Zorya now analyzes real-world gc-compiled Go binaries and detects 7 of 11 evaluated vulnerabilities from projects like Kubernetes and Go-Ethereum, including a silent integer overflow missed by other tools without a manual oracle.
In Proceedings 2016 Network and Distributed System Security Symposium
2 Pith papers cite this work. Polarity classification is still indexing.
fields
cs.CR 2years
2026 2verdicts
UNVERDICTED 2representative citing papers
An agentic pipeline localizes the security-relevant function in 10 of 20 Ubuntu binary security updates and produces an accepted root-cause classification in 11 of 20, limited mainly by binary differencing coverage.
citing papers explorer
-
From TinyGo to gc Compiler: Extending Zorya's Concolic Framework to Real-World Go Binaries
Zorya now analyzes real-world gc-compiled Go binaries and detects 7 of 11 evaluated vulnerabilities from projects like Kubernetes and Go-Ethereum, including a silent integer overflow missed by other tools without a manual oracle.
-
Patch2Vuln: Agentic Reconstruction of Vulnerabilities from Linux Distribution Binary Patches
An agentic pipeline localizes the security-relevant function in 10 of 20 Ubuntu binary security updates and produces an accepted root-cause classification in 11 of 20, limited mainly by binary differencing coverage.