AnchorDiff: Binary OSS Version Identification Method Based on Anchor Node Slicing

Binary Open-Source Software (OSS) is commonly embedded as third-party code within firmware and downstream software architectures, for simplifying the development process. However, vulnerabilities existing in OSS can be propagated through code reuse into embedded firmware and software architectures, posing security risks to these devices. To mitigate the security risks in firmware and software architectures, researchers have identified the versions of extracted firmware or binary software to detect N-day vulnerabilities in OSS. Existing works have achieved several success, but new challenges of non-linear update and minor updates hinder the improvement of the accuracy of binary OSS version identification.