6 citations · 15 across the 11 of their papers we have counts for
7 papers · 1 filter
Control Parameters Considered Harmful: Detecting Range Specification Bugs in Drone Configuration Modules via Learning-Guided Search
Ruidong Han, Chao Yang, Siqi Ma +4
In order to support a variety of missions and deal with different flight environments, drone control programs typically provide configurable control parameters. However, such a fle…
Dep: Mutation-based Dependency Generation for Precise Taint Analysis on Android Native Code
Cong Sun, Yuwan Ma, Dongrui Zeng +3
The existence of native code in Android apps plays an important role in triggering inconspicuous propagation of secrets and circumventing malware detection. However, the state-of-t…
CryptoEval: Evaluating the Risk of Cryptographic Misuses in Android Apps with Data-Flow Analysis
Cong Sun, Xinpeng Xu, Yafei Wu +4
The misunderstanding and incorrect configurations of cryptographic primitives have exposed severe security vulnerabilities to attackers. Due to the pervasiveness and diversity of c…
Sdft: A PDG-based Summarization for Efficient Dynamic Data Flow Tracking
Xiao Kan, Cong Sun, Shen Liu +4
Dynamic taint analysis (DTA) has been widely used in various security-relevant scenarios that need to track the runtime information flow of programs. Dynamic binary instrumentation…
ReCFA: Resilient Control-Flow Attestation
Yumei Zhang, Xinzhi Liu, Cong Sun +4
Recent IoT applications gradually adapt more complicated end systems with commodity software. Ensuring the runtime integrity of these software is a challenging task for the remote…
Information flow based defensive chain for data leakage detection and prevention: a survey
Ning Xi, Chao Chen, Jun Zhang +4
Mobile and IoT applications have greatly enriched our daily life by providing convenient and intelligent services. However, these smart applications have been a prime target of adv…
Fine with "1234"? An Analysis of SMS One-Time Password Randomness in Android Apps
Siqi Ma, Juanru Li, Hyoungshick Kim +4
A fundamental premise of SMS One-Time Password (OTP) is that the used pseudo-random numbers (PRNs) are uniquely unpredictable for each login session. Hence, the process of generati…