ATVHunter是一个系统，能够准确识别应用内的易受攻击第三方库版本，并提供有关漏洞和库的详细信息。通过两阶段检测方法，利用控制流图作为粗粒度特征匹配预定义的库数据库，然后使用每个基本块的opcode作为细粒度特征来确定确切的库版本。实验结果显示，ATVHunter在精度和召回率上优于现有工具，且对混淆技术有抵抗力，适用于大规模库检测。
ATVHunter: Reliable Version Detection of Third-Party Libraries for Vulnerability Identification in Android Applications
We propose a system, named ATVHunter, which can pinpoint the precise
vulnerable in-app TPL versions and provide detailed information about the
vulnerabilities and TPLs. We propose a two-phase detection approach to identify
specific TPL versions. Specifically, we extract the Control Flow Graphs as the
coarse-grained feature to match potential TPLs in the pre-defined TPL database,
and then extract opcode in each basic block of CFG as the fine-grained feature
to identify the exact TPL versions. We build a comprehensive TPL database
(189,545 unique TPLs with 3,006,676 versions) as the reference database.
Meanwhile, to identify the vulnerable in-app TPL versions, we also construct a
comprehensive and known vulnerable TPL database containing 1,180 CVE
最低0.47元/天 解锁文章
扫一扫
864
被折叠的 条评论
为什么被折叠?
到【灌水乐园】发言
