FORGE 2026
Sun 12 - Sat 18 April 2026 Rio de Janeiro, Brazil
co-located with ICSE 2026

This program is tentative and subject to change.

Mon 13 Apr 2026 16:42 - 16:48 at Oceania I - Session IV - Security & Privacy Chair(s): Zhou Yang

Trusted Execution Environments (TEEs) provide hardware-enforced isolation that protects sensitive code and data from untrusted soft- ware. Despite their strong security guarantees, analyzing TEE ap- plications remains challenging due to the high cost and complexity of configuring complete TEE build and runtime environments, as well as the limited observability imposed by hardware isolation. This paper presents SymTEE, a novel large language model (LLM)- assisted symbolic execution framework for detecting missing input validation issues in TEE applications without requiring real TEE setups. SymTEE begins by leveraging Abstract Syntax Tree (AST) analysis to extract TEE code slices that may lack sufficient input validation, and then employs an LLM (GPT-5 in our case) to auto- matically convert the extracted slices into KLEE-compatible harness programs containing lightweight mock execution environments for symbolic analysis. Evaluations on 26 vulnerabilities (11 real-world and 15 synthetic) show that SymTEE achieves 100% precision and 92.3% recall in detecting missing input validation vulnerabilities while incurring an average analysis cost of only $0.05. These re- sults demonstrate the effectiveness and practicality of SymTEE’s pioneering paradigm of LLM-assisted symbolic execution, where LLMs autonomously generate mock environments to enable auto- mated security analysis without complex setup, providing a more accessible and scalable framework for trusted computing systems.

This program is tentative and subject to change.

Mon 13 Apr

Displayed time zone: Brasilia, Distrito Federal, Brazil change

16:00 - 17:00
Session IV - Security & PrivacyResearch Papers / Data and Benchmarking at Oceania I
Chair(s): Zhou Yang University of Alberta, Alberta Machine Intelligence Institute
16:00
12m
Talk
PIChecker: Automatic Privacy Detector for Third Party Libraries in Android AppsVirtual Attendance
Research Papers
Kerui Huang , Xian Zhan Southern University of Science and Technology, Xin Xia Zhejiang University
16:12
12m
Talk
DynamicsLLM: a Dynamic Analysis-based Tool for Generating Intelligent Execution Traces Using LLMs to Detect Android Behavioural Code Smells
Research Papers
Houcine Abdelkader Cherief Ecole de Technologie Supérieure, Florent AVELLANEDA Université du Québec à Montréal, Naouel Moha École de Technologie Supérieure (ETS)
16:24
6m
Talk
MIRROR: A Dataset of Structural Metrics for Repackaged Android Apps
Data and Benchmarking
Sebastian Siedler Florida Polytechnic University, Karim Elish Florida Polytechnic University
16:30
12m
Talk
MalCVE: Malware Detection and CVE Association Using Large Language Models
Research Papers
Eduard Andrei Cristea Norwegian University of Science and Technology, Petter Molnes Norwegian University of Science and Technology, Jingyue Li Norwegian University of Science and Technology (NTNU)
16:42
6m
Talk
Finding Missing Input Validation in TEEs via LLM-Assisted Symbolic Execution
Research Papers
Chengyan Ma Singapore Management University, Jieke Shi Singapore Management University, Ruidong Han Singapore Management University, Ye Liu Singapore Management University, Yuqing Niu , David Lo Singapore Management University
Pre-print
16:48
6m
Talk
Jailbreaking Large Language Models via Multi-Task Embedding-based Prompt
Research Papers
Songrui Li Tianjin university, Hanmo You Tianjin University, Jiajun Jiang Tianjin University, li songrui
Hide past events