activity
20172021
most citedTESSERACT: Eliminating Experimental Bias in Malware Classification across Space and Time

56 citations · 102 across the 6 of their papers we have counts for

collaborators

6 papers

cs.SE2021

Systematic Generation of Conformance Tests for JavaScript

Blake Loring, Johannes Kinder

JavaScript implementations are tested for conformance to the ECMAScript standard using a large hand-written test suite. Not only in this a tedious approach, it also relies solely o…

cs.CR2021

Cats vs. Spectre: An Axiomatic Approach to Modeling Speculative Execution Attacks

Hernán Ponce-de-León, Johannes Kinder

The Spectre family of speculative execution attacks have required a rethinking of formal methods for security. Approaches based on operational speculative semantics have made initi…

cs.CR2021★ 4 cited

XFL: Naming Functions in Binaries with Extreme Multi-label Learning

James Patrick-Evans, Moritz Dannehl, Johannes Kinder

Reverse engineers benefit from the presence of identifiers such as function names in a binary, but usually these are removed for release. Training a machine learning model to predi…

cs.PL2018★ 27 cited

Sound Regular Expression Semantics for Dynamic Symbolic Execution of JavaScript

Blake Loring, Duncan Mitchell, Johannes Kinder

Existing support for regular expressions in automated test generation or verification tools is lacking. Common aspects of regular expression engines found in mainstream programming…

cs.CR2018★ 56 cited

TESSERACT: Eliminating Experimental Bias in Malware Classification across Space and Time

Feargus Pendlebury, Fabio Pierazzi, Roberto Jordaney +2

Is Android malware classification a solved problem? Published F1 scores of up to 0.99 appear to leave very little room for improvement. In this paper, we argue that results are com…

cs.CR2017★ 15 cited

BabelView: Evaluating the Impact of Code Injection Attacks in Mobile Webviews

Claudio Rizzo, Lorenzo Cavallaro, Johannes Kinder

A Webview embeds a full-fledged browser in a mobile application and allows the application to expose a custom interface to JavaScript code. This is a popular technique to build so-…