SA2Pat (Security Advisory to Patch), a framework that accurately localizes security patches by learning from patterns in historical vulnerability fixes, is proposed, and a fine-tuned SecureBERT model is employed to predict the likely CWE ID, ensuring that the input information remains complete.
V UL G ENIE is a patch-driven framework that extracts precise API security rules from confirmed security patches to then detect API misuse vulnerabilities, and scales analysis with adaptive, deviation-guided static analysis to balance precision and performance.
Bofei Chen, Shuang Liao, LeiZhang et al.· 2 citations
BinVulRAG, a function-level assessment framework that retrieves provenance-aware knowledge units rather than plain documents or code fragments, supports grounding retrieved vulnerability knowledge in binary-observable evidence when distinguishing vulnerable functions from patched functions.
Ye Tian, Qian Xiao, Hongmei Wei et al.· Electronics· 0 citations
Reliable learning-based vulnerability detection requires high-quality labels, yet datasets built from vulnerability-fixing commits may label functions as vulnerable simply because they were changed by a security patch. We present VulValidate, a framework that uses LLM agents to coordinate dynamic analysis tools and con...
A dual-stream CodeBERT architecture is presented that addresses keyword bias —by combining pre-trained Transformer representations with a 50-dimensional hand-engineered security feature vector, supported by targeted data augmentation and two-stage adversarial fine-tuning.
Arjun Khurana, Talaya Farasat, Joachim Posegga et al.· 0 citations
This work introduces CodePoisonRAG, a targeted upstream knowledge-poisoning framework that transforms benign fixed-code entries into poisoned artifacts and shows that RACG poisoning extends beyond the incidental propagation of existing vulnerabilities to the targeted construction and propagation of attacker-selected we...
Varun Gadey, Ziad Marey, Alexandra Dmitrienko· 1 citation
Locating a known source function in a stripped binary is a prerequisite for many security and software engineering tasks, including Software Composition Analysis (SCA) false-positive elimination, patch presence verification, malware analysis, code plagiarism detection, and license compliance auditing. We formalize this...
Jing-Yi Shi, Cheng-Yue Liu, Zheng-Zi Xu et al.· Proceedings of the ACM on Pr...· 0 citations
We use cookies to run the site and, with your consent, for analytics and to show ads.
See our Cookie Policy.
