发表机构
The Pennsylvania State University（宾夕法尼亚州立大学）
机构由 AI 辅助整理，请以论文原文为准。AI 中文总结
CISB-Bench是一个包含429个从GCC和LLVM挖掘的编译器引入安全漏洞案例的可审计数据集，提供C缩减、IR分析包和标签，支持编译器安全检测研究。
AI 中文摘要
编译器引入的安全漏洞（CISBs）产生于优化、降低或插桩决策改变了生成程序的安全相关属性时。由于这些漏洞的证据分散在问题报告、缩减测试、历史配置和编译器工件中，因此难以研究；此外，与安全相关的报告并不意味着每个相关的缩减都确立了具有安全意义的编译器故障。我们提出了CISB-Bench，一个从GCC和LLVM中挖掘的包含429个精确C程序行的可审计数据集。每行包含其C缩减、在-O0至-O3优化级别下的标准化LLVM IR分析包、公共来源、最终二进制标签以及主要机制或边界注释。两位审阅者独立标记了固定语料库，在369行（86.0%，Cohen's kappa=0.662）上达成一致；60处分歧经过裁定解决。最终数据集包含280个CISB和149个困难的非CISB案例。预测任务是从提供的工件中恢复这个经过审阅的精确行标签；这并非声称标准化IR单独就能重现每个历史编译器故障。我们描述了语料库所代表的安全机制和证据边界，并展示了其配对工件如何支持仅源代码、IR感知和联合分析。CISB-Bench为编译器安全挖掘和检测研究提供了一个可重用、可检查的目标。
英文摘要
Compiler-introduced security bugs (CISBs) arise when an optimization, lowering, or instrumentation decision changes a security-relevant property of the generated program. They are difficult to study because their evidence is distributed across issue reports, reduced tests, historical configurations, and compiler artifacts; a security-related report also does not imply that every associated reduction establishes a security-bearing compiler failure. We present CISB-Bench, an auditable dataset of 429 exact C-program rows mined from GCC and LLVM. Each row contains its C reduction, a standardized LLVM IR analysis bundle at -O0 through -O3, public provenance, a final binary label, and a primary mechanism or boundary annotation. Two reviewers independently labeled the fixed corpus, agreeing on 369 rows (86.0%, Cohen's kappa=0.662); the 60 disagreements were adjudicated. The final dataset comprises 280 CISBs and 149 hard non-CISB cases. The prediction task is to recover this reviewed exact-row label from the supplied artifacts; it is not a claim that standardized IR alone reproduces every historical compiler failure. We characterize the security mechanisms and evidence boundaries represented by the corpus, and demonstrate how its paired artifacts support source-only, IR-aware, and joint analyses. CISB-Bench provides a reusable, inspectable target for compiler-security mining and detection research.
