5 papers
Understanding Binary Code Similarity for Real-World Vulnerability Detection: A Large-Scale Empirical Study
Jingdong Guo, Chaopeng Dong, Yimo Ren +4
Firmware lies at the heart of IoT devices. Its development depends heavily on third-party libraries (TPLs), which greatly accelerate the process but simultaneously introduce associ…
Lares: LLM-driven Code Slice Semantic Search for Patch Presence Testing
Siyuan Li, Yaowen Zheng, Hong Li +7
In modern software ecosystems, 1-day vulnerabilities pose significant security risks due to extensive code reuse. Identifying vulnerable functions in target binaries alone is insuf…
Fine-Grained 1-Day Vulnerability Detection in Binaries via Patch Code Localization
Chaopeng Dong, Jingdong Guo, Shouguo Yang +5
1-day vulnerabilities in binaries have become a major threat to software security. Patch presence test is one of the effective ways to detect the vulnerability. However, existing p…
TransferFuzz: Fuzzing with Historical Trace for Verifying Propagated Vulnerability Code
Siyuan Li, Yuekang Li, Zuxin Chen +5
Code reuse in software development frequently facilitates the spread of vulnerabilities, making the scope of affected software in CVE reports imprecise. Traditional methods primari…
BinEnhance: An Enhancement Framework Based on External Environment Semantics for Binary Code Search
Yongpan Wang, Hong Li, Xiaojie Zhu +4
Binary code search plays a crucial role in applications like software reuse detection. Currently, existing models are typically based on either internal code semantics or a combina…