5 citations · 15 across the 8 of their papers we have counts for
5 papers · 1 filter
Dealing with Variability in API Misuse Specification
Rodrigo Bonifacio, Stefan Krüger, Krishna Narasimhan +2
APIs are the primary mechanism for developers to gain access to externally defined services and tools. However, previous research has revealed API misuses that violate the contract…
The Impact of Developer Experience in Using Java Cryptography
Mohammadreza Hazhirpasand, Mohammad Ghafari, Stefan Krüger +2
Previous research has shown that crypto APIs are hard for developers to understand and difficult for them to use. They consequently rely on unvalidated boilerplate code from online…
ACMiner: Extraction and Analysis of Authorization Checks in Android's Middleware
Sigmund Albert Gorski, Benjamin Andow, Adwait Nadkarni +4
Billions of users rely on the security of the Android platform to protect phones, tablets, and many different types of consumer electronics. While Android's permission model is wel…
Computation on Encrypted Data using Data Flow Authentication
Andreas Fischer, Benny Fuhry, Florian Kerschbaum +1
Encrypting data before sending it to the cloud protects it against hackers and malicious insiders, but requires the cloud to compute on encrypted data. Trusted (hardware) modules,…
ROPocop - Dynamic Mitigation of Code-Reuse Attacks
Andreas Follner, Eric Bodden
Control-flow attacks, usually achieved by exploiting a buffer-overflow vulnerability, have been a serious threat to system security for over fifteen years. Researchers have answere…