Can we use our vulnerability dataset to detect vulnerability by vuddy?

squizz617 / vuddy

VUDDY: A Scalable and Accurate Vulnerable Code Clone Detector (S&P'17)

https://iotcube.net

MIT License

51 stars 24 forks source link

Can we use our vulnerability dataset to detect vulnerability by vuddy? #16

Open Crispy-fried-chicken opened 9 months ago

Crispy-fried-chicken commented 9 months ago

I have seen your project which can generate vulnerability dataset(https://github.com/squizz617/vulnDBGen/tree/f4cb690e43e5c4fe212a85317782cfe13a3c9bab), so I want to add some newest vulnerability, but except for the https://iotcube.korea.ac.kr/ you provided, I have not seen any scripts that can be modified. I wonder if you can provide them. Thank you!

seulbae-security commented 5 months ago

Hi, I've added a local checker. Using vulnDBGen, you can create a hidx file with the vulnerabilities you've collected, and then run the local checker on a target program against that hidx file. Please check the updated README.md and my latest commits. Thank you.