VulMatch: Binary-Level Vulnerability Detection Through Signature

VulMatch: Binary-Level Vulnerability Detection Through Signature

연구 분야: Strategies

학회: International Conference on Network and System Security

Vulnerabilities often recur in software due to code reuse, particularly with widely used third-party libraries. Detecting such vulnerabilities, including 1-day and N-day types, is crucial for cybersecurity. Current methods struggle with poor performance as they focus on detecting patch existence rather than actual vulnerabilities and derive signatures directly from binary code. We propose VulMatch, which generates precise vulnerability signatures by analyzing both source and binary code. Our method outperforms existing tools like Asm2vec and Palmtree and provides better explainability in detection. Tested on over 1,000 vulnerabilities across seven open-source projects and commercial firmware, VulMatch demonstrates superior fine-grained detection capabilities.