TraceVIC: Causal Reasoning over Code Evolution for Identifying Vulnerability-Inducing Commits
[Inżynieria oprogramowania] Autorzy: Fnu Tanish, Samiha Shimmi, Samikshya Chapagain i 3 więcej
Software vulnerabilities are often discovered long after they are introduced, making it difficult to identify the vulnerability-inducing commit (VIC) responsible for introducing the underlying vulnerable condition. Existing VIC identification techniques largely rely on git blame to trace vulnerable code through revision history and use positional heuristics, such as selecting its earliest or most recent modification. However, the true VIC may occur anywhere within this history, and vulnerable behavior may depend on code that evolves across multiple revisions. We therefore argue that VIC identification requires reasoning about how vulnerability-relevant code evolves, rather than simply where a candidate commit appears in the revision history. We present TraceVIC, a temporal graph-based approach for identifying and ranking VICs by reasoning over code evolution. TraceVIC first localizes li…
- Kategoria arxiv
- cs.SE
- Kategoria
- Inżynieria oprogramowania