Overview
概览
VulTracer addresses the critical challenge of noise in software vulnerability assessment. Traditional package-level scanners often flag vulnerabilities that are technically present but practically unreachable. Our approach leverages advanced static analysis to construct precise call graphs and track data flow, identifying which vulnerabilities are actually triggered by your application's execution paths.
VulTracer 解决了软件漏洞评估中严重的误报(噪声)问题。 传统的软件包级别扫描器经常标记那些依赖链路上存在但实际上不可达的漏洞。 我们的方法利用先进的静态分析来构建精确的调用图并跟踪数据流，从而识别出哪些漏洞是真正被您的应用程序函数执行调用的。
Interactive Demonstration
交互式演示
We are finalizing the deployment of our interactive verification environment for the camera-ready version of the paper. The demo will allow you to upload standard lockfiles and visualize propagation paths.
我们正在为论文的最终版本部署交互式验证环境。 该演示将允许您上传标准的工程 lock 文件（lockfiles）并可视化漏洞传播路径。
Key Capabilities
核心能力
Pinpoint vulnerabilities at the function usage level rather than entire packages.
在函数使用级别而非包级别精确定位漏洞。
Interactive graph exploration to interpret complex dependency chains.
通过交互式图表探索来解析复杂的依赖链。
Distinguish between reachable threats and dormant code.
区分实际可达的威胁和不可达的代码。