static_analysis IRIS: LLM-Assisted Static Analysis for Detecting Security Vulnerabilities March 26, 2025 使用LLM推理sources & sinks，用于CodeQL漏洞检测，并用LLM对检测结果进行验证。 SSRF vs. Developers: A Study of SSRF-Defenses in PHP Applications October 15, 2024 SSRF vs. Developers: A Study of SSRF-Defenses in PHP Applications