notesum.ai

Published at November 29

Enhancing Security in Third-Party Library Reuse -- Comprehensive Detection of 1-day Vulnerability through Code Patch Analysis

cs.SE

Released Date: November 29, 2024

Authors: Shangzhi Xu¹, Jialiang Dong¹, Weiting Cai², Juanru Li³, Arash Shaghaghi¹, Nan Sun¹, Siqi Ma¹

Aff.: ¹The University of New South Wales, Sydney, Australia; ²Delft University of Technology, Delft, Netherlands; ³Feiyu Technology International Company Ltd

Arxiv: http://arxiv.org/pdf/2411.19648v1

Target	DB_iot			DB_kwd
Target	Dtc	Cfm	P	Dtc	Cfm	P
AliOS-Things	47	33	0.70	61	20	0.33
LiteOS	18	12	0.66	19	4	0.21
Tasmota	66	54	0.82	63	39	0.62
TizenRT	44	34	0.77	51	20	0.39
kamailio	7	2	0.29	10	2	0.20
mbed-os	17	12	0.70	28	10	0.36
openthread	4	2	0.50	4	1	0.25
Sming	32	24	0.75	3	3	1.00
TDengine	3	3	1.00	4	2	0.50
zephyr	2	2	1.00	5	1	0.20
Total	240	178	0.74	248	102	0.41