An Empirical Study of CPG-based Static Analysis on Binaries
Software supply chain security has drawn growing attention, yet effective static analysis for widely deployed closed-source binaries remains challenging. While CPG-based methods perform well in source code vulnerability detection, their effectiveness and limitations in the binary domain still lack systematic evaluation...