The Convergence of Source Code and Binary Vulnerability Discovery -- A Case Study-Reference-Cited by-同舟云学术

The Convergence of Source Code and Binary Vulnerability Discovery -- A Case Study

Published:2022-05-30 Issue: Volume: Page:
ISSN:
Container-title:Proceedings of the 2022 ACM on Asia Conference on Computer and Communications Security
language:
Short-container-title:

Author:

Mantovani Alessandro¹,Compagna Luca²,Shoshitaishvili Yan³,Balzarotti Davide¹

Affiliation:

1. EURECOM, Biot, France

2. SAP Security Research, Sophia Antipolis, France

3. Arizona State University, Phoenix, AZ, USA

Funder

DARPA

Publisher

ACM

Link

https://dl.acm.org/doi/pdf/10.1145/3488932.3497764

Reference69 articles.

1. Accessed December 4 2021. Avast Retargetable Decompiler IDA Plugin. https: //blog.fpmurphy.com/2017/12/avast-retargetable-decompiler-ida-plugin.html. Accessed December 4 2021. Avast Retargetable Decompiler IDA Plugin. https: //blog.fpmurphy.com/2017/12/avast-retargetable-decompiler-ida-plugin.html.

2. Accessed December 4 2021. Awesome Static Analysis. https://github.com/ analysis-tools-dev/static-analysis. Accessed December 4 2021. Awesome Static Analysis. https://github.com/ analysis-tools-dev/static-analysis.

3. Accessed December 4 2021. C and C++ Source Code Analysis Tools. https: //www.codeanalysistools.com/?cplusplus. Accessed December 4 2021. C and C++ Source Code Analysis Tools. https: //www.codeanalysistools.com/?cplusplus.

4. Accessed December 4 2021. Code-QL. https://securitylab.github.com/tools/ codeql. Accessed December 4 2021. Code-QL. https://securitylab.github.com/tools/ codeql.

5. Accessed December 4 2021. Code-ql queries examples. https://help.semmle.com/ QL/learn-ql/cpp/ql-for-cpp.html. Accessed December 4 2021. Code-ql queries examples. https://help.semmle.com/ QL/learn-ql/cpp/ql-for-cpp.html.

Cited by 8 articles. 订阅此论文施引文献订阅此论文施引文献，注册后可以免费订阅5篇论文的施引文献，订阅后可以查看论文全部施引文献

1. Evaluating C/C++ Vulnerability Detectability of Query-Based Static Application Security Testing Tools;IEEE Transactions on Dependable and Secure Computing;2024-09

2. "Len or index or count, anything but v1": Predicting Variable Names in Decompilation Output with Transfer Learning;2024 IEEE Symposium on Security and Privacy (SP);2024-05-19

3. Plankton: Reconciling Binary Code and Debug Information;Proceedings of the 29th ACM International Conference on Architectural Support for Programming Languages and Operating Systems, Volume 2;2024-04-27

4. Modularizing Directed Greybox Fuzzing for Binaries over Multiple CPU Architectures;Lecture Notes in Computer Science;2024

5. Differential Static Analysis for Detecting Malicious Updates to Open Source Packages;Proceedings of the 2023 Workshop on Software Supply Chain Offensive Research and Ecosystem Defenses;2023-11-26