3 papers
cs.CR2026
Longitudinal Analyses of SAST Tools: A CodeQL Case Study
Jean-Charles Noirot Ferrand, Kyle Domico, Yohan Beugin +1
Open-source software (OSS) pipelines rely on automated static analysis tools to prevent the introduction of vulnerabilities in code. However, there is limited understanding of the…
cs.CR2025
A Practical Guideline and Taxonomy to LLVM's Control Flow Integrity
Sabine Houy, Bruno Kreyssig, Timothee Riom +2
Memory corruption vulnerabilities remain one of the most severe threats to software security. They often allow attackers to achieve arbitrary code execution by redirecting a vulner…
cs.CR2025
Deserialization Gadget Chains are not a Pathological Problem in Android:an In-Depth Study of Java Gadget Chains in AOSP
Bruno Kreyssig, Timothée Riom, Sabine Houy +2
Inter-app communication is a mandatory and security-critical functionality of operating systems, such as Android. On the application level, Android implements this facility through…