4 papers
Can I Check What I Designed? Mapping Security Design DSLs to Code Analyzers
Sven Peldszus, Frederik Reiche, Kevin Hermann +3
When assessing the potential impact of code-level vulnerabilities, e.g., discovered by automated analyzers, it is essential to consider them in the context of the system's security…
Many Tools, Few Exploitable Vulnerabilities: A Survey of 246 Static Code Analyzers for Security
Kevin Hermann, Sven Peldszus, Thorsten Berger
Static security analysis is a widely used technique for detecting software vulnerabilities across a wide range of weaknesses, application domains, and programming languages. While…
An Exploratory Study on the Engineering of Security Features
Kevin Hermann, Sven Peldszus, Jan-Philipp Steghöfer +1
Software security is of utmost importance for most software systems. Developers must systematically select, plan, design, implement, and especially, maintain and evolve security fe…
A Taxonomy of Functional Security Features and How They Can Be Located
Kevin Hermann, Simon Schneider, Catherine Tony +6
Security must be considered in almost every software system. Unfortunately, selecting and implementing security features remains challenging due to the variety of security threats…