1 citations · 1 across the 6 of their papers we have counts for
6 papers
Checked-In Secret Detection: Strings Are All You Need
Zhengdong Huang, Kevin Li, Jinqiu Yang +2
Hardcoded secrets in source code pose critical security vulnerabilities which can be easily exploited by malicious adversaries. Existing regex-based detection approaches suffer fro…
Towards Understanding Android APIs: Official Lists, Vendor Customizations, and Real-World Usage
Sinan Wang, Qi Zhang, Jiacheng Li +3
Android apps are built on APIs that abstract core Android system functionalities. These APIs are officially documented in multiple files distributed with the Android source code or…
SeBERTis: A Framework for Producing Classifiers of Security-Related Issue Reports
Sogol Masoumzadeh, Yufei Li, Shane McIntosh +2
Monitoring issue tracker submissions is a crucial software maintenance activity. A key goal is the prioritization of high risk, security-related bugs. If such bugs can be recognize…
How Far are App Secrets from Being Stolen? A Case Study on Android
Lili Wei, Heqing Huang, Shing-Chi Cheung +1
Android apps can hold secret strings of themselves such as cloud service credentials or encryption keys. Leakage of such secret strings can induce unprecedented consequences like m…
Automatically Detecting Checked-In Secrets in Android Apps: How Far Are We?
Kevin Li, Lin Ling, Jinqiu Yang +1
Mobile apps are predominantly integrated with cloud services to benefit from enhanced functionalities. Adopting authentication using secrets such as API keys is crucial to ensure s…
Logging Practices with Mobile Analytics: An Empirical Study on Firebase
Julian Harty, Haonan Zhang, Lili Wei +3
Software logs are of great value in both industrial and open-source projects. Mobile analytics logging enables developers to collect logs remotely from their apps running on end us…