关键词: 漏洞自动验证, 漏洞检测, 漏洞根源分析, 漏洞利用, 符号执行

Abstract: With the widespread application of software systems,the number of binary vulnerabilities continues to grow,posing serious threats to information security.Existing research lacks comprehensive solutions that organically integrate vulnerability detection,root cause analysis,and automated exploitation,resulting in inefficient and limited-coverage vulnerability verification.This study aims to propose an automated,cross-architecture binary vulnerability verification method that integrates the entire process from vulnerability detection and root cause localization to exploit generation,while producing structured verification reports.It designs an automated verification framework based on symbolic execution,which consists of five components:preprocessing,vulnerability detection,root cause analysis,exploit generation,and verification.By combining vulnerability-oriented and path-guided symbolic execution strategies with taint analysis and constraint solving,the framework supports multi-architecture analysis.Validation on 14 test samples demonstrate that the proposed method successfully detects various types of vulnerabilities including stack overflow,heap overflow,use-after-free(UAF),and format string vulnerabilities,accurately locates root causes at the basic-block level,and achieves automated exploit generation for most samples.This research not only enhances the automation and accuracy of binary vulnerability verification but also provides a reliable basis for vulnerability remediation and defense.Future work will focus on improving heap vulnerability exploit generation,expanding verification capabilities for large-scale applications,and exploring automated repair techniques.

Key words: Automated vulnerability verification, Vulnerability detection, Vulnerability root cause analysis, Exploitation of vulnera-bilities, Symbolic execution