58 citations · 306 across the 21 of their papers we have counts for
29 papers
A Decade of Code Comment Quality Assessment: A Systematic Literature Review
Pooja Rani, Arianna Blasi, Nataliia Stulova +3
Code comments are important artifacts in software systems and play a paramount role in many software engineering (SE) tasks related to maintenance and program comprehension. Howeve…
FuzzingDriver: the Missing Dictionary to Increase Code Coverage in Fuzzers
Arash Ale Ebrahim, Mohammadreza Hazhirpasand, Oscar Nierstrasz +1
We propose a tool, called FuzzingDriver, to generate dictionary tokens for coverage-based greybox fuzzers (CGF) from the codebase of any target program. FuzzingDriver does not add…
Security Header Fields in HTTP Clients
Pascal Gadient, Oscar Nierstrasz, Mohammad Ghafari
HTTP headers are commonly used to establish web communications, and some of them are relevant for security. However, we have only little information about the usage and support of…
Phish What You Wish
Pascal Gadient, Pascal Gerig, Oscar Nierstrasz +1
IT professionals have no simple tool to create phishing websites and raise the awareness of users. We developed a prototype that can dynamically mimic websites by using enriched sc…
Dazed and Confused: What's Wrong with Crypto Libraries?
Mohammadreza Hazhirpasand, Oscar Nierstrasz, Mohammad Ghafari
Recent studies have shown that developers have difficulties in using cryptographic APIs, which often led to security flaws. We are interested to tackle this matter by looking into…
Crypto Experts Advise What They Adopt
Mohammadreza Hazhirpasand, Oscar Nierstrasz, Mohammad Ghafari
Previous studies have shown that developers regularly seek advice on online forums to resolve their cryptography issues. We investigated whether users who are active in cryptograph…
Worrisome Patterns in Developers: A Survey in Cryptography
Mohammadreza Hazhirpasand, Oscar Nierstrasz, Mohammad Ghafari
We surveyed 97 developers who had used cryptography in open-source projects, in the hope of identifying developer security and cryptography practices. We asked them about individua…
Do Comments follow Commenting Conventions? A Case Study in Java and Python
Pooja Rani, Suada Abukar, Nataliia Stulova +2
Assessing code comment quality is known to be a difficult problem. A number of coding style guidelines have been created with the aim to encourage writing of informative, readable,…
RepliComment: Identifying Clones in Code Comments
Arianna Blasi, Nataliia Stulova, Alessandra Gorla +1
Code comments are the primary means to document implementation and facilitate program comprehension. Thus, their quality should be a primary concern to improve program maintenance.…
What Do Developers Discuss about Code Comments?
Pooja Rani, Mathias Birrer, Sebastiano Panichella +2
Code comments are important for program comprehension, development, and maintenance tasks. Given the varying standards for code comments, and their unstructured or semi-structured…
Security Smells Pervade Mobile App Servers
Pascal Gadient, Marc-Andrea Tarnutzer, Oscar Nierstrasz +1
[Background] Web communication is universal in cyberspace, and security risks in this domain are devastating. [Aims] We analyzed the prevalence of six security smells in mobile app…
Hurdles for Developers in Cryptography
Mohammadreza Hazhirpasand, Oscar Nierstrasz, Mohammadhossein Shabani +1
Prior research has shown that cryptography is hard to use for developers. We aim to understand what cryptography issues developers face in practice. We clustered 91954 cryptography…
How to Identify Class Comment Types? A Multi-language Approach for Class Comment Classification
Pooja Rani, Sebastiano Panichella, Manuel Leuenberger +2
Most software maintenance and evolution tasks require developers to understand the source code of their software systems. Software developers usually inspect class comments to gain…
Java Cryptography Uses in the Wild
Mohammadreza Hazhirpasand, Mohammad Ghafari, Oscar Nierstrasz
[Background] Previous research has shown that developers commonly misuse cryptography APIs. [Aim] We have conducted an exploratory study to find out how crypto APIs are used in ope…
Security Smells in Android
Mohammad Ghafari, Pascal Gadient, Oscar Nierstrasz
The ubiquity of smartphones, and their very broad capabilities and usage, make the security of these devices tremendously important. Unfortunately, despite all progress in security…
What do class comments tell us? An investigation of comment evolution and practices in Pharo Smalltalk
Pooja Rani, Sebastiano Panichella, Manuel Leuenberger +2
Previous studies have characterized code comments in various programming languages to support better program comprehension activities and maintenance tasks. However, very few studi…
Tricking Johnny into Granting Web Permissions
Mohammadreza Hazhirpasand, Mohammad Ghafari, Oscar Nierstrasz
We studied the web permission API dialog box in popular mobile and desktop browsers, and found that it typically lacks measures to protect users from unwittingly granting web permi…
Caveats in Eliciting Mobile App Requirements
Nitish Patkar, Mohammad Ghafari, Oscar Nierstrasz +1
Factors such as app stores or platform choices heavily affect functional and non-functional mobile app requirements. We surveyed 45 companies and interviewed ten experts to explore…
CryptoExplorer: An Interactive Web Platform Supporting Secure Use of Cryptography APIs
Mohammadreza Hazhirpasand, Mohammad Ghafari, Oscar Nierstrasz
Research has shown that cryptographic APIs are hard to use. Consequently, developers resort to using code examples available in online information sources that are often not secure…
Web APIs in Android through the Lens of Security
Pascal Gadient, Mohammad Ghafari, Marc-Andrea Tarnutzer +1
Web communication has become an indispensable characteristic of mobile apps. However, it is not clear what data the apps transmit, to whom, and what consequences such transmissions…
VISON: An Ontology-Based Approach for Software Visualization Tool Discoverability
Leonel Merino, Ekaterina Kozlova, Oscar Nierstrasz +1
Although many tools have been presented in the research literature of software visualization, there is little evidence of their adoption. To choose a suitable visualization tool, p…
The Impact of Developer Experience in Using Java Cryptography
Mohammadreza Hazhirpasand, Mohammad Ghafari, Stefan Krüger +2
Previous research has shown that crypto APIs are hard for developers to understand and difficult for them to use. They consequently rely on unvalidated boilerplate code from online…
Testability First!
Mohammad Ghafari, Markus Eggiman, Oscar Nierstrasz
The pivotal role of testing in high-quality software production has driven a significant effort in evaluating and assessing testing practices. We explore the state of testing in a…
PerfVis: Pervasive Visualization in Immersive AugmentedReality for Performance Awareness
Leonel Merino, Mario Hess, Alexandre Bergel +2
Developers are usually unaware of the impact of code changes to the performance of software systems. Although developers can analyze the performance of a system by executing, for i…