71 citations · 289 across the 25 of their papers we have counts for
13 papers · 1 filter
UNGOML: Automated Classification of unsafe Usages in Go
Anna-Katharina Wickert, Clemens Damke, Lars Baumgärtner +2
The Go programming language offers strong protection from memory corruption. As an escape hatch of these protections, it provides the unsafe package. Previous studies identified th…
Towards Code Generation from BDD Test Case Specifications: A Vision
Leon Chemnitz, David Reichenbach, Hani Aldebes +3
Automatic code generation has recently attracted large attention and is becoming more significant to the software development process. Solutions based on Machine Learning and Artif…
CamBench -- Cryptographic API Misuse Detection Tool Benchmark Suite
Michael Schlichtig, Anna-Katharina Wickert, Stefan Krüger +2
Context: Cryptographic APIs are often misused in real-world applications. Therefore, many cryptographic API misuse detection tools have been introduced. However, there exists no es…
Python Crypto Misuses in the Wild
Anna-Katharina Wickert, Lars Baumgärtner, Florian Breitfelder +1
Background: Previous studies have shown that up to 99.59 % of the Java apps using crypto APIs misuse the API at least once. However, these studies have been conducted on Java and C…
Fex: Assisted Identification of Domain Features from C Programs
Patrick Müller, Krishna Narasimhan, Mira Mezini
Modern software typically performs more than one functionality. These functionalities or features are not always organized in a way for modules representing these features to be us…
Modular Collaborative Program Analysis in OPAL
Dominik Helm, Florian Kübler, Michael Reif +2
Current approaches combining multiple static analyses deriving different, independent properties focus either on modularity or performance. Whereas declarative approaches facilitat…
A Systematic Evaluation of Static API-Misuse Detectors
Sven Amann, Hoan Anh Nguyen, Sarah Nadi +2
Application Programming Interfaces (APIs) often have usage constraints, such as restrictions on call order or call conditions. API misuses, i.e., violations of these constraints, m…
CrySL: Validating Correct Usage of Cryptographic APIs
Stefan Krüger, Johannes Späth, Karim Ali +2
Various studies have empirically shown that the majority of Java and Android apps misuse cryptographic libraries, causing devastating breaches of data security. Therefore, it is cr…
Abmash: Mashing Up Legacy Web Applications by Automated Imitation of Human Actions
Alper Ortac, Martin Monperrus, Mira Mezini
Many business web-based applications do not offer applications programming interfaces (APIs) to enable other applications to access their data and functions in a programmatic manne…
Detecting Missing Method Calls as Violations of the Majority Rule
Martin Monperrus, Mira Mezini
When using object-oriented frameworks it is easy to overlook certain important method calls that are required at particular places in code. In this paper, we provide a comprehensiv…
What Should Developers Be Aware Of? An Empirical Study on the Directives of API Documentation
Martin Monperrus, Michael Eichberg, Elif Tekes +1
Application Programming Interfaces (API) are exposed to developers in order to reuse software libraries. API directives are natural-language statements in API documentation that ma…
Querying Source Code with Natural Language
Markus Kimmig, Martin Monperrus, Mira Mezini
One common task of developing or maintaining software is searching the source code for information like specific method calls or write accesses to certain fields. This kind of info…
Semi-Automatically Extracting FAQs to Improve Accessibility of Software Development Knowledge
Stefan Henß, Martin Monperrus, Mira Mezini
Frequently asked questions (FAQs) are a popular way to document software development knowledge. As creating such documents is expensive, this paper presents an approach for automat…