1 citations · 2 across the 6 of their papers we have counts for
6 papers
From Detection to Prevention: Explaining Security-Critical Code to Avoid Vulnerabilities
Ranjith Krishnamurthy, Oshando Johnson, Goran Piskachev +1
Security vulnerabilities often arise unintentionally during development due to a lack of security expertise and code complexity. Traditional tools, such as static and dynamic analy…
Detecting Security-Relevant Methods using Multi-label Machine Learning
Oshando Johnson, Goran Piskachev, Ranjith Krishnamurthy +1
To detect security vulnerabilities, static analysis tools need to be configured with security-relevant methods. Current approaches can automatically identify such methods using bin…
How far are German companies in improving security through static program analysis tools?
Goran Piskachev, Stefan Dziwok, Thorsten Koch +2
As security becomes more relevant for many companies, the popularity of static program analysis (SPA) tools is increasing. In this paper, we target the use of SPA tools among compa…
To what extent can we analyze Kotlin programs using existing Java taint analysis tools? (Extended Version)
Ranjith Krishnamurthy, Goran Piskachev, Eric Bodden
As an alternative to Java, Kotlin has gained rapid popularity since its introduction and has become the default choice for developing Android apps. However, due to its interoperabi…
Fluently specifying taint-flow queries with fluentTQL
Goran Piskachev, Johannes Späth, Ingo Budde +1
Previous work has shown that taint analyses are only useful if correctly customized to the context in which they are used. Existing domain-specific languages (DSLs) allow such cust…
Integration of the Static Analysis Results Interchange Format in CogniCrypt
Sriteja Kummita, Goran Piskachev
Background - Software companies increasingly rely on static analysis tools to detect potential bugs and security vulnerabilities in their software products. In the past decade, mor…