Patch-Guided Vulnerability Detection: Extracting Java API Security Rules via Attack–Defense Cross-Analysis
V UL G ENIE is a patch-driven framework that extracts precise API security rules from confirmed security patches to then detect API misuse vulnerabilities, and scales analysis with adaptive, deviation-guided static analysis to balance precision and performance.
Bofei Chen, Shuang Liao, LeiZhang et al.
· 1 citation