一句话：提出基于锚点节点切片的AnchorDiff，以提升非线性与微小更新下的二进制OSS版本识别准确率。
二进制开源软件常作为第三方代码被嵌入固件和下游软件，其漏洞也会随代码复用传播，因此识别二进制中OSS的版本对检测N-day漏洞至关重要。现有版本识别方法虽取得进展，但面临非线性更新和微小更新带来的挑战，准确率提升受限。为此，论文提出AnchorDiff，一种基于锚点节点切片的二进制OSS版本识别方法，采用锚点节点切片作为核心分析手段，旨在缓解上述更新模式对识别的影响。摘要未报告具体实验数据与评估结果。
Binary Open-Source Software (OSS) is commonly embedded as third-party code within firmware and downstream software architectures, for simplifying the development process. However, vulnerabilities existing in OSS can be propagated through code reuse into embedded firmware and software architectures, posing security risks to these devices. To mitigate the security risks in firmware and software architectures, researchers have identified the versions of extracted firmware or binary software to detect N-day vulnerabilities in OSS. Existing works have achieved several success, but new challenges of non-linear update and minor updates hinder the improvement of the accuracy of binary OSS version identification.
@inproceedings{paperbot11749,
title = {AnchorDiff: Binary OSS Version Identification Method Based on Anchor Node Slicing},
author = {Zixuan Liang and Lei Zhou and Yongqiang Guo and Peihong Lin and Danjun Liu and Baosheng Wang and Xu Zhou},
booktitle = {ICSE},
year = {2026},
doi = {10.1145/3744916.3787772}
}