What question did this study set out to answer?

The aim is to bridge the gap between vulnerability detection and effective remediation in CVE management.

April 1, 2026Open Access

Patch Bridge: Closing the Detection-to-Remediation Gap in CVE Lifecycle Management

JJJonathan D.A. JewellThe Open University

Key Points

The aim is to bridge the gap between vulnerability detection and effective remediation in CVE management.
Introduced reachability-filtered CVE triage to eliminate false positives.
Developed a formal model of mitigation soundness using Idris2 dependent types.
Implemented a PanLL panel for enabling human oversight in the remediation process.
Successfully reduced false positives in vulnerability detection.
Provided a formal proof of soundness for proposed mitigations.
Facilitated better human intervention in vulnerability management.

Abstract

Existing vulnerability scanners stop at detection. Patch Bridge closes the gap from disclosure to verified remediation through reachability analysis, formal soundness proofs, and automated mitigation synthesis. Extends the panic-attack static analysis framework with three contributions: (1) reachability-filtered CVE triage that eliminates false positives by proving whether vulnerable code paths are actually exercised, (2) a formal model of mitigation soundness using Idris2 dependent types, and (3) a PanLL panel for human-in-the-loop adoption gating.

AI에게 질문

Bookmark

View Full Paper

Cite This Study

Jonathan D.A. Jewell (Mon,) studied this question.

synapsesocial.com/papers/69ccb6b416edfba7beb88761 https://doi.org/https://doi.org/10.5281/zenodo.19329713

AI에게 질문

Bookmark

View Full Paper