115 citations · 330 across the 22 of their papers we have counts for
22 papers
Accessible or Not? An Empirical Investigation of Android App Accessibility
Sen Chen, Chunyang Chen, Lingling Fan +3
Mobile apps provide new opportunities to people with disabilities to act independently in the world. Motivated by this trend, researchers have conducted empirical studies by using…
Risk Management Framework for Machine Learning Security
Jakub Breier, Adrian Baldwin, Helen Balinsky +1
Adversarial attacks for machine learning models have become a highly studied topic both in academia and industry. These attacks, along with traditional security threats, can compro…
An Empirical Evaluation of GDPR Compliance Violations in Android mHealth Apps
Ming Fan, Le Yu, Sen Chen +6
The purpose of the General Data Protection Regulation (GDPR) is to provide improved privacy protection. If an app controls personal data from users, it needs to be compliant with G…
Can We Trust Your Explanations? Sanity Checks for Interpreters in Android Malware Analysis
Ming Fan, Wenying Wei, Xiaofei Xie +3
With the rapid growth of Android malware, many machine learning-based malware analysis approaches are proposed to mitigate the severe phenomenon. However, such classifiers are opaq…
A Survey of Smart Contract Formal Specification and Verification
Palina Tolmach, Yi Li, Shang-Wei Lin +2
A smart contract is a computer program which allows users to automate their actions on the blockchain platform. Given the significance of smart contracts in supporting important ac…
CoreGen: Contextualized Code Representation Learning for Commit Message Generation
Lun Yiu Nie, Cuiyun Gao, Zhicong Zhong +3
Automatic generation of high-quality commit messages for code commits can substantially facilitate software developers' works and coordination. However, the semantic gap between so…
Why an Android App is Classified as Malware? Towards Malware Classification Interpretation
Bozhi Wu, Sen Chen, Cuiyun Gao +4
Machine learning (ML) based approach is considered as one of the most promising techniques for Android malware detection and has achieved high accuracy by leveraging commonly-used…
Automated synthesis of local time requirement for service composition
Étienne André, Tian Huat Tan, Manman Chen +4
Service composition aims at achieving a business goal by composing existing service-based applications or components. The response time of a service is crucial especially in time c…
Machine Learning Testing: Survey, Landscapes and Horizons
Jie M. Zhang, Mark Harman, Lei Ma +1
This paper provides a comprehensive survey of Machine Learning Testing (ML testing) research. It covers 144 papers on testing properties (e.g., correctness, robustness, and fairnes…
Superion: Grammar-Aware Greybox Fuzzing
Junjie Wang, Bihuan Chen, Lei Wei +1
In recent years, coverage-based greybox fuzzing has proven itself to be one of the most effective techniques for finding security bugs in practice. Particularly, American Fuzzy Lop…
LEOPARD: Identifying Vulnerable Code for Vulnerability Assessment through Program Metrics
Xiaoning Du, Bihuan Chen, Yuekang Li +4
Identifying potentially vulnerable locations in a code base is critical as a pre-step for effective vulnerability assessment; i.e., it can greatly help security experts put their t…
An Event-based Compositional Reasoning Approach for Concurrent Reactive Systems
Yongwang Zhao, David Sanan, Fuyuan Zhang +1
Reactive systems are composed of a well defined set of input events that the system reacts with by executing an associated handler to each event. In concurrent environments, event…
DeepLaser: Practical Fault Attack on Deep Neural Networks
Jakub Breier, Xiaolu Hou, Dirmanto Jap +3
As deep learning systems are widely adopted in safety- and security-critical applications, such as autonomous vehicles, banking systems, etc., malicious faults and attacks become a…
An Empirical Assessment of Security Risks of Global Android Banking Apps
Sen Chen, Lingling Fan, Guozhu Meng +5
Mobile banking apps, belonging to the most security-critical app category, render massive and dynamic transactions susceptible to security risks. Given huge potential financial los…
Executable Operational Semantics of Solidity
Jiao Jiao, Shuanglong Kan, Shang-Wei Lin +3
Bitcoin has attracted everyone's attention and interest recently. Ethereum (ETH), a second generation cryptocurrency, extends Bitcoin's design by offering a Turing-complete program…
An Executable Operational Semantics for Rust with the Formalization of Ownership and Borrowing
Shuanglong Kan, Zhe Chen, David Sanan +2
Rust is an emergent systems programming language highlighting memory safety by its Ownership and Borrowing System (OBS). The existing formal semantics for Rust only covers limited…
Large-Scale Analysis of Framework-Specific Exceptions in Android Apps
Lingling Fan, Ting Su, Sen Chen +5
Mobile apps have become ubiquitous. For app developers, it is a key priority to ensure their apps' correctness and reliability. However, many apps still suffer from occasional to f…
A Permission-Dependent Type System for Secure Information Flow Analysis
Hongxu Chen, Alwen Tiu, Zhiwu Xu +1
We introduce a novel type system for enforcing secure information flow in an imperative language. Our work is motivated by the problem of statically checking potential information…
High-Assurance Separation Kernels: A Survey on Formal Methods
Yongwang Zhao, David Sanan, Fuyuan Zhang +1
Separation kernels provide temporal/spatial separation and controlled information flow to their hosted applications. They are introduced to decouple the analysis of applications in…
Compositional Reasoning for Shared-variable Concurrent Programs
Fuyuan Zhang, Yongwang Zhao, David Sanan +4
Scalable and automatic formal verification for concurrent systems is always demanding. In this paper, we propose a verification framework to support automated compositional reasoni…
Reasoning About Information Flow Security of Separation Kernels with Channel-based Communication
Yongwang Zhao, David Sann, Fuyuan Zhang +1
Assurance of information flow security by formal methods is mandated in security certification of separation kernels. As an industrial standard for separation kernels, ARINC 653 ha…
Stateful Security Protocol Verification
Li Li, Jun Pang, Yang Liu +2
A long-standing research problem in security protocol design is how to efficiently verify security protocols with tamper-resistant global states. In this paper, we address this pro…