28 citations · 43 across the 6 of their papers we have counts for
6 papers
Evaluation of Static Vulnerability Detection Tools with Java Cryptographic API Benchmarks
Sharmin Afrose, Ya Xiao, Sazzadur Rahaman +3
Several studies showed that misuses of cryptographic APIs are common in real-world code (e.g., Apache projects and Android apps). There exist several open-sourced and commercial se…
The Relevance of Classic Fuzz Testing: Have We Solved This One?
Barton P. Miller, Mengxiao Zhang, Elisa R. Heymann
As fuzz testing has passed its 30th anniversary, and in the face of the incredible progress in fuzz testing techniques and tools, the question arises if the classic, basic fuzz tec…
An In-Depth Security Assessment of Maritime Container Terminal Software Systems
Joseph O. Eichenhofer, Elisa Heymann, Barton P. Miller +1
Attacks on software systems occur world-wide on a daily basis targeting individuals, corporations, and governments alike. The systems that facilitate maritime shipping are at risk…
Parallel Binary Code Analysis
Xiaozhu Meng, Jonathon M. Anderson, John Mellor-Crummey +3
Binary code analysis is widely used to assess a program's correctness, performance, and provenance. Binary analysis applications often construct control flow graphs, analyze data f…
Trusted CI Experiences in Cybersecurity and Service to Open Science
Andrew Adams, Kay Avila, Jim Basney +16
This article describes experiences and lessons learned from the Trusted CI project, funded by the US National Science Foundation to serve the community as the NSF Cybersecurity Cen…
Adversarial Binaries for Authorship Identification
Xiaozhu Meng, Barton P. Miller, Somesh Jha
Binary code authorship identification determines authors of a binary program. Existing techniques have used supervised machine learning for this task. In this paper, we look this p…