NDSS 2025 – VeriBin: Adaptive Verification Of Patches At The Binary Level

This document summarizes the NDSS 2025 Session 11B paper “VeriBin: Adaptive Verification of Patches at the Binary Level,” presenting a system that compares original and patched binaries to decide if a patch is safe to apply by checking functional equivalence. VeriBin uses symbolic execution to identify patch-introduced changes and validates properties to ensure functionality isn’t broken, achieving 93% accuracy with no false positives on 86 samples, and demonstrating utility in the context of the XZ Utils backdoor; the post also acknowledges NDSS as the venue hosting the work.