collaborators

6 papers

cs.CR2026

TeleGapper: On the (un)reliability of Privacy Policies in Telegram Mini apps

Luca Ferrari, Mariano Ceccato, Luca Verderame

Telegram Mini Apps are Web applications embedded within the Telegram client, forming an ecosystem of third-party services within one of the world's most widely used messaging platf…

cs.SE2026

Evaluating LLMs for Obfuscation Detection and Classification in Android Apps

Luca Ferrari, Marco Alecci, Jordan Samhi +4

Android applications (apps) developers increasingly rely on code obfuscation techniques to hinder reverse engineering and protect intellectual property. However, obfuscation also r…

cs.SE2026

Beyond the Tip of the Iceberg: Understanding SATD in Dockerfiles through the Lens of Co-evolution

Wei Minn, Yan Naing Tun, Biniam Fesseha Demissie +5

Dockerfiles enable the creation of portable container-based execution environments for the application code, and have become an important part of the modern software development pr…

cs.CR2026

PolicyGapper: Automated Detection of Inconsistencies Between Google Play Data Safety Sections and Privacy Policies Using LLMs

Luca Ferrari, Billel Habbati, Meriem Guerar +2

Mobile application developers are required to disclose how they collect, use, and share user data in compliance with privacy regulations. To support transparency, major app marketp…

cs.SE2026

CovAgent: Overcoming the 30% Curse of Mobile Application Coverage with Agentic AI and Dynamic Instrumentation

Wei Minn, Biniam Fisseha Demissie, Yan Naing Tun +4

Automated GUI testing is crucial for ensuring the quality and reliability of Android apps. However, the efficacy of existing UI testing techniques is often limited, especially in t…

cs.SE2025

VLM-Fuzz: Vision Language Model Assisted Recursive Depth-first Search Exploration for Effective UI Testing of Android Apps

Biniam Fisseha Demissie, Yan Naing Tun, Lwin Khin Shar +1

Testing Android apps effectively requires a systematic exploration of the app's possible states by simulating user interactions and system events. While existing approaches have pr…