8 citations · 37 across the 41 of their papers we have counts for
3 papers · 1 filter
CauSec: Unboxing the Causal Drivers of Static Vulnerability Analysis Performance
Akram Khan, Md Akram Khan, Daniel Rodriguez-Cardenas +3
Static Application Security Testing (SAST) tools are widely used in both industry and academia. Such tools often make design choices that sacrifice detection to achieve higher perf…
On Predicting Vulnerability Severity Using In-Context Learning: An Industrial Case Study
Daniel Rodriguez-Cardenas, David Nader Palacio, Anna Schmedding +8
Modern software systems require earlier and more scalable vulnerability severity assessment to reduce exposure to high-impact security flaws. Security analysts typically assign CVS…
MASC: A Tool for Mutation-Based Evaluation of Static Crypto-API Misuse Detectors
Amit Seal Ami, Syed Yusuf Ahmed, Radowan Mahmud Redoy +5
While software engineers are optimistically adopting crypto-API misuse detectors (or crypto-detectors) in their software development cycles, this momentum must be accompanied by a…