一句话：发现多平台 PoC 报告的信息缺失可由同一漏洞的多源信息补全，并提出对齐核心要素的方法来改进 PoC 报告。
漏洞 PoC 报告对展示可利用性至关重要，通常包含具体用法、测试平台等关键信息。然而，不同 PoC 平台的模板差异导致报告普遍信息缺失，质量欠佳且实用性受限。作者观察到，对于同一被引用漏洞，可从多个来源补全缺失信息。为此，论文提出对齐核心要素的方法，利用跨来源洞察对 PoC 报告进行信息补全与质量提升。给出的摘要未报告具体技术细节和量化结果，但其核心思路是通过多源数据对齐来缓解单一平台模板造成的信息不足。
For vulnerabilities, Proof-of-Concept (PoC) plays an irreplaceable role in demonstrating the exploitability. PoC reports may include critical information such as specific usage, test platforms, and more, providing essential insights for researchers. However, in reality, due to various PoC templates across PoC platforms, PoC reports extensively suffer from information deficiency, leading the suboptimal quality and limited usefulness. Fortunately, we found that information deficiency of PoC reports could be mitigated by the completion from multiple sources given the same referred vulnerability.
DOI 原文 ·
@inproceedings{paperbot8935,
title = {Aligning Core Aspects: Improving Vulnerability Proof-of-Concepts via Cross-Source Insights},
author = {Lingxiao Wang and Wenjing Dang and Mengyao Zhao and Yue Wang and Xianzong Wu and Sen Chen},
booktitle = {FSE},
year = {2025},
doi = {10.1145/3696630.3730572}
}