3 citations · 6 across the 7 of their papers we have counts for
7 papers · 1 filter
Expecting (Targeted Ads)? Network Analysis of User Health Data Leakage in Fertility Tracking Apps
Yeeun Jo, Shahanaasree Sivakumar, Mahnoor Jameel +3
While human factors in the privacy of fertility tracking apps -- health trackers that record users' menstrual or pregnancy data -- has been the subject of extensive study, little a…
VFCFinder: Seamlessly Pairing Security Advisories and Patches
Trevor Dunlap, Elizabeth Lin, William Enck +1
Security advisories are the primary channel of communication for discovered vulnerabilities in open-source software, but they often lack crucial information. Specifically, 63% of v…
A Comparative Study of Software Secrets Reporting by Secret Detection Tools
Setu Kumar Basak, Jamison Cox, Bradley Reaves +1
Background: According to GitGuardian's monitoring of public GitHub repositories, secrets sprawl continued accelerating in 2022 by 67% compared to 2021, exposing over 10 million sec…
SecretBench: A Dataset of Software Secrets
Setu Kumar Basak, Lorenzo Neil, Bradley Reaves +1
According to GitGuardian's monitoring of public GitHub repositories, the exposure of secrets (API keys and other credentials) increased two-fold in 2021 compared to 2020, totaling…
A First Look at Scams on YouTube
Elijah Bouma-Sims, Brad Reaves
YouTube has become the second most popular website according to Alexa, and it represents an enticing platform for scammers to attract victims. Because of the computational difficul…
A Large Scale Investigation of Obfuscation Use in Google Play
Dominik Wermke, Nicolas Huaman, Yasemin Acar +3
Android applications are frequently plagiarized or repackaged, and software obfuscation is a recommended protection against these practices. However, there is very little data on t…
Retrofitting Applications with Provenance-Based Security Monitoring
Adam Bates, Kevin Butler, Alin Dobra +4
Data provenance is a valuable tool for detecting and preventing cyber attack, providing insight into the nature of suspicious events. For example, an administrator can use provenan…