Detecting third-party libraries (TPLs) in C/C++ binaries is essential for software supply chain security, enabling vulnerability identification and license compliance. Existing methods predominantly rely on similarity matching: extracting features from binaries and comparing them against library databases. However, sim...
Cheng-Yue Liu, Zheng-Zi Xu, Lyuye Zhang et al.· Proceedings of the ACM on So...· 0 citations
Locating a known source function in a stripped binary is a prerequisite for many security and software engineering tasks, including Software Composition Analysis (SCA) false-positive elimination, patch presence verification, malware analysis, code plagiarism detection, and license compliance auditing. We formalize this...
Jing-Yi Shi, Cheng-Yue Liu, Zheng-Zi Xu et al.· Proceedings of the ACM on Pr...· 0 citations
SemRef, a framework that combines LLMs with dependency analysis to automatically refine architectures recovered by existing architecture recovery tools, is introduced, which improves accuracy across various metrics and enhances both the accuracy and the comprehension of recovered architectures.
Yi-Ran Zhang, Chengwei Liu, Yu-Qiang Sun et al.· Proceedings of the 2026 IEEE...· 1 citation
We use cookies to run the site and, with your consent, for analytics and to show ads.
See our Cookie Policy.