7 citations · 11 across the 10 of their papers we have counts for
6 papers · 1 filter
Unlocking Reproducibility: Automating re-Build Process for Open-Source Software
Behnaz Hassanshahi, Trong Nhan Mai, Benjamin Selwyn Smith +1
Software ecosystems like Maven Central play a crucial role in modern software supply chains by providing repositories for libraries and build plugins. However, the separation betwe…
DALEQ -- Explainable Equivalence for Java Bytecode
Jens Dietrich, Behnaz Hassanshahi
The security of software builds has attracted increased attention in recent years in response to incidents like solarwinds and xz. Now, several companies including Oracle and Googl…
Levels of Binary Equivalence for the Comparison of Binaries from Alternative Builds
Jens Dietrich, Tim White, Behnaz Hassanshahi +1
In response to challenges in software supply chain security, several organisations have created infrastructures to independently build commodity open source projects and release th…
BackREST: A Model-Based Feedback-Driven Greybox Fuzzer for Web Applications
François Gauthier, Behnaz Hassanshahi, Benjamin Selwyn-Smith +3
Following the advent of the American Fuzzy Lop (AFL), fuzzing had a surge in popularity, and modern day fuzzers range from simple blackbox random input generators to complex whiteb…
Coding Practices and Recommendations of Spring Security for Enterprise Applications
Mazharul Islam, Sazzadur Rahaman, Na Meng +4
Spring security is tremendously popular among practitioners for its ease of use to secure enterprise applications. In this paper, we study the application framework misconfiguratio…
SAFE-PDF: Robust Detection of JavaScript PDF Malware Using Abstract Interpretation
Alexander Jordan, François Gauthier, Behnaz Hassanshahi +1
The popularity of the PDF format and the rich JavaScript environment that PDF viewers offer make PDF documents an attractive attack vector for malware developers. PDF documents pre…