English (United Kingdom)

https://curated-unify.zendy.io/wp-json/zendy-region/v1/featured_content/oa?rat=en

https://curated-unify.zendy.io/wp-json/zendy-region/v1/highlighted_journal/

Global: Zendy Plus annual

Presents the access of premium content as premium feature

Premium Content

Presents the keyphrase highlighting as premium feature

Keyphrase Highlighting

Presents the summarisation as premium feature

Summarisation

Insights

Presents the pdf analysis as premium feature

PDF Analysis

Presents the zaia usage as premium feature

ZAIA

Global: Zendy Plus monthly

Global: Zendy Tools annual

Global: Zendy Tools monthly

Global: Zendy Free Plan

During software development, vulnerabilities have posed a significant threatto users. Patches are the most effective way to combat vulnerabilities. In alarge-scale software system, testing the presence of a security patch in everyaffected binary is crucial to ensure system security. Identifying whether abinary has been patched for a known vulnerability is challenging, as there mayonly be small differences between patched and vulnerable versions. Existingapproaches mainly focus on detecting patches that are compiled in the samecompiler options. However, it is common for developers to compile programs withvery different compiler options in different situations, which causesinaccuracy for existing methods. In this paper, we propose a new approach namedPS3, referring to precise patch presence test based on semantic-level symbolicsignature. PS3 exploits symbolic emulation to extract signatures that arestable under different compiler options. Then PS3 can precisely test thepresence of the patch by comparing the signatures between the reference and thetarget at semantic level.  To evaluate the effectiveness of our approach, we constructed a datasetconsisting of 3,631 (CVE, binary) pairs of 62 recent CVEs in four C/C++projects. The experimental results show that PS3 achieves scores of 0.82, 0.97,and 0.89 in terms of precision, recall, and F1 score, respectively. PS3outperforms the state-of-the-art baselines by improving 33% in terms of F1score and remains stable in different compiler options.

PS$^3$: Precise Patch Presence Test based on Semantic Symbolic Signature