3 papers
cs.CR2026
Checked-In Secret Detection: Strings Are All You Need
Zhengdong Huang, Kevin Li, Jinqiu Yang +2
Hardcoded secrets in source code pose critical security vulnerabilities which can be easily exploited by malicious adversaries. Existing regex-based detection approaches suffer fro…
cs.CR2025
Automatically Detecting Checked-In Secrets in Android Apps: How Far Are We?
Kevin Li, Lin Ling, Jinqiu Yang +1
Mobile apps are predominantly integrated with cloud services to benefit from enhanced functionalities. Adopting authentication using secrets such as API keys is crucial to ensure s…
cs.CR2025
How Far are App Secrets from Being Stolen? A Case Study on Android
Lili Wei, Heqing Huang, Shing-Chi Cheung +1
Android apps can hold secret strings of themselves such as cloud service credentials or encryption keys. Leakage of such secret strings can induce unprecedented consequences like m…