A Survey on Automated Vulnerability Repair
DOI:
Author:
Affiliation:

Clc Number:

Fund Project:

  • Article
  • |
  • Figures
  • |
  • Metrics
  • |
  • Reference
  • |
  • Related
  • |
  • Cited by
  • |
  • Materials
  • |
  • Comments
    Abstract:

    Software vulnerabilities are known as a special kind of defects that threat the completeness, security and reliability of computer systems. To date, developers deal with software vulnerabilities in a manual way, which is a tedious, time-consuming, error-prone, and challenging task. To boost the automation of solving vulnerabilities, automated vulnerability repair has been becoming a popular research topic in academia. The automated vulnerability repair work consists of three main process: vulnerability localization, patch generation, and patch validation, which aims at releasing developers from the huge burden of addressing vulnerabilities. To this end, researchers have explored various research work on vulnerability repair. To build a comprehensive knowledge on vulneraibility repair for practitioners, we conducted a systematic survey to illustrate the theory, design and implementation of different vulnerability repair approaches. Eventually, this survey makes the following contributions: (1) vulnerability repair taxonomy of specific and general vulnerability types; (2) classification and summarization of different repair approaches based on the technical principles; discussions on (3) challenges of vulnerability repair; (4) future research topics of vulnerability repair.

    Reference
    Related
    Cited by
Get Citation
Share
Article Metrics
  • Abstract:
  • PDF:
  • HTML:
  • Cited by:
History
  • Received:January 17,2022
  • Revised:October 12,2022
  • Adopted:November 15,2022
  • Online:
  • Published:
You are the firstVisitors
Copyright: Institute of Software, Chinese Academy of Sciences Beijing ICP No. 05046678-4
Address:4# South Fourth Street, Zhong Guan Cun, Beijing 100190,Postal Code:100190
Phone:010-62562563 Fax:010-62562533 Email:jos@iscas.ac.cn
Technical Support:Beijing Qinyun Technology Development Co., Ltd.

Beijing Public Network Security No. 11040202500063