5 citations · 14 across the 4 of their papers we have counts for
5 papers
CamBench -- Cryptographic API Misuse Detection Tool Benchmark Suite
Michael Schlichtig, Anna-Katharina Wickert, Stefan Krüger +2
Context: Cryptographic APIs are often misused in real-world applications. Therefore, many cryptographic API misuse detection tools have been introduced. However, there exists no es…
Dealing with Variability in API Misuse Specification
Rodrigo Bonifacio, Stefan Krüger, Krishna Narasimhan +2
APIs are the primary mechanism for developers to gain access to externally defined services and tools. However, previous research has revealed API misuses that violate the contract…
The Impact of Developer Experience in Using Java Cryptography
Mohammadreza Hazhirpasand, Mohammad Ghafari, Stefan Krüger +2
Previous research has shown that crypto APIs are hard for developers to understand and difficult for them to use. They consequently rely on unvalidated boilerplate code from online…
Debugging Static Analysis
Lisa Nguyen Quang Do, Stefan Krüger, Patrick Hill +2
To detect and fix bugs and security vulnerabilities, software companies use static analysis as part of the development process. However, static analysis code itself is also prone t…
CrySL: Validating Correct Usage of Cryptographic APIs
Stefan Krüger, Johannes Späth, Karim Ali +2
Various studies have empirically shown that the majority of Java and Android apps misuse cryptographic libraries, causing devastating breaches of data security. Therefore, it is cr…