Constructing the dataset for valid-configuration-related vulnerability

Jinyan Ding; Haifang Zhou; Huiping Zhou; Jingying Zhang

doi:10.1117/12.3006400

26 September 2023 Constructing the dataset for valid-configuration-related vulnerability

Jinyan Ding, Haifang Zhou, Huiping Zhou, Jingying Zhang

Author Affiliations +

Proceedings Volume 12793, International Conference on Mechatronics and Intelligent Control (ICMIC 2023); 127930B (2023) https://doi.org/10.1117/12.3006400
Event: International Conference on Mechatronics and Intelligent Control (ICMIC2023), 2023, Wuhan, China

Abstract

As the scale and complexity of software continue to increase, software security vulnerabilities are also growing. Among these vulnerabilities, configuration vulnerabilities account for a considerable proportion. These configuration vulnerabilities can only be triggered under specific configuration environments, making them harder to debug. However, existing work on vulnerability mining or vulnerability reproduction has overlooked the influence of configuration environment factors. In this paper, we investigated configuration vulnerabilities in five mainstream software products. We collected a total of 200 configuration vulnerabilities in which the related configuration changes are valid, and analyzed these vulnerabilities to construct a valid-configuration vulnerability database.

(2023) Published by SPIE. Downloading of the abstract is permitted for personal use only.

Citation Download Citation

Jinyan Ding, Haifang Zhou, Huiping Zhou, and Jingying Zhang "Constructing the dataset for valid-configuration-related vulnerability", Proc. SPIE 12793, International Conference on Mechatronics and Intelligent Control (ICMIC 2023), 127930B (26 September 2023); https://doi.org/10.1117/12.3006400

ACCESS THE FULL ARTICLE

INSTITUTIONAL
Select your institution to access the SPIE Digital Library.

SELECT YOUR INSTITUTION

PERSONAL
Sign in with your SPIE account to access your personal subscriptions or to use specific features such as save to my library, sign up for alerts, save searches, etc.

PERSONAL SIGN IN

No SPIE Account? Create one

;

PURCHASE THIS CONTENT

SUBSCRIBE TO DIGITAL LIBRARY

50 downloads per 1-year subscription

Members: $195

Non-members: $335 ADD TO CART

25 downloads per 1 - year subscription

Members: $145

Non-members: $250 ADD TO CART

PURCHASE SINGLE ARTICLE