4 citations · 7 across the 4 of their papers we have counts for
6 papers
Debugging Static Analysis
Lisa Nguyen Quang Do, Stefan Krüger, Patrick Hill +2
To detect and fix bugs and security vulnerabilities, software companies use static analysis as part of the development process. However, static analysis code itself is also prone t…
Self-adaptive static analysis
Eric Bodden
Static code analysis is a powerful approach to detect quality deficiencies such as performance bottlenecks, safety violations or security vulnerabilities already during a software…
CrySL: Validating Correct Usage of Cryptographic APIs
Stefan Krüger, Johannes Späth, Karim Ali +2
Various studies have empirically shown that the majority of Java and Android apps misuse cryptographic libraries, causing devastating breaches of data security. Therefore, it is cr…
Computation on Encrypted Data using Data Flow Authentication
Andreas Fischer, Benny Fuhry, Florian Kerschbaum +1
Encrypting data before sending it to the cloud protects it against hackers and malicious insiders, but requires the cloud to compute on encrypted data. Trusted (hardware) modules,…
Analyzing the Gadgets Towards a Metric to Measure Gadget Quality
Andreas Follner, Alexandre Bartel, Eric Bodden
Current low-level exploits often rely on code-reuse, whereby short sections of code (gadgets) are chained together into a coherent exploit that can be executed without the need to…
ROPocop - Dynamic Mitigation of Code-Reuse Attacks
Andreas Follner, Eric Bodden
Control-flow attacks, usually achieved by exploiting a buffer-overflow vulnerability, have been a serious threat to system security for over fifteen years. Researchers have answere…