{"id":"https://openalex.org/W7166671544","doi":"https://doi.org/10.48550/arxiv.2606.28870","title":"Understanding Binary Code Similarity for Real-World Vulnerability Detection: A Large-Scale Empirical Study","display_name":"Understanding Binary Code Similarity for Real-World Vulnerability Detection: A Large-Scale Empirical Study","publication_year":2026,"publication_date":"2026-06-27","ids":{"openalex":"https://openalex.org/W7166671544","doi":"https://doi.org/10.48550/arxiv.2606.28870"},"language":null,"primary_location":{"id":"doi:10.48550/arxiv.2606.28870","is_oa":true,"landing_page_url":"https://doi.org/10.48550/arxiv.2606.28870","pdf_url":null,"source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":null,"issn":null,"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":null,"is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"Preprint"},"type":"preprint","indexed_in":["datacite"],"open_access":{"is_oa":true,"oa_status":"green","oa_url":"https://doi.org/10.48550/arxiv.2606.28870","any_repository_has_fulltext":true},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5101113212","display_name":"Jingdong Guo","orcid":"https://orcid.org/0009-0005-1300-0987"},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Guo, Jingdong","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5051629559","display_name":"Chaopeng Dong","orcid":"https://orcid.org/0009-0000-4729-7778"},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Dong, Chaopeng","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5045009020","display_name":"Yimo Ren","orcid":"https://orcid.org/0000-0002-7543-0326"},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Ren, Yimo","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5139697042","display_name":"Siyuan Li","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Li, Siyuan","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5139692086","display_name":"Jie Liu","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Liu, Jie","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5139655472","display_name":"Hong Li","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Li, Hong","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"last","author":{"id":"https://openalex.org/A5058268359","display_name":"Hao Zhu","orcid":"https://orcid.org/0000-0003-4411-0933"},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Zhu, Hongsong","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]}],"institutions":[],"countries_distinct_count":0,"institutions_distinct_count":0,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":null,"has_fulltext":false,"cited_by_count":0,"citation_normalized_percentile":null,"cited_by_percentile_year":null,"biblio":{"volume":null,"issue":null,"first_page":null,"last_page":null},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":0.7231000065803528,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":0.7231000065803528,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10260","display_name":"Software Engineering Research","score":0.09889999777078629,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10743","display_name":"Software Testing and Debugging Techniques","score":0.07559999823570251,"subfield":{"id":"https://openalex.org/subfields/1712","display_name":"Software"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/firmware","display_name":"Firmware","score":0.6844000220298767},{"id":"https://openalex.org/keywords/vulnerability","display_name":"Vulnerability (computing)","score":0.6642000079154968},{"id":"https://openalex.org/keywords/code","display_name":"Code (set theory)","score":0.5214999914169312},{"id":"https://openalex.org/keywords/similarity","display_name":"Similarity (geometry)","score":0.5069000124931335},{"id":"https://openalex.org/keywords/process","display_name":"Process (computing)","score":0.4860999882221222},{"id":"https://openalex.org/keywords/empirical-research","display_name":"Empirical research","score":0.41620001196861267},{"id":"https://openalex.org/keywords/margin","display_name":"Margin (machine learning)","score":0.4106000065803528},{"id":"https://openalex.org/keywords/reciprocal","display_name":"Reciprocal","score":0.4041999876499176},{"id":"https://openalex.org/keywords/ranking","display_name":"Ranking (information retrieval)","score":0.3968999981880188}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.7364000082015991},{"id":"https://openalex.org/C67212190","wikidata":"https://www.wikidata.org/wiki/Q104851","display_name":"Firmware","level":2,"score":0.6844000220298767},{"id":"https://openalex.org/C95713431","wikidata":"https://www.wikidata.org/wiki/Q631425","display_name":"Vulnerability (computing)","level":2,"score":0.6642000079154968},{"id":"https://openalex.org/C2776760102","wikidata":"https://www.wikidata.org/wiki/Q5139990","display_name":"Code (set theory)","level":3,"score":0.5214999914169312},{"id":"https://openalex.org/C103278499","wikidata":"https://www.wikidata.org/wiki/Q254465","display_name":"Similarity (geometry)","level":3,"score":0.5069000124931335},{"id":"https://openalex.org/C98045186","wikidata":"https://www.wikidata.org/wiki/Q205663","display_name":"Process (computing)","level":2,"score":0.4860999882221222},{"id":"https://openalex.org/C124101348","wikidata":"https://www.wikidata.org/wiki/Q172491","display_name":"Data mining","level":1,"score":0.4666999876499176},{"id":"https://openalex.org/C120936955","wikidata":"https://www.wikidata.org/wiki/Q2155640","display_name":"Empirical research","level":2,"score":0.41620001196861267},{"id":"https://openalex.org/C774472","wikidata":"https://www.wikidata.org/wiki/Q6760393","display_name":"Margin (machine learning)","level":2,"score":0.4106000065803528},{"id":"https://openalex.org/C2777742833","wikidata":"https://www.wikidata.org/wiki/Q1964083","display_name":"Reciprocal","level":2,"score":0.4041999876499176},{"id":"https://openalex.org/C189430467","wikidata":"https://www.wikidata.org/wiki/Q7293293","display_name":"Ranking (information retrieval)","level":2,"score":0.3968999981880188},{"id":"https://openalex.org/C14036430","wikidata":"https://www.wikidata.org/wiki/Q3736076","display_name":"Function (biology)","level":2,"score":0.3968000113964081},{"id":"https://openalex.org/C26517878","wikidata":"https://www.wikidata.org/wiki/Q228039","display_name":"Key (lock)","level":2,"score":0.3898000121116638},{"id":"https://openalex.org/C164226766","wikidata":"https://www.wikidata.org/wiki/Q7293202","display_name":"Rank (graph theory)","level":2,"score":0.3833000063896179},{"id":"https://openalex.org/C188198153","wikidata":"https://www.wikidata.org/wiki/Q1613840","display_name":"Limiting","level":2,"score":0.38269999623298645},{"id":"https://openalex.org/C48372109","wikidata":"https://www.wikidata.org/wiki/Q3913","display_name":"Binary number","level":2,"score":0.32580000162124634},{"id":"https://openalex.org/C2778775528","wikidata":"https://www.wikidata.org/wiki/Q5135432","display_name":"Closing (real estate)","level":2,"score":0.3249000012874603},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.3151000142097473},{"id":"https://openalex.org/C116834253","wikidata":"https://www.wikidata.org/wiki/Q2039217","display_name":"Identification (biology)","level":2,"score":0.28529998660087585},{"id":"https://openalex.org/C43126263","wikidata":"https://www.wikidata.org/wiki/Q128751","display_name":"Source code","level":2,"score":0.28290000557899475},{"id":"https://openalex.org/C100776233","wikidata":"https://www.wikidata.org/wiki/Q2532492","display_name":"Bridge (graph theory)","level":2,"score":0.2752000093460083},{"id":"https://openalex.org/C9652623","wikidata":"https://www.wikidata.org/wiki/Q190109","display_name":"Field (mathematics)","level":2,"score":0.27230000495910645},{"id":"https://openalex.org/C2780801425","wikidata":"https://www.wikidata.org/wiki/Q5164392","display_name":"Construct (python library)","level":2,"score":0.2639999985694885},{"id":"https://openalex.org/C143271835","wikidata":"https://www.wikidata.org/wiki/Q254515","display_name":"Similitude","level":2,"score":0.2637999951839447},{"id":"https://openalex.org/C63435697","wikidata":"https://www.wikidata.org/wiki/Q864135","display_name":"Binary code","level":3,"score":0.26109999418258667},{"id":"https://openalex.org/C119857082","wikidata":"https://www.wikidata.org/wiki/Q2539","display_name":"Machine learning","level":1,"score":0.2524000108242035}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.48550/arxiv.2606.28870","is_oa":true,"landing_page_url":"https://doi.org/10.48550/arxiv.2606.28870","pdf_url":null,"source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":null,"issn":null,"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":null,"is_accepted":false,"is_published":null,"raw_source_name":null,"raw_type":"Preprint"}],"best_oa_location":{"id":"doi:10.48550/arxiv.2606.28870","is_oa":true,"landing_page_url":"https://doi.org/10.48550/arxiv.2606.28870","pdf_url":null,"source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":null,"issn":null,"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":null,"is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"Preprint"},"sustainable_development_goals":[{"id":"https://metadata.un.org/sdg/10","display_name":"Reduced inequalities","score":0.4078892171382904}],"awards":[],"funders":[],"has_content":{"pdf":false,"grobid_xml":false},"content_urls":null,"referenced_works_count":0,"referenced_works":[],"related_works":[],"abstract_inverted_index":{"Firmware":[0],"lies":[1],"at":[2],"the":[3,19,108,160,164,191],"heart":[4],"of":[5,43,62,71,88,110],"IoT":[6],"devices.":[7],"Its":[8],"development":[9],"depends":[10],"heavily":[11],"on":[12,54,126],"third-party":[13],"libraries":[14],"(TPLs),":[15],"which":[16],"greatly":[17],"accelerate":[18],"process":[20,181],"but":[21],"simultaneously":[22],"introduce":[23],"associated":[24],"vulnerabilities.":[25],"Binary":[26],"Code":[27],"Similarity":[28],"Detection":[29],"(BCSD)":[30],"is":[31],"an":[32],"effective":[33],"technique":[34],"for":[35,73],"identifying":[36],"vulnerabilities":[37],"in":[38,60],"firmware":[39,93],"by":[40,139,187,189],"comparing":[41],"pairs":[42],"code":[44],"segments.":[45],"However,":[46],"existing":[47],"studies":[48],"either":[49],"evaluate":[50],"their":[51],"performance":[52],"only":[53],"small-scale":[55],"datasets":[56],"or":[57],"lack":[58],"diversity":[59],"terms":[61],"vulnerabilities,":[63],"TPLs,":[64],"and":[65,123,162],"firmware.":[66],"Consequently,":[67],"a":[68,85,103,147,177],"comprehensive":[69],"understanding":[70],"BCSD":[72,127],"real-world":[74,156],"vulnerability":[75,89,118],"detection":[76,90],"remains":[77],"absent.":[78],"To":[79,142],"bridge":[80],"this":[81],"gap,":[82],"we":[83,106,145,174],"conduct":[84],"large-scale":[86],"study":[87],"across":[91],"60,000":[92],"images":[94],"from":[95,154,169],"200":[96],"vendors":[97],"using":[98],"BCSD.":[99],"Rather":[100],"than":[101],"introducing":[102],"novel":[104],"model,":[105],"examine":[107],"influence":[109],"four":[111],"key":[112],"factors":[113,134],"--":[114],"vulnerable":[115],"function":[116,121],"versions,":[117],"search":[119,180,192],"space,":[120],"sizes,":[122],"compilation":[124],"toolchains":[125],"performance.":[128],"Our":[129],"results":[130],"reveal":[131],"that":[132,151,176],"these":[133],"substantially":[135],"affect":[136],"performance,":[137],"often":[138],"wide":[140],"margins.":[141],"address":[143],"this,":[144],"propose":[146],"build-aware":[148],"query":[149],"strategy":[150],"derives":[152],"queries":[153],"representative":[155],"binaries,":[157],"effectively":[158],"closing":[159],"gap":[161],"raising":[163],"mean":[165],"reciprocal":[166],"rank":[167],"(MRR)":[168],"0.818":[170],"to":[171],"0.981.":[172],"Furthermore,":[173],"demonstrate":[175],"TPL-aware,":[178],"two-stage":[179],"significantly":[182],"enhances":[183],"accuracy,":[184],"improving":[185],"MRR":[186],"18.5\\%":[188],"limiting":[190],"space.":[193]},"counts_by_year":[],"updated_date":"2026-07-01T06:29:00.853634","created_date":"2026-07-01T00:00:00"}