一句话：提出语义增强的静态检测方法，面向被忽视的基带固件消息特定处理阶段漏洞。
蜂窝网络是移动通信的基础设施，其基带固件承载蜂窝网络实现，漏洞具有关键安全影响。为处理蜂窝通信固有复杂性，协议通常实现为以消息为中心的系统，包含公共消息处理阶段和消息特定处理阶段。后者虽占 99.67% 的代码并暴露 74% 的漏洞，却研究不足：现有检测器要么无法充分分析该阶段，要么主要关注前一阶段。针对这一缺口，论文提出语义增强的静态漏洞检测方法，目标是对消息特定处理阶段进行更充分的分析，从而发现基带固件中的安全漏洞。摘要未给出具体实验评估，主要通过统计证据强调该阶段的重要性与现有工作的不足。
Cellular network is the infrastructure of mobile communication. Baseband firmware, which carries the implementation of cellular network, has critical security impact on its vulnerabilities. To handle the inherent complexity in cellular communication, cellular protocols are usually implemented as message-centric systems, containing the common message processing phase and message specific handling phase. Though the latter takes most of the code (99.67%) and exposed vulnerabilities (74%), it is rather under-studied: existing detectors either cannot sufficiently analyze it or focused on analyzing the former phase.
@inproceedings{paperbot11468,
title = {Semantic-Enhanced Static Vulnerability Detection in Baseband Firmware},
author = {Yiming Liu and Cen Zhang and Feng Li and Yeting Li and Jianhua Zhou and Jian Wang and Lanlan Zhan and Yang Liu and Wei Huo},
booktitle = {ICSE},
year = {2024},
doi = {10.1145/3597503.3639158}
}