6 papers
TopoIntent: Compiling Security Intent into Executable, Compliance-Checked Network Topologies
Xiaokang Qu, Jianliang Ma, Zao Fan +3
Enterprise security topology design requires translating business intent, regulatory requirements, and risk assumptions into zones, boundary devices, inter-zone paths, and access-c…
Evaluating LLMs for Obfuscation Detection and Classification in Android Apps
Luca Ferrari, Marco Alecci, Jordan Samhi +4
Android applications (apps) developers increasingly rely on code obfuscation techniques to hinder reverse engineering and protect intellectual property. However, obfuscation also r…
Beyond the Tip of the Iceberg: Understanding SATD in Dockerfiles through the Lens of Co-evolution
Wei Minn, Yan Naing Tun, Biniam Fesseha Demissie +5
Dockerfiles enable the creation of portable container-based execution environments for the application code, and have become an important part of the modern software development pr…
PolicyGapper: Automated Detection of Inconsistencies Between Google Play Data Safety Sections and Privacy Policies Using LLMs
Luca Ferrari, Billel Habbati, Meriem Guerar +2
Mobile application developers are required to disclose how they collect, use, and share user data in compliance with privacy regulations. To support transparency, major app marketp…
CovAgent: Overcoming the 30% Curse of Mobile Application Coverage with Agentic AI and Dynamic Instrumentation
Wei Minn, Biniam Fisseha Demissie, Yan Naing Tun +4
Automated GUI testing is crucial for ensuring the quality and reliability of Android apps. However, the efficacy of existing UI testing techniques is often limited, especially in t…
VLM-Fuzz: Vision Language Model Assisted Recursive Depth-first Search Exploration for Effective UI Testing of Android Apps
Biniam Fisseha Demissie, Yan Naing Tun, Lwin Khin Shar +1
Testing Android apps effectively requires a systematic exploration of the app's possible states by simulating user interactions and system events. While existing approaches have pr…