Conference on Computer and Communications Security","raw_type":"proceedings-article"},"type":"conference-paper","indexed_in":["arxiv","crossref"],"open_access":{"is_oa":true,"oa_status":"gold","oa_url":"https://dl.acm.org/doi/pdf/10.1145/3658644.3691367","any_repository_has_fulltext":true},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5114415430","display_name":"Khiem Ton","orcid":null},"institutions":[{"id":"https://openalex.org/I118118575","display_name":"New Jersey Institute of Technology","ror":"https://ror.org/05e74xb87","country_code":"US","type":"education","lineage":["https://openalex.org/I118118575"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Khiem Ton","raw_affiliation_strings":["New Jersey Institute of Technology, Newark, NJ, USA"],"raw_orcid":"https://orcid.org/0009-0000-7581-5413","affiliations":[{"raw_affiliation_string":"New Jersey Institute of Technology, Newark, NJ, USA","institution_ids":["https://openalex.org/I118118575"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5115054004","display_name":"Nhi Nguyen","orcid":null},"institutions":[{"id":"https://openalex.org/I118118575","display_name":"New Jersey Institute of Technology","ror":"https://ror.org/05e74xb87","country_code":"US","type":"education","lineage":["https://openalex.org/I118118575"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Nhi Nguyen","raw_affiliation_strings":["New Jersey Institute of Technology, Newark, NJ, USA"],"raw_orcid":"https://orcid.org/0009-0007-9024-9844","affiliations":[{"raw_affiliation_string":"New Jersey Institute of Technology, Newark, NJ, USA","institution_ids":["https://openalex.org/I118118575"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5066904836","display_name":"Mahmoud Nazzal","orcid":"https://orcid.org/0000-0003-3375-0310"},"institutions":[{"id":"https://openalex.org/I118118575","display_name":"New Jersey Institute of Technology","ror":"https://ror.org/05e74xb87","country_code":"US","type":"education","lineage":["https://openalex.org/I118118575"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Mahmoud Nazzal","raw_affiliation_strings":["New Jersey Institute of Technology, Newark, NJ, USA"],"raw_orcid":"https://orcid.org/0000-0003-3375-0310","affiliations":[{"raw_affiliation_string":"New Jersey Institute of Technology, Newark, NJ, USA","institution_ids":["https://openalex.org/I118118575"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5062119199","display_name":"Abdallah Khreishah","orcid":"https://orcid.org/0000-0003-1583-713X"},"institutions":[{"id":"https://openalex.org/I118118575","display_name":"New Jersey Institute of Technology","ror":"https://ror.org/05e74xb87","country_code":"US","type":"education","lineage":["https://openalex.org/I118118575"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Abdallah Khreishah","raw_affiliation_strings":["New Jersey Institute of Technology, Newark, NJ, USA"],"raw_orcid":"https://orcid.org/0000-0003-1583-713X","affiliations":[{"raw_affiliation_string":"New Jersey Institute of Technology, Newark, NJ, USA","institution_ids":["https://openalex.org/I118118575"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5074290416","display_name":"Cristian Borcea","orcid":"https://orcid.org/0000-0003-0020-0910"},"institutions":[{"id":"https://openalex.org/I118118575","display_name":"New Jersey Institute of Technology","ror":"https://ror.org/05e74xb87","country_code":"US","type":"education","lineage":["https://openalex.org/I118118575"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Cristian Borcea","raw_affiliation_strings":["New Jersey Institute of Technology, Newark, NJ, USA"],"raw_orcid":"https://orcid.org/0000-0003-0020-0910","affiliations":[{"raw_affiliation_string":"New Jersey Institute of Technology, Newark, NJ, USA","institution_ids":["https://openalex.org/I118118575"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5060481572","display_name":"NhatHai Phan","orcid":"https://orcid.org/0000-0002-1032-8275"},"institutions":[{"id":"https://openalex.org/I118118575","display_name":"New Jersey Institute of Technology","ror":"https://ror.org/05e74xb87","country_code":"US","type":"education","lineage":["https://openalex.org/I118118575"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"NhatHai Phan","raw_affiliation_strings":["New Jersey Institute of Technology, Newark, USA"],"raw_orcid":"https://orcid.org/0000-0002-1032-8275","affiliations":[{"raw_affiliation_string":"New Jersey Institute of Technology, Newark, USA","institution_ids":["https://openalex.org/I118118575"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5103270436","display_name":"Ruoming Jin","orcid":"https://orcid.org/0000-0003-1895-4243"},"institutions":[{"id":"https://openalex.org/I149910238","display_name":"Kent State University","ror":"https://ror.org/049pfb863","country_code":"US","type":"education","lineage":["https://openalex.org/I149910238"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Ruoming Jin","raw_affiliation_strings":["Kent State University, Kent, OH, USA"],"raw_orcid":"https://orcid.org/0000-0003-1895-4243","affiliations":[{"raw_affiliation_string":"Kent State University, Kent, OH, USA","institution_ids":["https://openalex.org/I149910238"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5008374141","display_name":"Issa Khalil","orcid":"https://orcid.org/0000-0002-7660-9512"},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Issa Khalil","raw_affiliation_strings":["Qatar Computing Research Institute, Doha, QA"],"raw_orcid":"https://orcid.org/0000-0002-7660-9512","affiliations":[{"raw_affiliation_string":"Qatar Computing Research Institute, Doha, QA","institution_ids":[]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5101694396","display_name":"Yelong Shen","orcid":"https://orcid.org/0000-0003-0994-7877"},"institutions":[{"id":"https://openalex.org/I1290206253","display_name":"Microsoft (United States)","ror":"https://ror.org/00d0nc645","country_code":"US","type":"company","lineage":["https://openalex.org/I1290206253"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Yelong Shen","raw_affiliation_strings":["Microsoft Azure AI, Redmond, WA, USA"],"raw_orcid":"https://orcid.org/0000-0003-0994-7877","affiliations":[{"raw_affiliation_string":"Microsoft Azure AI, Redmond, WA, USA","institution_ids":["https://openalex.org/I1290206253"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":3,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":null,"has_fulltext":true,"cited_by_count":1,"citation_normalized_percentile":null,"cited_by_percentile_year":null,"biblio":{"volume":null,"issue":null,"first_page":"5078","last_page":"5080"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10904","display_name":"Embedded Systems Design Techniques","score":0.9937000274658203,"subfield":{"id":"https://openalex.org/subfields/1708","display_name":"Hardware and Architecture"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10904","display_name":"Embedded Systems Design Techniques","score":0.9937000274658203,"subfield":{"id":"https://openalex.org/subfields/1708","display_name":"Hardware and Architecture"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":0.9901999831199646,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10743","display_name":"Software Testing and Debugging Techniques","score":0.9811000227928162,"subfield":{"id":"https://openalex.org/subfields/1712","display_name":"Software"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.7483384609222412},{"id":"https://openalex.org/keywords/code","display_name":"Code (set theory)","score":0.5396909713745117},{"id":"https://openalex.org/keywords/code-generation","display_name":"Code generation","score":0.526116669178009},{"id":"https://openalex.org/keywords/programming-language","display_name":"Programming language","score":0.3327028453350067},{"id":"https://openalex.org/keywords/computer-security","display_name":"Computer security","score":0.24662140011787415},{"id":"https://openalex.org/keywords/key","display_name":"Key (lock)","score":0.07685160636901855}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.7483384609222412},{"id":"https://openalex.org/C2776760102","wikidata":"https://www.wikidata.org/wiki/Q5139990","display_name":"Code (set theory)","level":3,"score":0.5396909713745117},{"id":"https://openalex.org/C133162039","wikidata":"https://www.wikidata.org/wiki/Q1061077","display_name":"Code generation","level":3,"score":0.526116669178009},{"id":"https://openalex.org/C199360897","wikidata":"https://www.wikidata.org/wiki/Q9143","display_name":"Programming language","level":1,"score":0.3327028453350067},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.24662140011787415},{"id":"https://openalex.org/C26517878","wikidata":"https://www.wikidata.org/wiki/Q228039","display_name":"Key (lock)","level":2,"score":0.07685160636901855},{"id":"https://openalex.org/C177264268","wikidata":"https://www.wikidata.org/wiki/Q1514741","display_name":"Set (abstract data type)","level":2,"score":0.0}],"mesh":[],"locations_count":2,"locations":[{"id":"doi:10.1145/3658644.3691367","is_oa":true,"landing_page_url":"https://doi.org/10.1145/3658644.3691367","pdf_url":"https://dl.acm.org/doi/pdf/10.1145/3658644.3691367","source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the 2024 on ACM SIGSAC Conference on Computer and Communications Security","raw_type":"proceedings-article"},{"id":"pmh:oai:arXiv.org:2409.07368","is_oa":true,"landing_page_url":"http://arxiv.org/abs/2409.07368","pdf_url":"https://arxiv.org/pdf/2409.07368","source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":null,"issn":null,"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by-nc-nd","license_id":"https://openalex.org/licenses/cc-by-nc-nd","version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"text"}],"best_oa_location":{"id":"doi:10.1145/3658644.3691367","is_oa":true,"landing_page_url":"https://doi.org/10.1145/3658644.3691367","pdf_url":"https://dl.acm.org/doi/pdf/10.1145/3658644.3691367","source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the 2024 on ACM SIGSAC Conference on Computer and Communications Security","raw_type":"proceedings-article"},"sustainable_development_goals":[],"awards":[{"id":"https://openalex.org/G6505553477","display_name":null,"funder_award_id":"NSF CNS-1935928","funder_id":"https://openalex.org/F4320323817","funder_display_name":"Universitas Brawijaya"},{"id":"https://openalex.org/G8228522028","display_name":"SaTC: CORE: Small: Collaborative: When Adversarial Learning Meets Differential Privacy: Theoretical Foundation and Applications","funder_award_id":"1935928","funder_id":"https://openalex.org/F4320306076","funder_display_name":"National Science Foundation"}],"funders":[{"id":"https://openalex.org/F4320306076","display_name":"National Science Foundation","ror":"https://ror.org/021nxhr62"},{"id":"https://openalex.org/F4320323817","display_name":"Universitas Brawijaya","ror":"https://ror.org/01wk3d929"}],"has_content":{"pdf":true,"grobid_xml":false},"content_urls":{"pdf":"https://content.openalex.org/works/W4403788859.pdf"},"referenced_works_count":2,"referenced_works":["https://openalex.org/W4287022754","https://openalex.org/W4403747722"],"related_works":["https://openalex.org/W4391375266","https://openalex.org/W2899084033","https://openalex.org/W2748952813","https://openalex.org/W2390279801","https://openalex.org/W4391913857","https://openalex.org/W2358668433","https://openalex.org/W2163672025","https://openalex.org/W2048831961","https://openalex.org/W1606349578","https://openalex.org/W4399567378"],"abstract_inverted_index":{"This":[0],"paper":[1],"introduces":[2],"SGCode,":[3],"a":[4,25,93,118,139],"flexible":[5],"prompt-optimizing":[6],"system":[7,27,69,134],"to":[8,36,61,100,121],"generate":[9,38],"secure":[10,39,130],"code":[11,131],"with":[12,22,78,92,143],"large":[13],"language":[14],"models":[15],"(LLMs).":[16],"SGCode":[17,73,114,136,146],"integrates":[18],"recent":[19],"prompt-optimization":[20],"approaches":[21],"LLMs":[23],"in":[24,106],"unified":[26],"accessible":[28],"through":[29],"front-end":[30],"and":[31,48,52,68,89,102,133],"back-end":[32],"APIs,":[33],"enabling":[34],"users":[35],"1)":[37],"code,":[40],"which":[41],"is":[42,115,147],"free":[43],"of":[44],"vulnerabilities,":[45],"2)":[46],"review":[47],"share":[49],"security":[50,90,104],"analysis,":[51],"3)":[53],"easily":[54],"switch":[55],"from":[56],"one":[57],"prompt":[58],"optimization":[59],"approach":[60,81],"another,":[62],"while":[63],"providing":[64],"insights":[65,123],"on":[66,74],"model":[67,128],"performance.":[70],"We":[71],"populated":[72],"an":[75,80,87],"AWS":[76],"server":[77],"PromSec,":[79],"that":[82,113],"optimizes":[83],"prompts":[84],"by":[85],"combining":[86],"LLM":[88],"tools":[91],"lightweight":[94],"generative":[95],"adversarial":[96],"graph":[97],"neural":[98],"network":[99],"detect":[101],"fix":[103],"vulnerabilities":[105],"the":[107,125],"generated":[108],"code.":[109],"Extensive":[110],"experiments":[111],"show":[112],"practical":[116],"as":[117],"public":[119],"tool":[120],"gain":[122],"into":[124],"trade-offs":[126],"between":[127],"utility,":[129],"generation,":[132],"cost.":[135],"has":[137],"only":[138],"marginal":[140],"cost":[141],"compared":[142],"prompting":[144],"LLMs.":[145],"available":[148],"at:":[149],"http://3.131.141.63:8501/.":[150]},"counts_by_year":[{"year":2026,"cited_by_count":1}],"updated_date":"2026-07-14T23:27:15.235271","created_date":"2024-10-27T00:00:00"}
