research
∙
03/22/2023
Insecure by Design in the Backbone of Critical Infrastructure
We inspected 45 actively deployed Operational Technology (OT) product fa...
share
research
∙
03/16/2023
Wasmizer: Curating WebAssembly-driven Projects on GitHub
WebAssembly has attracted great attention as a portable compilation targ...
research
∙
01/12/2023
Naturalistic Static Program Analysis
Static program analysis development is a non-trivial and time-consuming ...
research
∙
07/30/2022
Mining unit test cases to synthesize API usage examples
Software developers study and reuse existing source code to understand h...
research
∙
07/30/2022
Developers Struggle with Authentication in Blazor WebAssembly
WebAssembly is a growing technology to build cross-platform applications...
research
∙
01/13/2022
FuzzingDriver: the Missing Dictionary to Increase Code Coverage in Fuzzers
We propose a tool, called FuzzingDriver, to generate dictionary tokens f...
research
∙
12/22/2021
Security Risks of Porting C Programs to WebAssembly
WebAssembly is a compilation target for cross-platform applications that...
research
∙
12/20/2021
How Do Developers Deal with Security Issue Reports on GitHub?
Security issue reports are the primary means of informing development te...
research
∙
11/06/2021
Cryptography Vulnerabilities on HackerOne
Previous studies have shown that cryptography is hard for developers to ...
research
∙
11/05/2021
Security Header Fields in HTTP Clients
HTTP headers are commonly used to establish web communications, and some...
research
∙
11/05/2021
Phish What You Wish
IT professionals have no simple tool to create phishing websites and rai...
research
∙
11/02/2021
The Security Risk of Lacking Compiler Protection in WebAssembly
WebAssembly is increasingly used as the compilation target for cross-pla...
research
∙
11/02/2021
Dazed and Confused: What's Wrong with Crypto Libraries?
Recent studies have shown that developers have difficulties in using cry...
research
∙
09/30/2021
Crypto Experts Advise What They Adopt
Previous studies have shown that developers regularly seek advice on onl...
research
∙
09/29/2021
Worrisome Patterns in Developers: A Survey in Cryptography
We surveyed 97 developers who had used cryptography in open-source proje...
research
∙
08/17/2021
What Do Developers Discuss about Code Comments?
Code comments are important for program comprehension, development, and ...
research
∙
08/16/2021
FluentCrypto: Cryptography in Easy Mode
Research has shown that cryptography concepts are hard to understand for...
research
∙
08/16/2021
Security Smells Pervade Mobile App Servers
[Background] Web communication is universal in cyberspace, and security ...
research
∙
08/16/2021
Hurdles for Developers in Cryptography
Prior research has shown that cryptography is hard to use for developers...
research
∙
09/02/2020
Java Cryptography Uses in the Wild
[Background] Previous research has shown that developers commonly misuse...
research
∙
07/20/2020
Why Research on Test-Driven Development is Inconclusive?
[Background] Recent investigations into the effects of Test-Driven Devel...
research
∙
06/01/2020
Security Smells in Android
The ubiquity of smartphones, and their very broad capabilities and usage...
research
∙
05/23/2020
What do class comments tell us? An investigation of comment evolution and practices in Pharo
Previous studies have characterized code comments in different programmi...
research
∙
02/19/2020
Tricking Johnny into Granting Web Permissions
We studied the web permission API dialog box in popular mobile and deskt...
research
∙
02/19/2020
Caveats in Eliciting Mobile App Requirements
Factors such as app stores or platform choices heavily affect functional...
research
∙
01/03/2020
CryptoExplorer: An Interactive Web Platform Supporting Secure Use of Cryptography APIs
Research has shown that cryptographic APIs are hard to use. Consequently...
research
∙
01/01/2020
Web APIs in Android through the Lens of Security
Web communication has become an indispensable characteristic of mobile a...
research
∙
08/05/2019
The Impact of Developer Experience in Using Java Cryptography
Previous research has shown that crypto APIs are hard for developers to ...
research
∙
08/05/2019
Testability First!
The pivotal role of testing in high-quality software production has driv...
research
∙
11/30/2018
Security Code Smells in Android ICC
Android Inter-Component Communication (ICC) is complex, largely unconstr...
research
∙
07/28/2018
Goal-oriented Mutation Testing with Focal Methods
Mutation testing is the state-of-the-art technique for assessing the fau...
research
∙
07/12/2018