133 citations · 224 across the 19 of their papers we have counts for
6 papers · 1 filter
Control Parameters Considered Harmful: Detecting Range Specification Bugs in Drone Configuration Modules via Learning-Guided Search
Ruidong Han, Chao Yang, Siqi Ma +4
In order to support a variety of missions and deal with different flight environments, drone control programs typically provide configurable control parameters. However, such a fle…
Dep: Mutation-based Dependency Generation for Precise Taint Analysis on Android Native Code
Cong Sun, Yuwan Ma, Dongrui Zeng +3
The existence of native code in Android apps plays an important role in triggering inconspicuous propagation of secrets and circumventing malware detection. However, the state-of-t…
CryptoEval: Evaluating the Risk of Cryptographic Misuses in Android Apps with Data-Flow Analysis
Cong Sun, Xinpeng Xu, Yafei Wu +4
The misunderstanding and incorrect configurations of cryptographic primitives have exposed severe security vulnerabilities to attackers. Due to the pervasiveness and diversity of c…
Sdft: A PDG-based Summarization for Efficient Dynamic Data Flow Tracking
Xiao Kan, Cong Sun, Shen Liu +4
Dynamic taint analysis (DTA) has been widely used in various security-relevant scenarios that need to track the runtime information flow of programs. Dynamic binary instrumentation…
ReCFA: Resilient Control-Flow Attestation
Yumei Zhang, Xinzhi Liu, Cong Sun +4
Recent IoT applications gradually adapt more complicated end systems with commodity software. Ensuring the runtime integrity of these software is a challenging task for the remote…
Fine with "1234"? An Analysis of SMS One-Time Password Randomness in Android Apps
Siqi Ma, Juanru Li, Hyoungshick Kim +4
A fundamental premise of SMS One-Time Password (OTP) is that the used pseudo-random numbers (PRNs) are uniquely unpredictable for each login session. Hence, the process of generati…