23 citations · 37 across the 7 of their papers we have counts for
8 papers
Unifying Pointer Analyses for Polyglot Inter-operations through Summary Specialization
Jyoti Prakash, Abhishek Tiwari, Christian Hammer
Modular analysis of polyglot applications is challenging because heap object flows across language boundaries must be resolved. The state-of-the-art analyses for polyglot applicati…
Our fingerprints don't fade from the Apps we touch: Fingerprinting the Android WebView
Abhishek Tiwari, Jyoti Prakash, Alimerdan Rahimov +1
Numerous studies demonstrated that browser fingerprinting is detrimental to users' security and privacy. However, little is known about the effects of browser fingerprinting on And…
A Large Scale Analysis of Android-Web Hybridization
Abhishek Tiwari, Jyoti Prakash, Sascha Gross +1
Many Android applications embed webpages via WebView components and execute JavaScript code within Android. Hybrid applications leverage dedicated APIs to load a resource and rende…
PointEval: On the Impact of Pointer Analysis Frameworks
Jyoti Prakash, Abhishek Tiwari, Christian Hammer
Pointer analysis is a foundational analysis leveraged by various static analyses. Therefore, it gathered wide attention in research for decades. Some pointer analysis frameworks ar…
IIFA: Modular Inter-app Intent Information Flow Analysis of Android Applications
Abhishek Tiwari, Sascha Groß, Christian Hammer
Android apps cooperate through message passing via intents. However, when apps do not have identical sets of privileges inter-app communication (IAC) can accidentally or maliciousl…
WebPol: Fine-grained Information Flow Policies for Web Browsers
Abhishek Bichhawat, Vineet Rajani, Jinank Jain +2
In the standard web browser programming model, third-party scripts included in an application execute with the same privilege as the application's own code. This leaves the applica…
Generalizing Permissive-Upgrade in Dynamic Information Flow Analysis
Abhishek Bichhawat, Vineet Rajani, Deepak Garg +1
Preventing implicit information flows by dynamic program analysis requires coarse approximations that result in false positives, because a dynamic monitor sees only the executed tr…
Information Flow Control in WebKit's JavaScript Bytecode
Abhishek Bichhawat, Vineet Rajani, Deepak Garg +1
Websites today routinely combine JavaScript from multiple sources, both trusted and untrusted. Hence, JavaScript security is of paramount importance. A specific interesting problem…