3 papers
cs.CR2024
OriginPruner: Leveraging Method Origins for Guided Call Graph Pruning
Amir M. Mir, Mehdi Keshani, Sebastian Proksch
Most static program analyses depend on Call Graphs (CGs), including reachability of security vulnerabilities. Static CGs ensure soundness through over-approximation, which results…
cs.SE2024
On the Effectiveness of Machine Learning-based Call Graph Pruning: An Empirical Study
Amir M. Mir, Mehdi Keshani, Sebastian Proksch
Static call graph (CG) construction often over-approximates call relations, leading to sound, but imprecise results. Recent research has explored machine learning (ML)-based CG pru…
cs.SE2023
On the Effect of Transitivity and Granularity on Vulnerability Propagation in the Maven Ecosystem
Amir M. Mir, Mehdi Keshani, Sebastian Proksch
Reusing software libraries is a pillar of modern software engineering. In 2022, the average Java application depends on 40 third-party libraries. Relying on such libraries exposes…