8 papers
Can I Check What I Designed? Mapping Security Design DSLs to Code Analyzers
Sven Peldszus, Frederik Reiche, Kevin Hermann +3
When assessing the potential impact of code-level vulnerabilities, e.g., discovered by automated analyzers, it is essential to consider them in the context of the system's security…
Many Tools, Few Exploitable Vulnerabilities: A Survey of 246 Static Code Analyzers for Security
Kevin Hermann, Sven Peldszus, Thorsten Berger
Static security analysis is a widely used technique for detecting software vulnerabilities across a wide range of weaknesses, application domains, and programming languages. While…
Before Autonomy Takes Control: Software Testing in Robotics
Nils Chur, Thiago Santos de Moura, Argentina Ortega +4
Robotic systems are complex and safety-critical software systems. As such, they need to be tested thoroughly. Unfortunately, robot software is intrinsically hard to test compared t…
Developer Perspectives on REST API Usability: A Study of REST API Guidelines
Sven Peldszus, Jan Rutenkolk, Marcel Heide +4
REST is today's most widely used architectural style for providing web-based services. In the age of service-orientation (a.k.a. Software as a Service (SaaS)) APIs have become core…
120 Domain-Specific Languages for Security
Markus Krausz, Sven Peldszus, Francesco Regazzoni +2
Security engineering, from security requirements engineering to the implementation of cryptographic protocols, is often supported by domain-specific languages (DSLs). Unfortunately…
A Large-Scale Study of Model Integration in ML-Enabled Software Systems
Yorick Sens, Henriette Knopp, Sven Peldszus +1
The rise of machine learning (ML) and its integration into software systems has drastically changed development practices. While software engineering traditionally focused on manua…