Sign In

Patch2Vuln: Agentic Reconstruction of Vulnerabilities from Linux Distribution Binary Patches

์ž‘์„ฑ์ž
  • Haebom
์นดํ…Œ๊ณ ๋ฆฌ
Empty

์ €์ž

Isaac David, Arthur Gervais

๐Ÿ’ก ๊ฐœ์š”

๋ณธ ๋…ผ๋ฌธ์€ ๋ฆฌ๋ˆ…์Šค ๋ฐฐํฌํŒ์˜ ๋ฐ”์ด๋„ˆ๋ฆฌ ํŒจ์น˜๋งŒ์„ ์ด์šฉํ•˜์—ฌ ์ทจ์•ฝ์ ์„ ์žฌ๊ตฌ์„ฑํ•˜๋Š” Patch2Vuln์ด๋ผ๋Š” ์ƒˆ๋กœ์šด ์ ‘๊ทผ ๋ฐฉ์‹์„ ์ œ์•ˆํ•ฉ๋‹ˆ๋‹ค. ์ด ์‹œ์Šคํ…œ์€ ์˜ค๋ž˜๋œ/์ƒˆ๋กœ์šด ELF ์‹คํ–‰ ํŒŒ์ผ ์Œ์„ ์ถ”์ถœํ•˜๊ณ , Ghidra์™€ Ghidriff๋ฅผ ์‚ฌ์šฉํ•ด ์ฐจ์ด๋ฅผ ๋ถ„์„ํ•˜๋ฉฐ, ๋ณ€๊ฒฝ๋œ ํ•จ์ˆ˜๋ฅผ ์ˆœ์œ„ํ™”ํ•œ ํ›„, ์˜คํ”„๋ผ์ธ ์–ธ์–ด ๋ชจ๋ธ ์—์ด์ „ํŠธ๊ฐ€ ์˜ˆ๋น„ ๊ฐ์‚ฌ, ์œ ํšจ์„ฑ ๊ฒ€์ฆ ๊ณ„ํš, ์ตœ์ข… ๊ฐ์‚ฌ๋ฅผ ์ˆ˜ํ–‰ํ•˜๋„๋ก ํ•ฉ๋‹ˆ๋‹ค. ์—ฐ๊ตฌ ๊ฒฐ๊ณผ, 20๊ฐœ์˜ ๋ณด์•ˆ ์—…๋ฐ์ดํŠธ ์Œ ์ค‘ 10๊ฐœ์—์„œ ๋ณด์•ˆ ๊ด€๋ จ ํŒจ์น˜ ํ•จ์ˆ˜๋ฅผ ์„ฑ๊ณต์ ์œผ๋กœ ์‹๋ณ„ํ•˜๊ณ  11๊ฐœ์—์„œ ๊ทผ๋ณธ ์›์ธ ๋ถ„๋ฅ˜๋ฅผ ๋‹ฌ์„ฑํ–ˆ์Šต๋‹ˆ๋‹ค.

๐Ÿ”‘ ์‹œ์‚ฌ์  ๋ฐ ํ•œ๊ณ„

โ€ข
๋ฐ”์ด๋„ˆ๋ฆฌ ํŒจ์น˜๋งŒ์œผ๋กœ๋„ ์ทจ์•ฝ์ ์˜ ์˜๋ฏธ๋ฅผ ์žฌ๊ตฌ์„ฑํ•  ์ˆ˜ ์žˆ๋‹ค๋Š” ๊ฐ€๋Šฅ์„ฑ์„ ๋ณด์—ฌ์ค๋‹ˆ๋‹ค.
โ€ข
๋ณด์•ˆ ์—…๋ฐ์ดํŠธ ๋ถ„์„ ์‹œ ์†Œ์Šค ์ฝ”๋“œ ์ ‘๊ทผ์ด ์–ด๋ ค์šด ์ƒํ™ฉ์—์„œ ์œ ์šฉํ•œ ๋„๊ตฌ๊ฐ€ ๋  ์ˆ˜ ์žˆ์Šต๋‹ˆ๋‹ค.
โ€ข
๋ฐ”์ด๋„ˆ๋ฆฌ ์ฐจ์ด ๋ถ„์„ ๋ฐ ํ•จ์ˆ˜ ์ˆœ์œ„ํ™” ๊ณผ์ •์˜ ํฌ๊ด„์„ฑ ๋ถ€์กฑ, ๊ทธ๋ฆฌ๊ณ  ๊ตญ์†Œ์ ์ธ ๋™์ž‘ ์œ ํšจ์„ฑ ๊ฒ€์ฆ์˜ ํ•œ๊ณ„๊ฐ€ ํ–ฅํ›„ ์—ฐ๊ตฌ ๊ณผ์ œ์ž…๋‹ˆ๋‹ค.
๐Ÿ‘
Made with Slashpage