4 citations · 7 across the 4 of their papers we have counts for
4 papers · 1 filter
Debugging Static Analysis
Lisa Nguyen Quang Do, Stefan Krüger, Patrick Hill +2
To detect and fix bugs and security vulnerabilities, software companies use static analysis as part of the development process. However, static analysis code itself is also prone t…
Self-adaptive static analysis
Eric Bodden
Static code analysis is a powerful approach to detect quality deficiencies such as performance bottlenecks, safety violations or security vulnerabilities already during a software…
CrySL: Validating Correct Usage of Cryptographic APIs
Stefan Krüger, Johannes Späth, Karim Ali +2
Various studies have empirically shown that the majority of Java and Android apps misuse cryptographic libraries, causing devastating breaches of data security. Therefore, it is cr…
Analyzing the Gadgets Towards a Metric to Measure Gadget Quality
Andreas Follner, Alexandre Bartel, Eric Bodden
Current low-level exploits often rely on code-reuse, whereby short sections of code (gadgets) are chained together into a coherent exploit that can be executed without the need to…