5 citations · 6 across the 7 of their papers we have counts for
7 papers
FP-Predictor - False Positive Prediction for Static Analysis Reports
Tom Ohlmer, Michael Schlichtig, Eric Bodden
Static Application Security Testing (SAST) tools play a vital role in modern software development by automatically detecting potential vulnerabilities in source code. However, thei…
Challenges in Android Data Disclosure: An Empirical Study
Mugdha Khedkar, Michael Schlichtig, Mohamed Soliman +1
Current legal frameworks enforce that Android developers accurately report the data their apps collect. However, large codebases can make this reporting challenging. This paper emp…
Visualizing Privacy-Relevant Data Flows in Android Applications
Mugdha Khedkar, Michael Schlichtig, Santhosh Mohan +1
Android applications collecting data from users must protect it according to the current legal frameworks. Such data protection has become even more important since in 2018 the Eur…
Advancing Android Privacy Assessments with Automation
Mugdha Khedkar, Michael Schlichtig, Eric Bodden
Android apps collecting data from users must comply with legal frameworks to ensure data protection. This requirement has become even more important since the implementation of the…
Supporting Error Chains in Static Analysis for Precise Evaluation Results and Enhanced Usability
Anna-Katharina Wickert, Michael Schlichtig, Marvin Vogel +3
Context: Static analyses are well-established to aid in understanding bugs or vulnerabilities during the development process or in large-scale studies. A low false-positive rate is…
To Fix or Not to Fix: A Critical Study of Crypto-misuses in the Wild
Anna-Katharina Wickert, Lars Baumgärtner, Michael Schlichtig +2
Recent studies have revealed that 87 % to 96 % of the Android apps using cryptographic APIs have a misuse which may cause security vulnerabilities. As previous studies did not cond…
CamBench -- Cryptographic API Misuse Detection Tool Benchmark Suite
Michael Schlichtig, Anna-Katharina Wickert, Stefan Krüger +2
Context: Cryptographic APIs are often misused in real-world applications. Therefore, many cryptographic API misuse detection tools have been introduced. However, there exists no es…