output
20162026
most citedCatching up with Method and Process Practice: An Industry-Informed Baseline for Researchers

51 citations

researchers with a paper here

Counting papers with at most 25 authors, so collaboration author lists do not stand in for the people here.

collaborating institutions

5 papers

cs.CR2026

From Detection to Prevention: Explaining Security-Critical Code to Avoid Vulnerabilities

Ranjith Krishnamurthy, Oshando Johnson, Goran Piskachev +1

Security vulnerabilities often arise unintentionally during development due to a lack of security expertise and code complexity. Traditional tools, such as static and dynamic analy…

cs.LG2024★ 1 cited

Detecting Security-Relevant Methods using Multi-label Machine Learning

Oshando Johnson, Goran Piskachev, Ranjith Krishnamurthy +1

To detect security vulnerabilities, static analysis tools need to be configured with security-relevant methods. Current approaches can automatically identify such methods using bin…

cs.SE2021★ 51 cited

Catching up with Method and Process Practice: An Industry-Informed Baseline for Researchers

Jil Klünder, Regina Hebig, Paolo Tell +18

Software development methods are usually not applied by the book. Companies are under pressure to continuously deploy software products that meet market needs and stakeholders' req…

cs.SE2018★ 3 cited

Debugging Static Analysis

Lisa Nguyen Quang Do, Stefan Krüger, Patrick Hill +2

To detect and fix bugs and security vulnerabilities, software companies use static analysis as part of the development process. However, static analysis code itself is also prone t…

cs.SE2016★ 4 cited

Analyzing the Gadgets Towards a Metric to Measure Gadget Quality

Andreas Follner, Alexandre Bartel, Eric Bodden

Current low-level exploits often rely on code-reuse, whereby short sections of code (gadgets) are chained together into a coherent exploit that can be executed without the need to…