Beyond Similarity Scores: Evidence-Based Third-Party Library Detection for C/C++ Binaries
Detecting third-party libraries (TPLs) in C/C++ binaries is essential for software supply chain security, enabling vulnerability identification and license compliance. Existing methods predominantly rely on similarity matching: extracting features from binaries and comparing them against library databases. However, sim...