一句话:提出 SymRadar,用围绕 PoC 输入的函数级欠约束符号执行验证补丁,召回率达 100%、特异度 78%。
论文研究自动化漏洞修复(AVR)中的补丁验证问题:仅生成补丁并不够,还需证明其正确性,而现有补丁验证方法效果不足。为此,作者提出 SymRadar,一种基于欠约束符号执行(UC-SE)的补丁验证工具。其核心特点是以给定的 proof-of-concept(PoC)输入为中心,在函数级别进行符号执行,从而将验证范围限制在与漏洞触发相关的有界路径上。评估表明,这种以 PoC 为中心的符号执行策略有效,在所有对比技术中取得最高召回率(100%)与特异度(78%),说明其能在保持较高精度的同时识别出可接受补丁。
In this paper, we tackle the problem of patch verification. While automated vulnerability repair (AVR) techniques are gaining traction, it is not sufficient to merely generate patches; providing evidence of their correctness is also essential. However, the current state-of-the-art patch verification methods are not sufficiently effective. To address this issue, we present SymRadar, a patch verification tool based on under-constrained symbolic execution (UC-SE). What distinguishes SymRadar from existing patch verification techniques is its use of function-level symbolic execution with inputs centered around the provided proof-of-concept (PoC) input. As demonstrated in our evaluation, this PoC-centered symbolic execution is effective, achieving the highest recall (100%) and specificity (78%) among all compared techniques.