7 papers
Understanding Binary Code Similarity for Real-World Vulnerability Detection: A Large-Scale Empirical Study
Jingdong Guo, Chaopeng Dong, Yimo Ren +4
Firmware lies at the heart of IoT devices. Its development depends heavily on third-party libraries (TPLs), which greatly accelerate the process but simultaneously introduce associ…
Lares: LLM-driven Code Slice Semantic Search for Patch Presence Testing
Siyuan Li, Yaowen Zheng, Hong Li +7
In modern software ecosystems, 1-day vulnerabilities pose significant security risks due to extensive code reuse. Identifying vulnerable functions in target binaries alone is insuf…
VERCATION: Precise Vulnerable Open-source Software Version Identification based on Static Analysis and LLM
Yiran Cheng, Ting Zhang, Lwin Khin Shar +6
Open-source software (OSS) has experienced a surge in popularity, attributed to its collaborative development model and cost-effective nature. However, the adoption of specific sof…
Towards Reliable LLM-Driven Fuzz Testing: Vision and Road Ahead
Yiran Cheng, Hong Jin Kang, Lwin Khin Shar +4
Fuzz testing is a crucial component of software security assessment, yet its effectiveness heavily relies on valid fuzz drivers and diverse seed inputs. Recent advancements in Larg…
Fine-Grained 1-Day Vulnerability Detection in Binaries via Patch Code Localization
Chaopeng Dong, Jingdong Guo, Shouguo Yang +5
1-day vulnerabilities in binaries have become a major threat to software security. Patch presence test is one of the effective ways to detect the vulnerability. However, existing p…
TransferFuzz: Fuzzing with Historical Trace for Verifying Propagated Vulnerability Code
Siyuan Li, Yuekang Li, Zuxin Chen +5
Code reuse in software development frequently facilitates the spread of vulnerabilities, making the scope of affected software in CVE reports imprecise. Traditional methods primari…