76 citations · 199 across the 15 of their papers we have counts for
17 papers
Static Analysis Driven Enhancements for Comprehension in Machine Learning Notebooks
Ashwin Prasad Shivarpatna Venkatesh, Samkutty Sabu, Mouli Chekkapalli +3
Jupyter notebooks enable developers to interleave code snippets with rich-text and in-line visualizations. Data scientists use Jupyter notebook as the de-facto standard for creatin…
An In-depth Study of Java Deserialization Remote-Code Execution Exploits and Vulnerabilities
Imen Sayar, Alexandre Bartel, Eric Bodden +1
Nowadays, an increasing number of applications uses deserialization. This technique, based on rebuilding the instance of objects from serialized byte streams, can be dangerous sinc…
How far are German companies in improving security through static program analysis tools?
Goran Piskachev, Stefan Dziwok, Thorsten Koch +2
As security becomes more relevant for many companies, the popularity of static program analysis (SPA) tools is increasing. In this paper, we target the use of SPA tools among compa…
To what extent can we analyze Kotlin programs using existing Java taint analysis tools? (Extended Version)
Ranjith Krishnamurthy, Goran Piskachev, Eric Bodden
As an alternative to Java, Kotlin has gained rapid popularity since its introduction and has become the default choice for developing Android apps. However, due to its interoperabi…
CamBench -- Cryptographic API Misuse Detection Tool Benchmark Suite
Michael Schlichtig, Anna-Katharina Wickert, Stefan Krüger +2
Context: Cryptographic APIs are often misused in real-world applications. Therefore, many cryptographic API misuse detection tools have been introduced. However, there exists no es…
Fluently specifying taint-flow queries with fluentTQL
Goran Piskachev, Johannes Späth, Ingo Budde +1
Previous work has shown that taint analyses are only useful if correctly customized to the context in which they are used. Existing domain-specific languages (DSLs) allow such cust…