research
∙
01/11/2023
Enhancing Comprehension and Navigation in Jupyter Notebooks with Static Analysis
Jupyter notebooks enable developers to interleave code snippets with ric...
share
research
∙
08/17/2022
An In-depth Study of Java Deserialization Remote-Code Execution Exploits and Vulnerabilities
Nowadays, an increasing number of applications uses deserialization. Thi...
research
∙
08/12/2022
How far are German companies in improving security through static program analysis tools?
As security becomes more relevant for many companies, the popularity of ...
research
∙
07/19/2022
To what extent can we analyze Kotlin programs using existing Java taint analysis tools? (Extended Version)
As an alternative to Java, Kotlin has gained rapid popularity since its ...
research
∙
04/13/2022
CamBench – Cryptographic API Misuse Detection Tool Benchmark Suite
Context: Cryptographic APIs are often misused in real-world applications...
research
∙
04/06/2022
Fluently specifying taint-flow queries with fluentTQL
Previous work has shown that taint analyses are only useful if correctly...
research
∙
05/11/2021
Dealing with Variability in API Misuse Specification
APIs are the primary mechanism for developers to gain access to external...
research
∙
08/05/2019
The Impact of Developer Experience in Using Java Cryptography
Previous research has shown that crypto APIs are hard for developers to ...
research
∙
01/11/2019
ACMiner: Extraction and Analysis of Authorization Checks in Android's Middleware
Billions of users rely on the security of the Android platform to protec...
research
∙
04/09/2018
Do Android Taint Analysis Tools Keep their Promises?
In recent years, researchers have developed a number of tools to conduct...
research
∙
01/15/2018
Debugging Static Analysis
To detect and fix bugs and security vulnerabilities, software companies ...
research
∙
10/20/2017
Self-adaptive static analysis
Static code analysis is a powerful approach to detect quality deficienci...
research
∙
10/02/2017