paperbot · PL 论文追踪

全部论文 待读 收藏

P2 PPT4J: Patch Presence Test for Java Binaries

PPT4J:Java 二进制补丁存在性测试
ICSE Proceedings of the IEEE/ACM 46th International Conference on Software Engineering2024匹配度 2/10 · 该论文属于程序分析与安全领域的补丁存在性测试,虽与广义程序分析相关,但不涉及用户画像核心的 LLM/Agent 与静态分析交叉、浮点程序分析或贝叶斯程序分析,因此匹配度较低。引用 7 inbox
Zhiyuan Pan, Xing Hu, Xin Xia, Xian Zhan, David Lo, Xiaohu Yang
crossref: 2026-09-12

AI 速览

一句话:提出 PPT4J,用于判断 Java 二进制是否已应用指定补丁,并指出从补丁提取准确语义信息是关键挑战。

开源软件漏洞与安全补丁数量持续增长,安全补丁是保护软件免受攻击和漏洞影响的重要手段。实践中常难以判断补丁是否已集成到软件中,尤其当仅有二进制文件时。因此,补丁存在性测试对从业者至关重要。然而,从补丁中获取准确的语义信息具有挑战性,可能导致错误结果。论文提出 PPT4J,面向 Java 二进制开展补丁存在性测试,目标是在缺乏源码的情况下判断目标二进制是否已应用给定补丁。摘要未给出具体技术细节与实验结论。

问题
问题是在仅有二进制文件时,如何判断目标软件是否已集成安全补丁;这一补丁存在性测试对漏洞管理与修复确认至关重要。
方法
论文提出 PPT4J,面向 Java 二进制实现补丁存在性测试,并关注从补丁中准确提取语义信息以降低误判;具体方法细节未被摘要展开。
评估
摘要未报告评估数据集、指标或结果;从标题可知评估对象为 Java 二进制上的补丁存在性判断。
原文摘要(Abstract)

The number of vulnerabilities reported in open source software has increased substantially in recent years. Security patches provide the necessary measures to protect software from attacks and vulnerabilities. In practice, it is difficult to identify whether patches have been integrated into software, especially if we only have binary files. Therefore, the ability to test whether a patch is applied to the target binary, a.k.a. patch presence test, is crucial for practitioners. However, it is challenging to obtain accurate semantic information from patches, which could lead to incorrect results.

链接与引用

DOI 原文 · PDF(开放获取) ·

BibTeX
@inproceedings{paperbot11298,
  title = {PPT4J: Patch Presence Test for Java Binaries},
  author = {Zhiyuan Pan and Xing Hu and Xin Xia and Xian Zhan and David Lo and Xiaohu Yang},
  booktitle = {ICSE},
  year = {2024},
  doi = {10.1145/3597503.3639231}
}