Combining Structured Static Code Information and Dynamic Symbolic Traces for Software Vulnerability Prediction

Huanting Wang, Zhanyong Tang, Shin Hwei Tan, Jie Wang, Yuzhe Liu, Hejun Fang, Chunwei Xia, Zheng Wang. 2024. International Conference on Software Engineering.

Read the paper · doi:10.1145/3597503.3639212

What this paper does with SQLancer

One citation, noting that the CVEs used for evaluation were also used by prior work, SQLancer's among the references. Concoction learns program representations for bug detection by combining static source code information with dynamic symbolic execution traces, addressing the limitation that existing deep-learning representations either miss precise semantics or do not scale. Unsupervised active learning picks a subset of important paths for trace collection, and a focused symbolic execution implementation keeps the cost down. Applied to C programs from 20 open-source projects it found 54 unique vulnerabilities and 37 new CVE IDs. Written by claude-opus-5 from the 1 place this paper refers to SQLancer. The quotations below are the paper's own words, stored verbatim when the text was extracted.

How it was classified

uses infrastructure — no

SQLancer is cited, not used; nothing in the mentions describes reusing its code.

extends technique — no

No technique is extended; the citation is background.

compares with — no

No empirical comparison against SQLancer is reported in the mentions.

describes as state of the art — no

The citation does not characterise SQLancer as the state of the art.

SQLancer publications it cites (1)

Bibliography entries that resolved to a SQLancer publication, or to a paper by one of the project's authors. A sentence citing one of these numbers is a reference to SQLancer even when it never writes the name.

#	Entry	Matched as
71	ManuelRiggerandZhendongSu.2020. TestingDatabaseEnginesviaPivoted Query Synthesis.. In OSDI, Vol. 20. 667–682.	sqlancer publication · PQS

Every place it refers to SQLancer (1)

1 sentence, each stored verbatim from the extracted text with where it was found and how. “Citation marker” means the sentence names no tool at all and was reached through a reference number that resolved to a SQLancer publication.

Id	Sentence	Found by	Where
M1	These projects contain 35 CVEs reported by independent users, which were also used by prior work [ 69,71].	citation marker incidental	5.3 Comparison on Known CVEs page 9

This page is rendered from _data/papers/paper_doi_10_1145_3597503_3639212.json, extracted from supplied pdf. 13 pages, 88 references parsed.