English

A Large Scale Study of AI-based Binary Function Similarity Detection Techniques for Security Researchers and Practitioners

Cryptography and Security 2025-11-04 v1 Software Engineering

Abstract

Binary Function Similarity Detection (BFSD) is a foundational technique in software security, underpinning a wide range of applications including vulnerability detection, malware analysis. Recent advances in AI-based BFSD tools have led to significant performance improvements. However, existing evaluations of these tools suffer from three key limitations: a lack of in-depth analysis of performance-influencing factors, an absence of realistic application analysis, and reliance on small-scale or low-quality datasets. In this paper, we present the first large-scale empirical study of AI-based BFSD tools to address these gaps. We construct two high-quality and diverse datasets: BinAtlas, comprising 12,453 binaries and over 7 million functions for capability evaluation; and BinAres, containing 12,291 binaries and 54 real-world 1-day vulnerabilities for evaluating vulnerability detection performance in practical IoT firmware settings. Using these datasets, we evaluate nine representative BFSD tools, analyze the challenges and limitations of existing BFSD tools, and investigate the consistency among BFSD tools. We also propose an actionable strategy for combining BFSD tools to enhance overall performance (an improvement of 13.4%). Our study not only advances the practical adoption of BFSD tools but also provides valuable resources and insights to guide future research in scalable and automated binary similarity detection.

Keywords

Cite

@article{arxiv.2511.01180,
  title  = {A Large Scale Study of AI-based Binary Function Similarity Detection Techniques for Security Researchers and Practitioners},
  author = {Jingyi Shi and Yufeng Chen and Yang Xiao and Yuekang Li and Zhengzi Xu and Sihao Qiu and Chi Zhang and Keyu Qi and Yeting Li and Xingchu Chen and Yanyan Zou and Yang Liu and Wei Huo},
  journal= {arXiv preprint arXiv:2511.01180},
  year   = {2025}
}

Comments

Accepted by ASE 2025

R2 v1 2026-07-01T07:18:30.353Z