Automated Detection of Configuration-Specific Security Vulnerabilities via Patch Analysis

We study how security patches in highly configurable C/C++ systems map onto the space of compile-time variants. We formalize the Vulnerability Impact Condition (VIC) - a Boolean predicate over configuration options that denotes all variants that contained the original flaw - and introduce PatchLens,…

View Post on Scour ↗

More from arXiv on Scour.