13 citations · 25 across the 11 of their papers we have counts for
6 papers · 1 filter
Security Is More Than a Library Call: How Security Features Live in Code
Kevin Hermann, Sven Peldszus, Thorsten Berger
Implementing security features---functionalities that protect sensitive data or prevent malicious actions by attackers---is important for ensuring the security and integrity of sof…
The Security Feature Location Problem
Kevin Hermann, Sven Peldszus, Thorsten Berger +1
Software security must be realized through security features such as authentication and encryption, but which features does a system implement, and where? We present security featu…
Can I Check What I Designed? Mapping Security Design DSLs to Code Analyzers
Sven Peldszus, Frederik Reiche, Kevin Hermann +3
When assessing the potential impact of code-level vulnerabilities, e.g., discovered by automated analyzers, it is essential to consider them in the context of the system's security…
Many Tools, Few Exploitable Vulnerabilities: A Survey of 246 Static Code Analyzers for Security
Kevin Hermann, Sven Peldszus, Thorsten Berger
Static security analysis is a widely used technique for detecting software vulnerabilities across a wide range of weaknesses, application domains, and programming languages. While…
A Taxonomy of Functional Security Features and How They Can Be Located
Kevin Hermann, Simon Schneider, Catherine Tony +6
Security must be considered in almost every software system. Unfortunately, selecting and implementing security features remains challenging due to the variety of security threats…
120 Domain-Specific Languages for Security
Markus Krausz, Sven Peldszus, Francesco Regazzoni +2
Security engineering, from security requirements engineering to the implementation of cryptographic protocols, is often supported by domain-specific languages (DSLs). Unfortunately…