activity
20142023
most citedDo Android Taint Analysis Tools Keep Their Promises?

76 citations · 199 across the 15 of their papers we have counts for

collaborators
Showing cs.SEShow all

8 papers · 1 filter

cs.SE2023

Static Analysis Driven Enhancements for Comprehension in Machine Learning Notebooks

Ashwin Prasad Shivarpatna Venkatesh, Samkutty Sabu, Mouli Chekkapalli +3

Jupyter notebooks enable developers to interleave code snippets with rich-text and in-line visualizations. Data scientists use Jupyter notebook as the de-facto standard for creatin…

cs.SE2022★ 5 cited

CamBench -- Cryptographic API Misuse Detection Tool Benchmark Suite

Michael Schlichtig, Anna-Katharina Wickert, Stefan Krüger +2

Context: Cryptographic APIs are often misused in real-world applications. Therefore, many cryptographic API misuse detection tools have been introduced. However, there exists no es…

cs.SE2018★ 76 cited

Do Android Taint Analysis Tools Keep Their Promises?

Felix Pauck, Eric Bodden, Heike Wehrheim

In recent years, researchers have developed a number of tools to conduct taint analysis of Android applications. While all the respective papers aim at providing a thorough empiric…

cs.SE2018★ 3 cited

Debugging Static Analysis

Lisa Nguyen Quang Do, Stefan Krüger, Patrick Hill +2

To detect and fix bugs and security vulnerabilities, software companies use static analysis as part of the development process. However, static analysis code itself is also prone t…

cs.SE2017

Self-adaptive static analysis

Eric Bodden

Static code analysis is a powerful approach to detect quality deficiencies such as performance bottlenecks, safety violations or security vulnerabilities already during a software…

cs.SE2017★ 4 cited

CrySL: Validating Correct Usage of Cryptographic APIs

Stefan Krüger, Johannes Späth, Karim Ali +2

Various studies have empirically shown that the majority of Java and Android apps misuse cryptographic libraries, causing devastating breaches of data security. Therefore, it is cr…