一句话:提出通过适配器合成,复用二进制中已有的无缺陷代码片段来自动修复缺陷代码的工具。
商用软件与第三方组件中的缺陷代价高昂,而这类软件通常仅以二进制形式发布。源码的缺失使用户只能依赖软件厂商来修复缺陷;若缺陷引入新的安全漏洞,这种依赖性危害更大。自动修复二进制代码中的安全与功能缺陷,可在无需开发者介入的情况下提升软件健壮性。为此,本文提出开发一个二进制程序修复工具,其核心思路是利用程序中已有的无缺陷代码片段来修复有缺陷的代码,并通过适配器合成将可用片段适配到待修复位置。摘要为研究计划,未给出具体评估方案或实验结果。
Bugs in commercial software and third-party components are an undesirable and expensive phenomenon. Such software is usually released to users only in binary form. The lack of source code renders users of such software dependent on their software vendors for repairs of bugs. Such dependence is even more harmful if the bugs introduce new vulnerabilities in the software. Automatically repairing security and functionality bugs in binary code increases software robustness without any developer effort. In this research, we propose development of a binary program repair tool that uses existing bug-free fragments of code to repair buggy code.
DOI 原文 ·
@inproceedings{paperbot5240,
title = {Automatically Repairing Binary Programs Using Adapter Synthesis},
author = {Vaibhav Sharma},
booktitle = {ASE},
year = {2019},
doi = {10.1109/ase.2019.00149}
}