4 citations · 9 across the 8 of their papers we have counts for
11 papers
HoldSpec: A Machine-Checked Model and Conformance Suite for the Payment Authorization Hold Lifecycle
Abhishek Sharma
When a merchant authorizes a card and captures the funds later, the money sits in a state that neither party fully controls: held on the cardholder's account, not yet taken, and du…
Towards LLM-Enhanced Android Taint Analysis
Nicholas Miazzo, Marco Alecci, Jordan Samhi +2
Taint analysis is a fundamental technique for detecting sensitive data leaks in Android apps. However, traditional static tools, such as FlowDroid, still face well-known challenges…
GAPS: Targeted Execution of Android Apps via Static Path Reconstruction
Samuele Doria, Alexander Pilgun, Jordan Samhi +2
Targeted execution of Android applications (apps) remains a longstanding challenge for software testing and analysis. Although recent advances in GUI testing have substantially imp…
Evaluating LLM-Based Regression Test Generation
Jing Liu, Seongmin Lee, Eleonora Losiouk +1
Large Language Models (LLMs) have shown tremendous promise in automated software engineering. In this paper, we investigate LLMs for just-in-time regression test generation for pro…
E-Trojans: Ransomware, Tracking, DoS, and Data Leaks on Battery-powered Embedded Systems
Marco Casagrande, Riccardo Cestaro, Eleonora Losiouk +2
Battery-powered embedded systems (BESs) have become ubiquitous. Their internals include a battery management system (BMS), a radio interface, and a motor controller. Despite their…
Beware of Pickpockets: A Practical Attack against Blocking Cards
Marco Alecci, Luca Attanasio, Alessandro Brighente +4
Today, we rely on contactless smart cards to perform several critical operations (e.g., payments and accessing buildings). Attacking smart cards can have severe consequences, such…