一句话：提出 LibvDiff，利用库版本差异引导二进制中开源软件版本的精确识别，以缓解版本字符串或常量特征缺失问题。
开源软件被广泛复用，但编译后的二进制常缺失版本字符串或常量等可识别特征，导致现有 OSS 版本识别方法不精确，并影响关联漏洞发现与 1-day 漏洞预警。LibvDiff 提出以库版本差异为导向的二进制 OSS 版本识别方法，试图摆脱对版本字符串或单一常量特征的依赖，通过捕捉不同库版本之间的差异来判定所用版本。摘要未报告具体实验设置、数据集或精度结果，仅说明该方法针对现有特征缺失或不具代表性时的识别难题。
Open-source software (OSS) has been extensively employed to expedite software development, inevitably exposing downstream software to the peril of potential vulnerabilities. Precisely identifying the version of OSS not only facilitates the detection of vulnerabilities associated with it but also enables timely alerts upon the release of 1-day vulnerabilities. However, current methods for identifying OSS versions rely heavily on version strings or constant features, which may not be present in compiled OSS binaries or may not be representative when only function code changes are made. As a result, these methods are often imprecise in identifying the version of OSS binaries being used.
@inproceedings{paperbot11294,
title = {LibvDiff: Library Version Difference Guided OSS Version Identification in Binaries},
author = {Chaopeng Dong and Siyuan Li and Shouguo Yang and Yang Xiao and Yongpan Wang and Hong Li and Zhi Li and Limin Sun},
booktitle = {ICSE},
year = {2024},
doi = {10.1145/3597503.3623336}
}