PPT4J: Patch Presence Test for Java Binaries

Zhiyuan Pan, Xing Hu, Xin Xia, Xian Zhan, David Lo, Xiaohu Yang

Abstract

The number of vulnerabilities reported in open source software has increased substantially in recent years. Security patches provide the necessary measures to protect software from attacks and vulnerabilities. In practice, it is difficult to identify whether patches have been integrated into software, especially if we only have binary files. Therefore, the ability to test whether a patch is applied to the target binary, a.k.a. patch presence test, is crucial for practitioners. However, it is challenging to obtain accurate semantic information from patches, which could lead to incorrect results.

BibTeX

@inproceedings{Pan-al:ICSE24,
  author    = {Zhiyuan Pan and
               Xing Hu and
               Xin Xia and
               Xian Zhan and
               David Lo and
               Xiaohu Yang},
  title     = {{PPT4J:} Patch Presence Test for Java Binaries},
  booktitle = {ICSE},
  pages     = {225:1--225:12},
  publisher = {{ACM}},
  year      = {2024},
}

PPT4J: Patch Presence Test for Java Binaries

Abstract

Related papers