Concepedia

Patch-based Vulnerability Discovery

Patch-Based Vulnerability Discovery is a software vulnerability discovery method that identifies previously unknown vulnerabilities by analyzingpatches applied to fix software defects, distinguishing it from other methods by its reliance on the semantic and structural changes introduced in corrective updates rather than on static analysis, dynamic testing, or exploit patterns.

37

Publications

1.6K

Citations

137

Authors

61

Institutions

Publications per year

2017–2026

21

Parents

Publications

37

SPAIN: Security Patch Analysis for Binaries towards Understanding the Pain and Pills

Zhengzi Xu, Bihuan Chen, Mahinthan Chandramohan et al. · 2017 · 158 citations

, , +15

Timing the Application of Security Patches for Optimal Uptime

Steve Beattie, Seth Arnold, Crispin Cowan et al. · 2002 · 157 citations

, , +17

Countering Network Worms Through Automatic Patch Generation

Stelios Sidiroglou, Angelos D. Keromytis · IEEE Security & Privacy · 2005 · 135 citations · Full text

, , +14

AppSealer: Automatic Generation of Vulnerability-Specific Patches for Preventing Component Hijacking Attacks in Android Applications

Mu Zhang, Heng Yin · 2014 · 130 citations

, , +16

ShieldGen: Automatic Data Patch Generation for Unknown Vulnerabilities with Informed Probing

Weidong Cui, Marcus Peinado, Helen J. Wang et al. · 2007 · 105 citations

, , +16

1–5 of 37

Authors

137

  1. YL
    Yang Liu

    Nanyang Technological University, Singapore

    3 publications · 265 citations

    3

    h-index

  2. KS
    Kun Sun

    George Mason University, United States

    3 publications · 147 citations

    3

    h-index

  3. ZX
    Zhengzi Xu

    Nanyang Technological University, Singapore

    3 publications · 265 citations

    3

    h-index

  4. NM
    Naouel Moha

    Université du Québec à Montréal, Canada

    2 publications · 38 citations

    2

    h-index

  5. TF
    Tegawendé F. Bissyandé

    University of Luxembourg, Luxembourg

    2 publications · 38 citations

    2

    h-index

1–5 of 137

Institutions

61

  1. Columbia University

    New York, United States

    3 h-index

    4 publications

    387 citations

  2. Fudan University

    Shanghai, China

    3 h-index

    16 publications

    531 citations

  3. George Mason University

    Fairfax, United States

    3 h-index

    8 publications

    387 citations

  4. Nanyang Technological University

    Singapore, Singapore

    3 h-index

    8 publications

    846 citations

  5. University of Chinese Academy of Sciences

    Beijing, China

    2 h-index

    10 publications

    336 citations

  6. ShanghaiTech University

    Shanghai, China

    2 h-index

    2 publications

    233 citations

  7. Pennsylvania State University

    State College, United States

    2 h-index

    2 publications

    33 citations

  8. Ghent University

    Ghent, Belgium

    2 h-index

    6 publications

    162 citations

1–8 of 61

Venues

  1. arXiv (Cornell University)

    Repository · 3 publications · 50 citations

    3

    h-index

  2. IEEE Security & Privacy

    2 publications · 159 citations

    2

    h-index

  3. Empirical Software Engineering

    2 publications · 65 citations

    2

    h-index

  4. Information Economics and Policy

    1 publications · 40 citations

    1

    h-index

  5. IEEE Transactions on Emerging Topics in Computing

    ITETBT · 1 publications · 26 citations

    1

    h-index

1–5