paperbot · PL 论文追踪

全部论文 待读 收藏

P2 SymRadar: PoC-Centered Bounded Verification for Vulnerability Repair

SymRadar:以 PoC 为中心的有界验证用于漏洞修复
ICSE Proceedings of the 2026 IEEE/ACM 48th International Conference on Software Engineering2026匹配度 3/10 · 论文属于程序验证/符号执行方向,但未涉及 LLM/Agent、ML 系统、浮点程序分析或贝叶斯程序分析,与研究画像的核心交叉点不匹配。它更偏传统漏洞修复补丁验证,作为背景知识可存档。引用 1 inbox
Seungheon Han, YoungJae Kim, Yeseung Lee, Jooyong Yi
crossref: 2026-09-12

AI 速览

一句话:提出 SymRadar,用围绕 PoC 输入的函数级欠约束符号执行验证补丁,召回率达 100%、特异度 78%。

论文研究自动化漏洞修复(AVR)中的补丁验证问题:仅生成补丁并不够,还需证明其正确性,而现有补丁验证方法效果不足。为此,作者提出 SymRadar,一种基于欠约束符号执行(UC-SE)的补丁验证工具。其核心特点是以给定的 proof-of-concept(PoC)输入为中心,在函数级别进行符号执行,从而将验证范围限制在与漏洞触发相关的有界路径上。评估表明,这种以 PoC 为中心的符号执行策略有效,在所有对比技术中取得最高召回率(100%)与特异度(78%),说明其能在保持较高精度的同时识别出可接受补丁。

问题
自动化漏洞修复生成的补丁缺乏充分的正确性证据,而现有补丁验证方法在有效性与准确性上仍不足。
方法
SymRadar 采用欠约束符号执行,并以提供的 PoC 输入为中心,在函数级别进行有界符号执行来验证补丁。
评估
通过与现有补丁验证技术对比,报告召回率与特异度,SymRadar 取得 100% 召回率和 78% 特异度。
原文摘要(Abstract)

In this paper, we tackle the problem of patch verification. While automated vulnerability repair (AVR) techniques are gaining traction, it is not sufficient to merely generate patches; providing evidence of their correctness is also essential. However, the current state-of-the-art patch verification methods are not sufficiently effective. To address this issue, we present SymRadar, a patch verification tool based on under-constrained symbolic execution (UC-SE). What distinguishes SymRadar from existing patch verification techniques is its use of function-level symbolic execution with inputs centered around the provided proof-of-concept (PoC) input. As demonstrated in our evaluation, this PoC-centered symbolic execution is effective, achieving the highest recall (100%) and specificity (78%) among all compared techniques.

链接与引用

DOI 原文 · PDF(开放获取) ·

BibTeX
@inproceedings{paperbot11510,
  title = {SymRadar: PoC-Centered Bounded Verification for Vulnerability Repair},
  author = {Seungheon Han and YoungJae Kim and Yeseung Lee and Jooyong Yi},
  booktitle = {ICSE},
  year = {2026},
  doi = {10.1145/3744916.3787825}
}