Do Android Taint Analysis Tools Keep Their Promises?

Felix Pauck, Eric Bodden, Heike Wehrheim

Computation on Encrypted Data using Data Flow Authentication

Andreas Fischer, Benny Fuhry, Florian Kerschbaum +1

Debugging Static Analysis

Lisa Nguyen Quang Do, Stefan Krüger, Patrick Hill +2

CrySL: Validating Correct Usage of Cryptographic APIs

Stefan Krüger, Johannes Späth, Karim Ali +2

Analyzing the Gadgets Towards a Metric to Measure Gadget Quality

Andreas Follner, Alexandre Bartel, Eric Bodden

I know what leaked in your pocket: uncovering privacy leaks on Android Apps with Static Taint Analysis

Li Li, Alexandre Bartel, Jacques Klein +6

Self-adaptive static analysis

Eric Bodden

ACMiner: Extraction and Analysis of Authorization Checks in Android's Middleware

Sigmund Albert Gorski, Benjamin Andow, Adwait Nadkarni +4

ROPocop - Dynamic Mitigation of Code-Reuse Attacks

Andreas Follner, Eric Bodden

The Impact of Developer Experience in Using Java Cryptography

Mohammadreza Hazhirpasand, Mohammad Ghafari, Stefan Krüger +2

The paper empirically examines how developers use Java Cryptography Architecture in open‑source projects and finds that common experience metrics do not predict their performance w…