220 citations · 524 across the 11 of their papers we have counts for
12 papers
An In-depth Study of Java Deserialization Remote-Code Execution Exploits and Vulnerabilities
Imen Sayar, Alexandre Bartel, Eric Bodden +1
Nowadays, an increasing number of applications uses deserialization. This technique, based on rebuilding the instance of objects from serialized byte streams, can be dangerous sinc…
On The (In)Effectiveness of Static Logic Bomb Detector for Android Apps
Jordan Samhi, Alexandre Bartel
Android is present in more than 85% of mobile devices, making it a prime target for malware. Malicious code is becoming increasingly sophisticated and relies on logic bombs to hide…
RAICC: Revealing Atypical Inter-Component Communication in Android Apps
Jordan Samhi, Alexandre Bartel, Tegawendé F. Bissyandé +1
Inter-Component Communication (ICC) is a key mechanism in Android. It enables developers to compose rich functionalities and explore reuse within and across apps. Unfortunately, as…
ACMiner: Extraction and Analysis of Authorization Checks in Android's Middleware
Sigmund Albert Gorski, Benjamin Andow, Adwait Nadkarni +4
Billions of users rely on the security of the Android platform to protect phones, tablets, and many different types of consumer electronics. While Android's permission model is wel…
AndroZoo++: Collecting Millions of Android Apps and Their Metadata for the Research Community
Li Li, Jun Gao, Médéric Hurier +5
We present a growing collection of Android apps collected from several sources, including the official Google Play app market and a growing collection of various metadata of those…
Analyzing the Gadgets Towards a Metric to Measure Gadget Quality
Andreas Follner, Alexandre Bartel, Eric Bodden
Current low-level exploits often rely on code-reuse, whereby short sections of code (gadgets) are chained together into a coherent exploit that can be executed without the need to…