5 citations · 5 across the 3 of their papers we have counts for
4 papers · 1 filter
FP-Predictor - False Positive Prediction for Static Analysis Reports
Tom Ohlmer, Michael Schlichtig, Eric Bodden
Static Application Security Testing (SAST) tools play a vital role in modern software development by automatically detecting potential vulnerabilities in source code. However, thei…
Challenges in Android Data Disclosure: An Empirical Study
Mugdha Khedkar, Michael Schlichtig, Mohamed Soliman +1
Current legal frameworks enforce that Android developers accurately report the data their apps collect. However, large codebases can make this reporting challenging. This paper emp…
Supporting Error Chains in Static Analysis for Precise Evaluation Results and Enhanced Usability
Anna-Katharina Wickert, Michael Schlichtig, Marvin Vogel +3
Context: Static analyses are well-established to aid in understanding bugs or vulnerabilities during the development process or in large-scale studies. A low false-positive rate is…
CamBench -- Cryptographic API Misuse Detection Tool Benchmark Suite
Michael Schlichtig, Anna-Katharina Wickert, Stefan Krüger +2
Context: Cryptographic APIs are often misused in real-world applications. Therefore, many cryptographic API misuse detection tools have been introduced. However, there exists no es…