How to generate signatures for my own patches

[harperchen]

Dear author,

Thank you for sharing your excellent work. I noticed that the default dataset comes from 4,219 CVE patches from NVD. I'm wondering how I should generate signatures for the patches collected on my own. Would you mind sharing the dataset collector and signature generator modules with us?

Thank you,
Wei

[WOOSEUNGHOON]

Hi Wei,

Unfortunately, we are not disclosing the vulnerability DB generation code because of commercial issues; only the dataset is shared. To test MOVERY with your own patches, you will inevitably have to implement a simple code yourself using the Joern parser (https://joern.io/), to extract only core code lines. During the process, if you have any questions, please send us an e-mail and we will be happy to respond.

Thank you.
Seunghoon Woo

[harperchen]

Dear author,

Thank you for the kind advice. Recently I've been working on a recurring bug detection project and looking for opportunities to conduct comparison experiments with Movery. I have also checked other tools such as MVP but they are not available.

Could you please give me the executable to proceed with my own patches? Or may I ask if it's possible to ask for your help to generate patch signatures on your side with the security patches provided by me?

Best,
Wei