|
9 | 9 |
|
10 | 10 | ⚠️ Code and data for the [ICLR 2025 Paper](https://arxiv.org/pdf/2405.17238) can be found in the v1 branch, license and citation below. |
11 | 11 |
|
| 12 | +## 📰 News |
| 13 | +* **[Jul. 10, 2025]**: IRIS v2 released, added support for 7 new CWEs. |
| 14 | + |
12 | 15 | ## 👋 Overview |
13 | 16 | ### IRIS |
14 | 17 | IRIS is a neurosymbolic framework that combines LLMs with static analysis for security vulnerability detection. IRIS uses LLMs to generate source and sink specifications and to filter false positive vulnerable paths. |
@@ -89,10 +92,53 @@ export PATH="$PWD/codeql:$PATH" |
89 | 92 |
|
90 | 93 | **Note:** Also adjust the environment variable `CODEQL_QUERY_VERSION` in `src/config.py` according to the instructions therein. For instance, for CodeQL v2.15.0, this should be `0.8.0`. |
91 | 94 |
|
| 95 | +### Visualizer |
| 96 | + |
| 97 | +IRIS comes with a visualizer to view the SARIF output files. More detailed instructions can be found in the [docs](https://iris-sast.github.io/iris/features/visualizer.html). |
| 98 | + |
| 99 | + |
| 100 | + |
| 101 | +#### Usage: |
| 102 | + |
| 103 | +1. **Configure paths**: Edit `config.json` to point to your outputs and source directories |
| 104 | +2. **Start the server**: Run `python3 server.py` |
| 105 | +3. **Open in browser**: Navigate to `http://localhost:8000` |
| 106 | +4. **Select a project**: Choose a project from the dropdown to load its analysis results |
| 107 | +5. **Filter and explore**: Use the CWE and model filters to explore specific vulnerabilities |
| 108 | + |
| 109 | + |
92 | 110 | ## 💫 Contributions |
93 | 111 | We welcome any contributions, pull requests, or issues! |
94 | 112 | If you would like to contribute, please either file a new pull request or issue. We'll be sure to follow up shortly! |
95 | 113 |
|
| 114 | +## 🤝 Our Team |
| 115 | + |
| 116 | +IRIS is a collaborative effort between researchers at Cornell University and the University of Pennsylvania. Please reach out to us if you have questions about IRIS. |
| 117 | + |
| 118 | +### Students |
| 119 | + |
| 120 | +[Claire Wang](https://clairewang.net), University of Pennsylvania |
| 121 | + |
| 122 | +[Amartya Das](https://github.com/IcebladeLabs), Ward Melville High School |
| 123 | + |
| 124 | +[Derin Gezgin](https://deringezgin.github.io/), Connecticut College |
| 125 | + |
| 126 | +[Zhengdong (Forest) Huang](https://github.com/FrostyHec), Southern University of Science and Technology |
| 127 | + |
| 128 | +[Nevena Stojkovic](https://www.linkedin.com/in/nevena-stojkovic-3b7a69335), Massachusetts Institute of Technology |
| 129 | + |
| 130 | +### Faculty |
| 131 | + |
| 132 | +[Ziyang Li](https://liby99.github.io), Johns Hopkins University, previously PhD student at the University of Pennsylvania |
| 133 | + |
| 134 | +[Saikat Dutta](https://www.cs.cornell.edu/~saikatd), Cornell University |
| 135 | + |
| 136 | +[Mayur Naik](https://www.cis.upenn.edu/~mhnaik), University of Pennsylvania |
| 137 | + |
| 138 | +<img src="https://github.com/user-attachments/assets/37969a67-a3fd-4b4f-9be4-dfeed28d2b48" width="175" height="175" alt="Cornell University" /> |
| 139 | + |
| 140 | +<img src="https://github.com/user-attachments/assets/362abdfb-4ca4-46b2-b003-b185ce4d20af" width="300" height="200" alt="University of Pennsylvania"/> |
| 141 | + |
96 | 142 | ## ✍️ Citation & license |
97 | 143 | MIT license. Check `LICENSE.md`. |
98 | 144 |
|
|
0 commit comments