A Comprehensive Empirical Analysis of Patch Presence Testing: Capabilities, Limitations, and Paths Forward
Patch presence testing determines whether a binary incorporates the security fixes associated with a known vulnerability and has become increasingly important in software supply-chain security. However, despite numerous proposed techniques, the field still lacks a comprehensive understanding of the practical capabiliti...