Software Engineering Empirical Research Radar
Security / Privacy / Vulnerability Papers
Papers tagged as Security / Privacy / Vulnerability.
| Paper | Venue | Year | Topics |
|---|---|---|---|
| ZTaint-Havoc: From Havoc Mode to Zero-Execution Fuzzing-Driven Taint Inference. Yuchong Xie; Wenhui Zhang; Dongdong She | ISSTA | 2025 | Testing / QA; Security / Privacy / Vulnerability |
| Why Does My Transaction Fail? A First Look at Failed Transactions on the Solana Blockchain. Xiaoye Zheng; Zhiyuan Wan; David Lo 0001; Difan Xie; Xiaohu Yang 0001 | ISSTA | 2025 | Security / Privacy / Vulnerability |
| Understanding Model Weaknesses: A Path to Strengthening DNN-Based Android Malware Detection. Haodong Li; Xiao Cheng 0002; Yanjie Zhao 0001; Guosheng Xu 0001; Guoai Xu; Haoyu Wang 0001 | ISSTA | 2025 | Security / Privacy / Vulnerability; Mobile / Web / GUI / Android |
| Smart-LLaMA-DPO: Reinforced Large Language Model for Explainable Smart Contract Vulnerability Detection. Lei Yu; Zhirong Huang; Hang Yuan; Shiqi Cheng; Li Yang 0015; Fengjun Zhang; Chenjie Shen; Jiajia Ma; Jingyuan Zhang; Junyi Lu; Chun Zuo | ISSTA | 2025 | AI / LLM for SE; Security / Privacy / Vulnerability |
| Protecting Privacy in Software Logs: What Should Be Anonymized? Roozbeh Aghili; Heng Li 0007; Foutse Khomh | ISSTA | 2025 | Security / Privacy / Vulnerability; Cloud / Microservices / Distributed Systems |
| Fixing Outside the Box: Uncovering Tactics for Open-Source Security Issue Management. Lyuye Zhang; Jiahui Wu; Chengwei Liu; Kaixuan Li 0002; Xiaoyu Sun 0002; Lida Zhao; Chong Wang 0013; Yang Liu 0003 | ISSTA | 2025 | Security / Privacy / Vulnerability |
| Enhancing Smart Contract Security Analysis with Execution Property Graphs. Kaihua Qin; Zhe Ye 0002; Zhun Wang; Weilin Li; Liyi Zhou; Chao Zhang 0008; Dawn Song; Arthur Gervais | ISSTA | 2025 | Security / Privacy / Vulnerability |
| Beyond Static Pattern Matching? Rethinking Automatic Cryptographic API Misuse Detection in the Era of LLMs. Yifan Xia; Zichen Xie; Peiyu Liu 0003; Kangjie Lu; Yan Liu 0069; Wenhai Wang; Shouling Ji | ISSTA | 2025 | Security / Privacy / Vulnerability |
| Automated Attack Synthesis for Constant Product Market Makers. Sujin Han; Jinseo Kim; Sung-Ju Lee; Insu Yun | ISSTA | 2025 | Security / Privacy / Vulnerability |
| Your Fix Is My Exploit: Enabling Comprehensive DL Library API Fuzzing with Large Language Models. Kunpeng Zhang, Shuai Wang, Jitao Han, Xiaogang Zhu 0001, Xian Li | ICSE | 2025 | Testing / QA; Debugging / Fault Localization / Diagnosis / Repair; Security / Privacy / Vulnerability |
| SECRET: Towards Scalable and Efficient Code Retrieval via Segmented Deep Hashing. Wenchao Gu, Ensheng Shi, Yanlin Wang 0001, Lun Du, Shi Han | ICSE | 2025 | Security / Privacy / Vulnerability |
| Repository-Level Graph Representation Learning for Enhanced Security Patch Detection. Xin-Cheng Wen, Zirui Lin, Cuiyun Gao 0001, Hongyu Zhang 0002, Yong Wang | ICSE | 2025 | Debugging / Fault Localization / Diagnosis / Repair; Security / Privacy / Vulnerability; DevOps / CI / Build / Release |
| Relationship Status: "It's Complicated" Developer-Security Expert Dynamics in Scrum. Houda Naji, Marco Gutfleisch, Alena Naiakshina | ICSE | 2025 | Security / Privacy / Vulnerability; Human / Empirical / Socio-technical |
| Preserving Privacy in Software Composition Analysis: A Study of Technical Solutions and Enhancements. Huaijin Wang 0001, Zhibo Liu, Yanbo Dai, Shuai Wang 0011, Qiyi Tang 0003 | ICSE | 2025 | Security / Privacy / Vulnerability; Human / Empirical / Socio-technical |
| PacDroid: A Pointer-Analysis-Centric Framework for Security Vulnerabilities in Android Apps. Menglong Chen, Tian Tan 0001, Minxue Pan, Yue Li 0006 | ICSE | 2025 | Program Analysis / Verification / Formal Methods; Security / Privacy / Vulnerability; Mobile / Web / GUI / Android |
| On Prescription or Off Prescription? An Empirical Study of Community-Prescribed Security Configurations for Kubernetes. Shazibul Islam Shamim, Hanyang Hu, Akond Rahman | ICSE | 2025 | Security / Privacy / Vulnerability; Human / Empirical / Socio-technical; DevOps / CI / Build / Release; Cloud / Microservices / Distributed Systems |
| LLM-Aided Automatic Modeling for Security Protocol Verification. Ziyu Mao, Jingyi Wang 0004, Jun Sun 0001, Shengchao Qin, Jiawen Xiong | ICSE | 2025 | AI / LLM for SE; Program Analysis / Verification / Formal Methods; Security / Privacy / Vulnerability; Requirements / Modeling / Architecture |
| Fork State-Aware Differential Fuzzing for Blockchain Consensus Implementations. Wonhoi Kim, Hocheol Nam 0001, Muoi Tran, Amin Jalilov, Zhenkai Liang | ICSE | 2025 | Testing / QA; Security / Privacy / Vulnerability |
| Enhancing the Open Network: Definition and Automated Detection of Smart Contract Defects. Hao Song, Teng Li, Jiachi Chen, Ting Chen 0002, Beibei Li 0002 | ICSE | 2025 | Security / Privacy / Vulnerability |
| Demystifying and Detecting Cryptographic Defects in Ethereum Smart Contracts. Jiashuo Zhang 0001, Yiming Shen, Jiachi Chen, Jianzhong Su, Yanlin Wang 0001 | ICSE | 2025 | Security / Privacy / Vulnerability |
| Decoding Secret Memorization in Code LLMs Through Token-Level Characterization. Yuqing Nie, Chong Wang 0013, Kailong Wang 0001, Guoai Xu, Guosheng Xu 0001 | ICSE | 2025 | Security / Privacy / Vulnerability |
| Combining Fine-Tuning and LLM-Based Agents for Intuitive Smart Contract Auditing with Justifications. Wei Ma 0014, Daoyuan Wu, Yuqiang Sun 0001, Tianwen Wang, Shangqing Liu | ICSE | 2025 | AI / LLM for SE; Security / Privacy / Vulnerability |
| Chord: Towards a Unified Detection of Blockchain Transaction Parallelism Bugs. Yuanhang Zhou, Zhen Yan, Yuanliang Chen, Fuchen Ma, Ting Chen 0002 | ICSE | 2025 | Security / Privacy / Vulnerability |
| BDefects4NN: A Backdoor Defect Database for Controlled Localization Studies in Neural Networks. Yisong Xiao, Aishan Liu, Xinwei Zhang 0010, Tianyuan Zhang 0004, Tianlin Li | ICSE | 2025 | AI / LLM for SE; Security / Privacy / Vulnerability |
| AssetHarvester: A Static Analysis Tool for Detecting Secret-Asset Pairs in Software Artifacts. Setu Kumar Basak, K. Virgil English, Ken Ogura, Vitesh Kambara, Bradley Reaves | ICSE | 2025 | Program Analysis / Verification / Formal Methods; Security / Privacy / Vulnerability |
| An Exploratory Study on the Engineering of Security Features. Kevin Hermann, Sven Peldszus, Jan-Philipp Steghöfer, Thorsten Berger | ICSE | 2025 | Security / Privacy / Vulnerability; Human / Empirical / Socio-technical |
| Understanding Industry Perspectives of Static Application Security Testing (SAST) Evaluation. Yuan Li; Peisen Yao; Kan Yu; Chengpeng Wang 0001; Yaoyang Ye; Song Li 0006; Meng Luo 0002; Yepang Liu 0001; Kui Ren 0001 | FSE | 2025 | Testing / QA; Security / Privacy / Vulnerability |
| Statement-Level Adversarial Attack on Vulnerability Detection Models via Out-of-Distribution Features. Xiaohu Du; Ming Wen 0001; Haoyu Wang; Zichao Wei; Hai Jin 0001 | FSE | 2025 | Security / Privacy / Vulnerability |
| Smart Contract Fuzzing Towards Profitable Vulnerabilities. Ziqiao Kong; Cen Zhang; Maoyi Xie; Ming Hu 0003; Yue Xue; Ye Liu 0012; Haijun Wang 0002; Yang Liu 0003 | FSE | 2025 | Testing / QA; Security / Privacy / Vulnerability |
| Mitigating Emergent Malware Label Noise in DNN-Based Android Malware Detection. Haodong Li; Xiao Cheng 0002; Guohan Zhang; Guosheng Xu 0001; Guoai Xu; Haoyu Wang 0001 | FSE | 2025 | Security / Privacy / Vulnerability; Mobile / Web / GUI / Android |
| Incorporating Verification Standards for Security Requirements Generation from Functional Specifications. Xiaoli Lian; Shuaisong Wang; Hanyu Zou; Fang Liu 0032; Jiajun Wu 0024; Li Zhang 0029 | FSE | 2025 | Program Analysis / Verification / Formal Methods; Security / Privacy / Vulnerability; Requirements / Modeling / Architecture |
| Dynamic Taint Tracking for Modern Java Virtual Machines. Katherine Hough; Jonathan Bell 0001 | FSE | 2025 | Security / Privacy / Vulnerability |
| Detecting Smart Contract State-Inconsistency Bugs via Flow Divergence and Multiplex Symbolic Execution. Yinxi Liu; Wei Meng 0001; Yinqian Zhang | FSE | 2025 | Program Analysis / Verification / Formal Methods; Security / Privacy / Vulnerability |
| CAShift: Benchmarking Log-Based Cloud Attack Detection under Normality Shift. Jiongchi Yu; Xiaofei Xie; Qiang Hu; Bowen Zhang; Ziming Zhao 0008; Yun Lin 0001; Lei Ma 0003; Ruitao Feng; Frank Liauw | FSE | 2025 | Security / Privacy / Vulnerability; Cloud / Microservices / Distributed Systems |
| Automated and Accurate Token Transfer Identification and Its Applications in Cryptocurrency Security. Shuwei Song; Ting Chen 0002; Ao Qiao; Xiapu Luo; Leqing Wang; Zheyuan He; Ting Wang 0006; Xiaodong Lin 0001; Peng He; Wensheng Zhang; Xiaosong Zhang 0001 | FSE | 2025 | Security / Privacy / Vulnerability |
| evalSmarT: An LLM-Based Framework for Evaluating Smart Contract Generated Comments. Fatou Ndiaye Mbodji, Mame Marieme C. Sougoufara, Wendkûuni C. Ouédraogo, Alioune Diallo, Kui Liu 0001 | ASE | 2025 | AI / LLM for SE; Security / Privacy / Vulnerability |
| Why Is My Transaction Risky? Understanding Smart Contract Semantics and Interactions in the NFT Ecosystem. Yujing Chen, Xuanming Liu, Zhiyuan Wan, Zuobin Wang, David Lo 0001 | ASE | 2025 | Security / Privacy / Vulnerability |
| When Does Wasm Malware Detection Fail? A Systematic Analysis of Their Robustness to Evasion. Taeyoung Kim, Sanghak Oh, Kiho Lee, Weihang Wang 0001, Yonghwi Kwon 0001 | ASE | 2025 | Security / Privacy / Vulnerability |
| Towards More Accurate Static Analysis for Taint-Style Bug Detection in Linux Kernel. Haonan Li 0009, Hang Zhang 0012, Kexin Pei, Zhiyun Qian | ASE | 2025 | Program Analysis / Verification / Formal Methods; Security / Privacy / Vulnerability |
| Towards Context-aware Mobile Privacy Notice: Implementation of A Deployable Contextual Privacy Policies Generator. Haochen Gong, Zhen Tao, Shidong Pan, Zhenchang Xing, Xiaoyu Sun 0002 | ASE | 2025 | Security / Privacy / Vulnerability; Mobile / Web / GUI / Android |
| Should We Evaluate LLM Based Security Analysis Approaches on Open Source Systems? Kohei Dozono, Jonas Engesser, Benjamin Hummel, Tobias Roehm, Alexander Pretschner | ASE | 2025 | AI / LLM for SE; Security / Privacy / Vulnerability; Human / Empirical / Socio-technical |
| Security Debt in LLM Agent Applications: A Measurement Study of Vulnerabilities and Mitigation Trade-offs. Zhuoxiang Shen, Jiarun Dai, Yuan Zhang 0009, Min Yang 0002 | ASE | 2025 | AI / LLM for SE; Security / Privacy / Vulnerability; Human / Empirical / Socio-technical |
| Secure Transaction Semantics: Analysis, Vulnerability Detection, and Attack Modeling. Yixuan Liu | ASE | 2025 | Security / Privacy / Vulnerability; Requirements / Modeling / Architecture |
| STaint: Detecting Second-Order Vulnerabilities in PHP Applications with LLM-Assisted Bi-Directional Static Taint Analysis. Yuchen Ji, Hongchen Cao, Jingzhu He | ASE | 2025 | AI / LLM for SE; Security / Privacy / Vulnerability |
| SCOPE: Evaluating and Enhancing Permission Explanation Transparency in Mobile Apps. Liu Wang, Tianshu Zhou, Haoyu Wang, Xiyuan Liu, Yi Wang | ASE | 2025 | Security / Privacy / Vulnerability; Mobile / Web / GUI / Android |
| Protecting Source Code Privacy When Hunting Memory Bugs. Jielun Wu, Bing Shui, Hongcheng Fan, Shengxin Wu, Rongxin Wu | ASE | 2025 | Security / Privacy / Vulnerability |
| PrefGen: A Preference-Driven Methodology for Secure Yet Gas-Efficient Smart Contract Generation. Zhiyuan Peng, Xin Yin, Zijie Zhou 0001, Chenhao Ying 0001, Chao Ni 0001 | ASE | 2025 | Security / Privacy / Vulnerability |
| PoliCond: Condition-Aware Ontology-Driven LLMs for Privacy Policy Contradiction Analysis. Yalin Feng, Yifei Lu, Minxue Pan | ASE | 2025 | Security / Privacy / Vulnerability |
| On the (In)Security of Non-resettable Device Identifiers in Custom Android Systems. Zikan Dong, Liu Wang 0002, Guoai Xu, Haoyu Wang 0001 | ASE | 2025 | Security / Privacy / Vulnerability; Mobile / Web / GUI / Android |
| Leveraging Mixture-of-Experts Framework for Smart Contract Vulnerability Repair with Large Language Model. Hang Yuan, Xizhi Hou, Lei Yu, Li Yang 0015, Jiayue Tang | ASE | 2025 | AI / LLM for SE; Debugging / Fault Localization / Diagnosis / Repair; Security / Privacy / Vulnerability |
| Learning from the Past: Real-World Exploit Migration for Smart Contract PoC Generation. Kairan Sun, Zhengzi Xu, Kaixuan Li 0002, Lyuye Zhang, Yebo Feng | ASE | 2025 | Security / Privacy / Vulnerability; Maintenance / Evolution / Refactoring / Review |
| Faultseeker: LLM-Empowered Framework for Blockchain Transaction Fault Localization. Kairan Sun, Zhengzi Xu, Kaixuan Li 0002, Lyuye Zhang, Yuqiang Sun 0001 | ASE | 2025 | AI / LLM for SE; Debugging / Fault Localization / Diagnosis / Repair; Security / Privacy / Vulnerability |
| Exploring Static Taint Analysis in LLMs: A Dynamic Benchmarking Framework for Measurement and Enhancement. Haoran Zhao, Lei Zhang 0006, Keke Lian, Fute Sun, Bofei Chen | ASE | 2025 | Security / Privacy / Vulnerability |
| DeepExploitor: LLM-Enhanced Automated Exploitation of DeepLink Attack in Hybrid Apps. Zhangyue Zhang, Lei Zhang 0096, Zhibo Zhang 0006, Yongheng Liu, Zhemin Yang | ASE | 2025 | AI / LLM for SE; Security / Privacy / Vulnerability; Mobile / Web / GUI / Android |
| Cryptbara: Dependency-Guided Detection of Python Cryptographic API Misuses. Seogyeong Cho, Seungeun Yu, Seunghoon Woo | ASE | 2025 | Security / Privacy / Vulnerability |
| ConfuseTaint: Exploiting Vulnerabilities to Bypass Dynamic Taint Analysis. Yufei Wu, Alexandre Bartel | ASE | 2025 | Security / Privacy / Vulnerability |
| ACTaint: Agent-Based Taint Analysis for Access Control Vulnerabilities in Smart Contracts. Huarui Lin, Zhipeng Gao 0002, Jiachi Chen, Xiang Chen 0005, Xiaohu Yang 0001 | ASE | 2025 | Security / Privacy / Vulnerability |
| A Secure Mocking Approach towards Software Supply Chain Security. Daisuke Yamaguchi, Shinobu Saito, Takuya Iwatsuka, Nariyoshi Chida, Tachio Terauchi | ASE | 2025 | Security / Privacy / Vulnerability |
| A Large-Scale Evolvable Dataset for Model Context Protocol Ecosystem and Security Analysis. Zhiwei Lin, Bonan Ruan, Jiahao Liu 0005, Weibo Zhao | ASE | 2025 | Security / Privacy / Vulnerability |
| A Large Scale Study of AI-based Binary Function Similarity Detection Techniques for Security Researchers and Practitioners. Jingyi Shi, Yufeng Chen, Yang Xiao 0011, Yuekang Li, Zhengzi Xu | ASE | 2025 | AI / LLM for SE; Security / Privacy / Vulnerability; Human / Empirical / Socio-technical |
| Silent Taint-Style Vulnerability Fixes Identification. Zhongzhen Wen, Jiayuan Zhou, Minxue Pan, Shaohua Wang 0002, Xing Hu 0008 | ISSTA | 2024 | Security / Privacy / Vulnerability |
| PatchFinder: A Two-Phase Approach to Security Patch Tracing for Disclosed Vulnerabilities in Open-Source Software. Kaixuan Li 0002, Jian Zhang 0087, Sen Chen 0001, Han Liu 0012, Yang Liu 0003 | ISSTA | 2024 | Debugging / Fault Localization / Diagnosis / Repair; Security / Privacy / Vulnerability |
| Maltracker: A Fine-Grained NPM Malware Tracker Copiloted by LLM-Enhanced Dataset. Zeliang Yu, Ming Wen 0001, Xiaochen Guo, Hai Jin 0001 | ISSTA | 2024 | AI / LLM for SE; Security / Privacy / Vulnerability |
| Identifying Smart Contract Security Issues in Code Snippets from Stack Overflow. Jiachi Chen, Chong Chen 0002, Jiang Hu, John C. Grundy, Yanlin Wang 0001 | ISSTA | 2024 | Security / Privacy / Vulnerability |
| FunRedisp: Reordering Function Dispatch in Smart Contract to Reduce Invocation Gas Fees. Yunqi Liu, Wei Song 0003 | ISSTA | 2024 | Security / Privacy / Vulnerability |
| Following the "Thread": Toward Finding Manipulatable Bottlenecks in Blockchain Clients. Shuohan Wu, Zihao Li 0001, Hao Zhou 0043, Xiapu Luo, Jianfeng Li 0006 | ISSTA | 2024 | Security / Privacy / Vulnerability |
| FDI: Attack Neural Code Generation Systems through User Feedback Channel. Zhensu Sun, Xiaoning Du 0001, Xiapu Luo, Fu Song, David Lo 0001 | ISSTA | 2024 | AI / LLM for SE; Security / Privacy / Vulnerability |
| Empirical Study of Move Smart Contract Security: Introducing MoveScan for Enhanced Analysis. Shuwei Song, Jiachi Chen, Ting Chen 0002, Xiapu Luo, Teng Li | ISSTA | 2024 | Security / Privacy / Vulnerability; Human / Empirical / Socio-technical |
| CoSec: On-the-Fly Security Hardening of Code LLMs via Supervised Co-decoding. Dong Li 0009, Meng Yan 0001, Yaosheng Zhang, Zhongxin Liu 0002, Chao Liu 0014 | ISSTA | 2024 | Security / Privacy / Vulnerability |
| When Contracts Meets Crypto: Exploring Developers' Struggles with Ethereum Cryptographic APIs. Jiashuo Zhang 0001, Jiachi Chen, Zhiyuan Wan, Ting Chen 0002, Jianbo Gao 0003 | ICSE | 2024 | Security / Privacy / Vulnerability; Human / Empirical / Socio-technical |
| Strengthening Supply Chain Security with Fine-grained Safe Patch Identification. Changhua Luo, Wei Meng 0001, Shuai Wang 0011 | ICSE | 2024 | Debugging / Fault Localization / Diagnosis / Repair; Security / Privacy / Vulnerability |
| Smart Contract and DeFi Security Tools: Do They Meet the Needs of Practitioners? Stefanos Chaliasos, Marcos Antonios Charalambous, Liyi Zhou, Rafaila Galanopoulou, Arthur Gervais | ICSE | 2024 | Security / Privacy / Vulnerability |
| SCVHunter: Smart Contract Vulnerability Detection Based on Heterogeneous Graph Attention Network. Feng Luo, Ruijie Luo, Ting Chen 0002, Ao Qiao, Zheyuan He | ICSE | 2024 | Security / Privacy / Vulnerability |
| PrettySmart: Detecting Permission Re-delegation Vulnerability for Token Behaviors in Smart Contracts. Zhijie Zhong, Zibin Zheng, Hong-Ning Dai, Qing Xue, Junjia Chen | ICSE | 2024 | Security / Privacy / Vulnerability |
| MalwareTotal: Multi-Faceted and Sequence-Aware Bypass Tactics against Static Malware Detection. Shuai He, Cai Fu, Hong Hu 0004, Jiahe Chen, Jianqiang Lv | ICSE | 2024 | Security / Privacy / Vulnerability |
| MalCertain: Enhancing Deep Neural Network Based Android Malware Detection by Tackling Prediction Uncertainty. Haodong Li, Guosheng Xu 0001, Liu Wang 0002, Xusheng Xiao, Xiapu Luo | ICSE | 2024 | AI / LLM for SE; Security / Privacy / Vulnerability; Mobile / Web / GUI / Android |
| Improving Smart Contract Security with Contrastive Learning-based Vulnerability Detection. Yizhou Chen, Zeyu Sun 0004, Zhihao Gong, Dan Hao 0001 | ICSE | 2024 | AI / LLM for SE; Security / Privacy / Vulnerability |
| FlashSyn: Flash Loan Attack Synthesis via Counter Example Driven Approximation. Zhiyang Chen 0004, Sidi Mohamed Beillahi, Fan Long | ICSE | 2024 | Security / Privacy / Vulnerability |
| DocFlow: Extracting Taint Specifications from Software Documentation. Marcos Tileria, Jorge Blasco, Santanu Kumar Dash 0001 | ICSE | 2024 | Security / Privacy / Vulnerability |
| Are We There Yet? Unraveling the State-of-the-Art Smart Contract Fuzzers. Shuohan Wu, Zihao Li 0001, Luyi Yan, Weimin Chen, Muhui Jiang | ICSE | 2024 | Security / Privacy / Vulnerability |
| An Empirical Study on Oculus Virtual Reality Applications: Security and Privacy Perspectives. Hanyang Guo, Hong-Ning Dai, Xiapu Luo, Zibin Zheng, Gengyang Xu | ICSE | 2024 | Security / Privacy / Vulnerability; Human / Empirical / Socio-technical |
| A User-centered Security Evaluation of Copilot. Owura Asare, Meiyappan Nagappan, N. Asokan | ICSE | 2024 | Security / Privacy / Vulnerability |
| A Comprehensive Study of Learning-based Android Malware Detectors under Challenging Environments. Cuiying Gao, Gaozhun Huang, Heng Li 0008, Bang Wu 0003, Yueming Wu 0001 | ICSE | 2024 | AI / LLM for SE; Security / Privacy / Vulnerability; Human / Empirical / Socio-technical; Mobile / Web / GUI / Android |
| Your Code Secret Belongs to Me: Neural Code Completion Tools Can Memorize Hard-Coded Credentials. Yizhan Huang; Yichen Li 0003; Weibin Wu 0002; Jianping Zhang 0002; Michael R. Lyu | FSE | 2024 | AI / LLM for SE; Security / Privacy / Vulnerability |
| Towards Efficient Verification of Constant-Time Cryptographic Implementations. Luwei Cai; Fu Song; Taolue Chen 0001 | FSE | 2024 | Program Analysis / Verification / Formal Methods; Security / Privacy / Vulnerability |
| Static Application Security Testing (SAST) Tools for Smart Contracts: How Far Are We? Kaixuan Li 0002; Yue Xue; Sen Chen 0001; Han Liu 0012; Kairan Sun; Ming Hu 0003; Haijun Wang 0002; Yang Liu 0003; Yixiang Chen 0001 | FSE | 2024 | Testing / QA; Security / Privacy / Vulnerability |
| Investigating Documented Privacy Changes in Android OS. Chuan Yan; Mark Huasong Meng; Fuman Xie; Guangdong Bai | FSE | 2024 | Security / Privacy / Vulnerability; Maintenance / Evolution / Refactoring / Review; Mobile / Web / GUI / Android |
| Component Security Ten Years Later: An Empirical Study of Cross-Layer Threats in Real-World Mobile Applications. Keke Lian; Lei Zhang 0096; Guangliang Yang 0001; Shuo Mao; Xinjie Wang; Yuan Zhang 0009; Min Yang 0002 | FSE | 2024 | Security / Privacy / Vulnerability; Human / Empirical / Socio-technical; Mobile / Web / GUI / Android |
| Unveiling the Characteristics and Impact of Security Patch Evolution. Zifan Xie, Ming Wen 0001, Zichao Wei, Hai Jin 0001 | ASE | 2024 | Debugging / Fault Localization / Diagnosis / Repair; Security / Privacy / Vulnerability; Maintenance / Evolution / Refactoring / Review |
| Oracle-Guided Vulnerability Diversity and Exploit Synthesis of Smart Contracts Using LLMs. Mojtaba Eshghie, Cyrille Artho | ASE | 2024 | Testing / QA; Security / Privacy / Vulnerability |
| OpenTracer: A Dynamic Transaction Trace Analyzer for Smart Contract Invariant Generation and Beyond. Zhiyang Chen 0004, Ye Liu 0012, Sidi Mohamed Beillahi, Yi Li 0008, Fan Long | ASE | 2024 | Program Analysis / Verification / Formal Methods; Security / Privacy / Vulnerability |
| MiniChecker: Detecting Data Privacy Risk of Abusive Permission Request Behavior in Mini-Programs. Yin Wang, Ming Fan 0002, Hao Zhou 0043, Haijun Wang 0002, Wuxia Jin | ASE | 2024 | Security / Privacy / Vulnerability |
| MaskDroid: Robust Android Malware Detection with Masked Graph Representations. Jingnan Zheng, Jiahao Liu 0005, An Zhang 0003, Jun Zeng 0006, Ziqi Yang | ASE | 2024 | Security / Privacy / Vulnerability; Mobile / Web / GUI / Android; Performance / Energy / Reliability |
| Magneto: A Step-Wise Approach to Exploit Vulnerabilities in Dependent Libraries via LLM-Empowered Directed Fuzzing. Zhuotong Zhou, Yongzhuo Yang, Susheng Wu, Yiheng Huang, Bihuan Chen 0001 | ASE | 2024 | Testing / QA; AI / LLM for SE; Security / Privacy / Vulnerability |
| From Logging to Leakage: A Study of Privacy Leakage in Android App Logs. Zhiyuan Chen, Soham Sanjay Deo, Poorna Chander Reddy Puttaparthi, Yiming Tang 0002, Xueling Zhang | ASE | 2024 | Security / Privacy / Vulnerability; Human / Empirical / Socio-technical; Mobile / Web / GUI / Android; Cloud / Microservices / Distributed Systems |
| Exploring ChatGPT App Ecosystem: Distribution, Deployment and Security. Chuan Yan, Ruomai Ren, Mark Huasong Meng, Liuhuo Wan, Tian Yang Ooi | ASE | 2024 | AI / LLM for SE; Security / Privacy / Vulnerability; DevOps / CI / Build / Release; Mobile / Web / GUI / Android |
| Compositional Security Analysis of Dynamic Component-based Systems. Narges Khakpour, Charilaos Skandylas | ASE | 2024 | Security / Privacy / Vulnerability |
| CompAi: A Tool for GDPR Completeness Checking of Privacy Policies using Artificial Intelligence. Orlando Amaral Cejas, Sallam Abualhaija, Lionel C. Briand | ASE | 2024 | Security / Privacy / Vulnerability |
| Cloud Resource Protection via Automated Security Property Reasoning. Zhixing Xu, Shengjian Guo, Oksana Tkachuk, Saeed Nejati, Niloofar Razavi | ASE | 2024 | Security / Privacy / Vulnerability; Cloud / Microservices / Distributed Systems; Performance / Energy / Reliability |
| Android Malware Family Labeling: Perspectives from the Industry. Liu Wang 0002, Haoyu Wang 0001, Tao Zhang 0001, Haitao Xu 0002, Guozhu Meng | ASE | 2024 | Security / Privacy / Vulnerability; Mobile / Web / GUI / Android |
| AdvSCanner: Generating Adversarial Smart Contracts to Exploit Reentrancy Vulnerabilities Using LLM and Static Analysis. Yin Wu, Xiaofei Xie, Chenyang Peng, Dijun Liu, Hao Wu 0100 | ASE | 2024 | AI / LLM for SE; Program Analysis / Verification / Formal Methods; Security / Privacy / Vulnerability |
| A Comprehensive Study of Privacy Leakage Vulnerability in Android App Logs. Zhiyuan Chen | ASE | 2024 | Security / Privacy / Vulnerability; Human / Empirical / Socio-technical; Mobile / Web / GUI / Android; Cloud / Microservices / Distributed Systems |
| iSyn: Semi-automated Smart Contract Synthesis from Legal Financial Agreements. Pengcheng Fang, Zhenhua Zou, Xusheng Xiao, Zhuotao Liu | ISSTA | 2023 | Security / Privacy / Vulnerability |
| Toward Automated Detecting Unanticipated Price Feed in Smart Contract. Yifan Mo, Jiachi Chen, Yanlin Wang 0001, Zibin Zheng | ISSTA | 2023 | Security / Privacy / Vulnerability |
| Security Checking of Trigger-Action-Programming Smart Home Integrations. Lei Bu, Qiuping Zhang, Suwan Li, Jinglin Dai, Guangdong Bai | ISSTA | 2023 | Security / Privacy / Vulnerability |
| ItyFuzz: Snapshot-Based Fuzzer for Smart Contract. Chaofan Shou, Shangyin Tan, Koushik Sen | ISSTA | 2023 | Security / Privacy / Vulnerability |
| How Effective Are Neural Networks for Fixing Security Vulnerabilities. Yi Wu 0023, Nan Jiang 0012, Hung Viet Pham, Thibaud Lutellier, Jordan Davis | ISSTA | 2023 | AI / LLM for SE; Security / Privacy / Vulnerability |
| Guided Retraining to Enhance the Detection of Difficult Android Malware. Nadia Daoudi, Kevin Allix, Tegawendé F. Bissyandé, Jacques Klein | ISSTA | 2023 | Security / Privacy / Vulnerability; Mobile / Web / GUI / Android |
| Beyond "Protected" and "Private": An Empirical Security Analysis of Custom Function Modifiers in Smart Contracts. Yuzhou Fang, Daoyuan Wu, Xiao Yi, Shuai Wang 0011, Yufan Chen | ISSTA | 2023 | Security / Privacy / Vulnerability; Human / Empirical / Socio-technical |
| Beware of the Unexpected: Bimodal Taint Analysis. Yiu Wai Chow, Max Schäfer, Michael Pradel | ISSTA | 2023 | Security / Privacy / Vulnerability |
| Automated Generation of Security-Centric Descriptions for Smart Contract Bytecode. Yu Pan, Zhichao Xu 0001, Levi Taiji Li, Yunhe Yang, Mu Zhang 0001 | ISSTA | 2023 | Security / Privacy / Vulnerability |
| API2Vec: Learning Representations of API Sequences for Malware Detection. Lei Cui 0003, Jiancong Cui, Yuede Ji, Zhiyu Hao, Lun Li | ISSTA | 2023 | Security / Privacy / Vulnerability |
| Taintmini: Detecting Flow of Sensitive Data in Mini-Programs with Static Taint Analysis. Chao Wang 0113, Ronny Ko, Yue Zhang 0025, Yuqing Yang 0003, Zhiqiang Lin 0001 | ICSE | 2023 | Security / Privacy / Vulnerability |
| SecBench.js: An Executable Security Benchmark Suite for Server-Side JavaScript. Masudul Hasan Masud Bhuiyan, Adithya Srinivas Parthasarathy, Nikos Vasilakis, Michael Pradel, Cristian-Alexandru Staicu | ICSE | 2023 | Security / Privacy / Vulnerability |
| PTPDroid: Detecting Violated User Privacy Disclosures to Third-Parties of Android Apps. Zeya Tan, Wei Song 0003 | ICSE | 2023 | Security / Privacy / Vulnerability; Mobile / Web / GUI / Android |
| On-Demand Security Requirements Synthesis with Relational Generative Adversarial Networks. Viktoria Koscinski, Sara Hashemi, Mehdi Mirakhorli | ICSE | 2023 | AI / LLM for SE; Security / Privacy / Vulnerability; Requirements / Modeling / Architecture |
| On Privacy Weaknesses and Vulnerabilities in Software Systems. Pattaraporn Sangaroonsilp, Hoa Khanh Dam, Aditya Ghose | ICSE | 2023 | Security / Privacy / Vulnerability |
| MirrorTaint: Practical Non-intrusive Dynamic Taint Tracking for JVM-based Microservice Systems. Yicheng Ouyang, Kailai Shao, Kunqiu Chen, Ruobing Shen, Chao Chen | ICSE | 2023 | Security / Privacy / Vulnerability; Cloud / Microservices / Distributed Systems |
| Keyword Extraction From Specification Documents for Planning Security Mechanisms. Jeffy Jahfar Poozhithara, Hazeline U. Asuncion, Brent Lagesse | ICSE | 2023 | Program Analysis / Verification / Formal Methods; Security / Privacy / Vulnerability |
| Demystifying Privacy Policy of Third-Party Libraries in Mobile Apps. Kaifa Zhao, Xian Zhan, Le Yu 0002, Shiyao Zhou, Hao Zhou 0043 | ICSE | 2023 | Security / Privacy / Vulnerability; Mobile / Web / GUI / Android |
| Bad Snakes: Understanding and Improving Python Package Index Malware Scanning. Duc-Ly Vu, Zachary Newman, John Speed Meyers | ICSE | 2023 | Security / Privacy / Vulnerability |
| AChecker: Statically Detecting Smart Contract Access Control Vulnerabilities. Asem Ghaleb, Julia Rubin, Karthik Pattabiraman | ICSE | 2023 | Security / Privacy / Vulnerability |
| llvm2CryptoLine: Verifying Arithmetic in Cryptographic C Programs. Ruiling Chen, Jiaxiang Liu 0001, Xiaomu Shi, Ming-Hsien Tsai 0001, Bow-Yaw Wang | FSE | 2023 | Security / Privacy / Vulnerability |
| ViaLin: Path-Aware Dynamic Taint Analysis for Android. Khaled Ahmed 0004, Yingying Wang, Mieszko Lis, Julia Rubin | FSE | 2023 | Security / Privacy / Vulnerability; Mobile / Web / GUI / Android |
| Understanding Hackers' Work: An Empirical Study of Offensive Security Practitioners. Andreas Happe, Jürgen Cito | FSE | 2023 | Security / Privacy / Vulnerability; Human / Empirical / Socio-technical |
| Privacy-Centric Log Parsing for Timely, Proactive Personal Data Protection. Issam Sedki | FSE | 2023 | Security / Privacy / Vulnerability |
| Mate! Are You Really Aware? An Explainability-Guided Testing Framework for Robustness of Malware Detectors. Ruoxi Sun 0001, Minhui Xue 0001, Gareth Tyson, Tian Dong, Shaofeng Li 0001 | FSE | 2023 | Testing / QA; Security / Privacy / Vulnerability |
| Input-Driven Dynamic Program Debloating for Code-Reuse Attack Mitigation. Xiaoke Wang, Tao Hui, Lei Zhao 0012, Yueqiang Cheng | FSE | 2023 | Security / Privacy / Vulnerability |
| DeepRover: A Query-Efficient Blackbox Attack for Deep Neural Networks. Fuyuan Zhang, Xinwen Hu, Lei Ma 0003, Jianjun Zhao 0001 | FSE | 2023 | AI / LLM for SE; Security / Privacy / Vulnerability |
| DeepInfer: Deep Type Inference from Smart Contract Bytecode. Kunsong Zhao, Zihao Li 0001, Jianfeng Li 0006, He Ye, Xiapu Luo | FSE | 2023 | Program Analysis / Verification / Formal Methods; Security / Privacy / Vulnerability |
| Compositional Taint Analysis for Enforcing Security Policies at Scale. Subarno Banerjee, Siwei Cui, Michael Emmi, Antonio Filieri, Liana Hadarean | FSE | 2023 | Security / Privacy / Vulnerability |
| Comparison and Evaluation on Static Application Security Testing (SAST) Tools for Java. Kaixuan Li 0002, Sen Chen 0001, Lingling Fan 0003, Ruitao Feng, Han Liu 0012 | FSE | 2023 | Testing / QA; Security / Privacy / Vulnerability |
| An Extensive Study on Adversarial Attack against Pre-trained Models of Code. Xiaohu Du, Ming Wen 0001, Zichao Wei, Shangwen Wang, Hai Jin 0001 | FSE | 2023 | Security / Privacy / Vulnerability; Human / Empirical / Socio-technical |
| SCPatcher: Mining Crowd Security Discussions to Enrich Secure Coding Practices. Ziyou Jiang, Lin Shi 0006, Guowei Yang 0001, Qing Wang 0001 | ASE | 2023 | Security / Privacy / Vulnerability; Human / Empirical / Socio-technical |
| Merge-Replay: Efficient IFDS-Based Taint Analysis by Consolidating Equivalent Value Flows. Yujiang Gui, Dongjie He, Jingling Xue | ASE | 2023 | Security / Privacy / Vulnerability |
| MUTEN: Mutant-Based Ensembles for Boosting Gradient-Based Adversarial Attack. Qiang Hu, Yuejun Guo 0001, Maxime Cordy, Mike Papadakis, Yves Le Traon | ASE | 2023 | Security / Privacy / Vulnerability |
| Fine-Grained In-Context Permission Classification for Android Apps Using Control-Flow Graph Embedding. Vikas Kumar Malviya, Yan Naing Tun, Chee Wei Leow, Ailys Tee Xynyn, Lwin Khin Shar | ASE | 2023 | AI / LLM for SE; Security / Privacy / Vulnerability; Mobile / Web / GUI / Android |
| Enhancing Malware Detection for Android Apps: Detecting Fine-Granularity Malicious Components. Zhijie Liu, Liang Feng Zhang, Yutian Tang | ASE | 2023 | Security / Privacy / Vulnerability; Mobile / Web / GUI / Android |
| ConfTainter: Static Taint Analysis For Configuration Options. Teng Wang 0004, Haochen He, Xiaodong Liu 0004, Shanshan Li 0001, Zhouyang Jia | ASE | 2023 | Security / Privacy / Vulnerability; DevOps / CI / Build / Release |
| Coding and Debugging by Separating Secret Code Toward Secure Remote Development. Shinobu Saito | ASE | 2023 | Debugging / Fault Localization / Diagnosis / Repair; Security / Privacy / Vulnerability |
| PermDroid: automatically testing permission-related behaviour of Android applications. Shuaihao Yang, Zigang Zeng, Wei Song 0003 | ISSTA | 2022 | Testing / QA; Security / Privacy / Vulnerability; Mobile / Web / GUI / Android |
| Park: accelerating smart contract vulnerability detection via parallel-fork symbolic execution. Peilin Zheng, Zibin Zheng, Xiapu Luo | ISSTA | 2022 | Program Analysis / Verification / Formal Methods; Security / Privacy / Vulnerability |
| Finding permission bugs in smart contracts with role mining. Ye Liu 0012, Yi Li 0008, Shang-Wei Lin 0001, Cyrille Artho | ISSTA | 2022 | Security / Privacy / Vulnerability |
| Rotten Apples Spoil the Bunch: An Anatomy of Google Play Malware. Michael Cao, Khaled Ahmed 0004, Julia Rubin | ICSE | 2022 | Security / Privacy / Vulnerability |
| Natural Attack for Pre-trained Models of Code. Zhou Yang 0003, Jieke Shi, Junda He, David Lo 0001 | ICSE | 2022 | Security / Privacy / Vulnerability |
| Large-scale Security Measurements on the Android Firmware Ecosystem. Qinsheng Hou, Wenrui Diao, Yanhao Wang, Xiaofeng Liu 0013, Song Liu | ICSE | 2022 | Security / Privacy / Vulnerability; Mobile / Web / GUI / Android |
| Analyzing User Perspectives on Mobile App Privacy at Scale. Preksha Nema, Pauline Anthonysamy, Nina Taft, Sai Teja Peddinti | ICSE | 2022 | Security / Privacy / Vulnerability; Mobile / Web / GUI / Android |
| APER: Evolution-Aware Runtime Permission Misuse Detection for Android Apps. Sinan Wang, Yibo Wang 0006, Xian Zhan, Ying Wang 0038, Yepang Liu 0001 | ICSE | 2022 | Security / Privacy / Vulnerability; Maintenance / Evolution / Refactoring / Review; Mobile / Web / GUI / Android |
| A Grounded Theory Based Approach to Characterize Software Attack Surfaces. Sara Moshtari, Ahmet Okutan, Mehdi Mirakhorli | ICSE | 2022 | Security / Privacy / Vulnerability |
| Software security during modern code review: the developer's perspective. Larissa Braz, Alberto Bacchelli | FSE | 2022 | Security / Privacy / Vulnerability; Human / Empirical / Socio-technical; Maintenance / Evolution / Refactoring / Review |
| Security code smells in apps: are we getting better? Steven Arzt | FSE | 2022 | Security / Privacy / Vulnerability; Mobile / Web / GUI / Android |
| MANDO-GURU: vulnerability detection for smart contract source code by heterogeneous graph embeddings. Hoang H. Nguyen, Nhat-Minh Nguyen, Hong-Phuc Doan, Zahra Ahmadi, Thanh-Nam Doan | FSE | 2022 | Security / Privacy / Vulnerability |
| Input splitting for cloud-based static application security testing platforms. Maria Christakis, Thomas Cottenier, Antonio Filieri, Linghui Luo, Muhammad Numair Mansur | FSE | 2022 | Testing / QA; Security / Privacy / Vulnerability; Cloud / Microservices / Distributed Systems |
| Cross-language Android permission specification. Chaoran Li, Xiao Chen 0002, Ruoxi Sun 0001, Minhui Xue 0001, Sheng Wen | FSE | 2022 | Program Analysis / Verification / Formal Methods; Security / Privacy / Vulnerability; Mobile / Web / GUI / Android |
| An empirical study of blockchain system vulnerabilities: modules, types, and patterns. Xiao Yi, Daoyuan Wu, Lingxiao Jiang, Yuzhou Fang, Kehuan Zhang | FSE | 2022 | Security / Privacy / Vulnerability; Human / Empirical / Socio-technical |
| V-Achilles: An Interactive Visualization of Transitive Security Vulnerabilities. Vipawan Jarukitpipat, Klinton Chhun, Wachirayana Wanprasert, Chaiyong Ragkhitwetsagul, Morakot Choetkiertikul | ASE | 2022 | Security / Privacy / Vulnerability |
| Unsupervised Summarization of Privacy Concerns in Mobile Application Reviews. Fahimeh Ebrahimi, Anas Mahmoud 0001 | ASE | 2022 | Security / Privacy / Vulnerability; Mobile / Web / GUI / Android |
| Towards Effective Static Analysis Approaches for Security Vulnerabilities in Smart Contracts. Asem Ghaleb | ASE | 2022 | Program Analysis / Verification / Formal Methods; Security / Privacy / Vulnerability |
| Simulating cyber security management: A gamified approach to executive decision making. Adam Tonkin, William Kosasih, Marthie Grobler, Mehwish Nasim | ASE | 2022 | Security / Privacy / Vulnerability |
| Scrutinizing Privacy Policy Compliance of Virtual Personal Assistant Apps. Fuman Xie, Yanjun Zhang, Chuan Yan, Suwan Li, Lei Bu | ASE | 2022 | Security / Privacy / Vulnerability; Mobile / Web / GUI / Android |
| Right to Know, Right to Refuse: Towards UI Perception-Based Automated Fine-Grained Permission Controls for Android Apps. Vikas Kumar Malviya, Chee Wei Leow, Ashok Kasthuri, Yan Naing Tun, Lwin Khin Shar | ASE | 2022 | Security / Privacy / Vulnerability; Human / Empirical / Socio-technical; Mobile / Web / GUI / Android |
| Privacy Analysis of Period Tracking Mobile Apps in the Post-Roe v. Wade Era. Zikan Dong, Liu Wang 0002, Hao Xie, Guoai Xu, Haoyu Wang 0001 | ASE | 2022 | Security / Privacy / Vulnerability; Mobile / Web / GUI / Android |
| MalWhiteout: Reducing Label Errors in Android Malware Detection. Liu Wang 0002, Haoyu Wang 0001, Xiapu Luo, Yulei Sui | ASE | 2022 | Security / Privacy / Vulnerability; Mobile / Web / GUI / Android |
| Leveraging Practitioners' Feedback to Improve a Security Linter. Sofia Reis, Rui Abreu 0001, Marcelo d'Amorim, Daniel Fortunato | ASE | 2022 | Security / Privacy / Vulnerability |
| Identifying Solidity Smart Contract API Documentation Errors. Chenguang Zhu 0002, Ye Liu 0012, Xiuheng Wu, Yi Li 0008 | ASE | 2022 | Security / Privacy / Vulnerability |
| GLITCH: Automated Polyglot Security Smell Detection in Infrastructure as Code. Nuno Saavedra, João F. Ferreira 0001 | ASE | 2022 | Security / Privacy / Vulnerability |
| Enhancing the security of gaming transactions using blockchain technology. Ciprian Paduraru, Rares Cristea, Alin Stefanescu | ASE | 2022 | Security / Privacy / Vulnerability |
| Automatic Software Timing Attack Evaluation & Mitigation on Clear Hardware Assumption. Prabuddha Chakraborty | ASE | 2022 | Security / Privacy / Vulnerability |
| Automated Identification of Security-Relevant Configuration Settings Using NLP. Patrick Stöckle, Theresa Wasserer, Bernd Grobauer, Alexander Pretschner | ASE | 2022 | Security / Privacy / Vulnerability; DevOps / CI / Build / Release |
| Augur: Dynamic Taint Analysis for Asynchronous JavaScript. Mark W. Aldrich, Alexi Turcotte, Matthew Blanco, Frank Tip | ASE | 2022 | Security / Privacy / Vulnerability |
| Are they Toeing the Line? Diagnosing Privacy Compliance Violations among Browser Extensions. Yuxi Ling, Kailong Wang 0001, Guangdong Bai, Haoyu Wang 0001, Jin Song Dong 0001 | ASE | 2022 | Security / Privacy / Vulnerability; Mobile / Web / GUI / Android |
| An Empirical Study of Automation in Software Security Patch Management. Nesara Dissanayake, Asangi Jayatilaka, Mansooreh Zahedi, Muhammad Ali Babar 0001 | ASE | 2022 | Debugging / Fault Localization / Diagnosis / Repair; Security / Privacy / Vulnerability; Human / Empirical / Socio-technical |
| AUSERA: Automated Security Vulnerability Detection for Android Apps. Sen Chen 0001, Yuxin Zhang, Lingling Fan 0003, Jiaming Li 0013, Yang Liu 0003 | ASE | 2022 | Security / Privacy / Vulnerability; Mobile / Web / GUI / Android |
| ASTOR: An Approach to Identify Security Code Reviews. Rajshakhar Paul | ASE | 2022 | Security / Privacy / Vulnerability |
| A Study of User Privacy in Android Mobile AR Apps. Xiaoyi Yang, Xueling Zhang | ASE | 2022 | Security / Privacy / Vulnerability; Human / Empirical / Socio-technical; Mobile / Web / GUI / Android |
| echidna-parade: a tool for diverse multicore smart contract fuzzing. Alex Groce, Gustavo Grieco | ISSTA | 2021 | Testing / QA; Security / Privacy / Vulnerability |
| The impact of tool configuration spaces on the evaluation of configurable taint analysis for Android. Austin Mordahl, Shiyi Wei | ISSTA | 2021 | Security / Privacy / Vulnerability; DevOps / CI / Build / Release; Mobile / Web / GUI / Android |
| Modular call graph construction for security scanning of Node.js applications. Benjamin Barslev Nielsen, Martin Toldam Torp, Anders Møller | ISSTA | 2021 | Security / Privacy / Vulnerability |
| Identifying privacy weaknesses from multi-party trigger-action integration platforms. Kulani Mahadewa, Yanjun Zhang, Guangdong Bai, Lei Bu, Zhiqiang Zuo 0002 | ISSTA | 2021 | Security / Privacy / Vulnerability |
| HomDroid: detecting Android covert malware by social-network homophily analysis. Yueming Wu 0001, Deqing Zou, Wei Yang 0013, Xiang Li, Hai Jin 0001 | ISSTA | 2021 | Security / Privacy / Vulnerability; Mobile / Web / GUI / Android |
| Empirical evaluation of smart contract testing: what is the best choice? Meng Ren, Zijing Yin, Fuchen Ma, Zhenyang Xu, Yu Jiang 0001 | ISSTA | 2021 | Testing / QA; Security / Privacy / Vulnerability; Human / Empirical / Socio-technical |
| Attack as defense: characterizing adversarial examples using robustness. Zhe Zhao 0007, Guangke Chen, Jingyi Wang 0004, Yiwei Yang 0002, Fu Song | ISSTA | 2021 | Security / Privacy / Vulnerability |
| AdvDoor: adversarial backdoor attack of deep learning system. Quan Zhang 0003, Yifeng Ding, Yongqiang Tian 0001, Jianmin Guo, Min Yuan | ISSTA | 2021 | AI / LLM for SE; Security / Privacy / Vulnerability |
| Why Security Defects Go Unnoticed during Code Reviews? A Case-Control Study of the Chromium OS Project. Rajshakhar Paul, Asif Kamal Turzo, Amiangshu Bosu | ICSE | 2021 | Security / Privacy / Vulnerability; Human / Empirical / Socio-technical |
| Too Quiet in the Library: An Empirical Study of Security Updates in Android Apps' Native Code. Sumaya Almanee, Arda Ünal, Mathias Payer, Joshua Garcia | ICSE | 2021 | Security / Privacy / Vulnerability; Human / Empirical / Socio-technical; Mobile / Web / GUI / Android |
| Technical Leverage in a Software Ecosystem: Development Opportunities and Security Risks. Fabio Massacci, Ivan Pashchenko | ICSE | 2021 | Security / Privacy / Vulnerability |
| Smart Contract Security: a Practitioners' Perspective. Zhiyuan Wan, Xin Xia 0001, David Lo 0001, Jiachi Chen, Xiapu Luo | ICSE | 2021 | Security / Privacy / Vulnerability |
| DeepPayload: Black-box Backdoor Attack on Deep Learning Models through Neural Payload Injection. Yuanchun Li 0003, Jiayi Hua, Haoyu Wang 0001, Chunyang Chen 0001, Yunxin Liu 0001 | ICSE | 2021 | AI / LLM for SE; Security / Privacy / Vulnerability |
| Containing Malicious Package Updates in npm with a Lightweight Permission System. Gabriel Ferreira, Limin Jia 0001, Joshua Sunshine, Christian Kästner | ICSE | 2021 | Security / Privacy / Vulnerability |
| App's Auto-Login Function Security Testing via Android OS-Level Virtualization. Wenna Song, Jiang Ming 0002, Lin Jiang, Han Yan, Yi Xiang | ICSE | 2021 | Testing / QA; Security / Privacy / Vulnerability; Mobile / Web / GUI / Android |
| The gas triangle and its challenges to the development of blockchain-powered applications. Gustavo Ansaldi Oliva, Ahmed E. Hassan | FSE | 2021 | Security / Privacy / Vulnerability |
| TaintStream: fine-grained taint tracking for big data platforms through dynamic code translation. Chengxu Yang, Yuanchun Li 0003, Mengwei Xu 0001, Zhenpeng Chen, Yunxin Liu 0001 | FSE | 2021 | Security / Privacy / Vulnerability |
| Security guarantees for automated software testing. Danushka Liyanage | FSE | 2021 | Testing / QA; Security / Privacy / Vulnerability |
| Multi-location cryptographic code repair with neural-network-based methodologies. Ya Xiao 0002 | FSE | 2021 | AI / LLM for SE; Debugging / Fault Localization / Diagnosis / Repair; Security / Privacy / Vulnerability |
| Mitigating security attacks in kubernetes manifests for security best practices violation. Shazibul Islam Shamim | FSE | 2021 | Security / Privacy / Vulnerability; Cloud / Microservices / Distributed Systems |
| Making smart contract development more secure and easier. Meng Ren, Fuchen Ma, Zijing Yin, Ying Fu, Huizhong Li | FSE | 2021 | Security / Privacy / Vulnerability |
| Infiltrating security into development: exploring the world's largest software security study. Charles Weir, Sammy Migues, Mike Ware, Laurie A. Williams | FSE | 2021 | Security / Privacy / Vulnerability; Human / Empirical / Socio-technical |
| Improving the effectiveness of peer code review in identifying security defects. Rajshakhar Paul | FSE | 2021 | Security / Privacy / Vulnerability; Maintenance / Evolution / Refactoring / Review |
| Exploit those code reviews! bigger data for deeper learning. Robert Heumüller, Sebastian Nielebock 0001, Frank Ortmeier | FSE | 2021 | Security / Privacy / Vulnerability |
| Algebraic-datatype taint tracking, with applications to understanding Android identifier leaks. Sydur Rahaman, Iulian Neamtiu, Xin Yin | FSE | 2021 | Security / Privacy / Vulnerability; Mobile / Web / GUI / Android |
| A grounded theory of the role of coordination in software security patch management. Nesara Dissanayake, Mansooreh Zahedi, Asangi Jayatilaka, Muhammad Ali Babar 0001 | FSE | 2021 | Debugging / Fault Localization / Diagnosis / Repair; Security / Privacy / Vulnerability |
| A comprehensive study on learning-based PE malware family classification methods. Yixuan Ma, Shuang Liu 0007, Jiajun Jiang, Guanhong Chen, Keqiu Li | FSE | 2021 | AI / LLM for SE; Security / Privacy / Vulnerability; Human / Empirical / Socio-technical |
| SMARTIAN: Enhancing Smart Contract Fuzzing with Static and Dynamic Data-Flow Analyses. Jaeseung Choi 0002, Doyeon Kim, Soomin Kim 0002, Gustavo Grieco, Alex Groce | ASE | 2021 | Testing / QA; Security / Privacy / Vulnerability |
| Quality analysis of mobile applications with special focus on security aspects. Kristiina Rahkema | ASE | 2021 | Security / Privacy / Vulnerability; Mobile / Web / GUI / Android |
| Privacy as first-class requirements in software development: A socio-technical approach. Yizhaq Benbenisty, Irit Hadar, Gil Luria, Paola Spoletini | ASE | 2021 | Security / Privacy / Vulnerability; Requirements / Modeling / Architecture |
| Finding the Missing Piece: Permission Specification Analysis for Android NDK. Hao Zhou 0043, Haoyu Wang 0001, Shuohan Wu, Xiapu Luo, Yajin Zhou | ASE | 2021 | Program Analysis / Verification / Formal Methods; Security / Privacy / Vulnerability; Mobile / Web / GUI / Android |
| CorbFuzz: Checking Browser Security Policies with Fuzzing. Chaofan Shou, Ismet Burak Kadron, Qi Su, Tevfik Bultan | ASE | 2021 | Testing / QA; Security / Privacy / Vulnerability; Mobile / Web / GUI / Android |
| Automating User Notice Generation for Smart Contract Functions. Xing Hu 0008, Zhipeng Gao 0002, Xin Xia 0001, David Lo 0001, Xiaohu Yang 0001 | ASE | 2021 | Security / Privacy / Vulnerability |
| An Automated Pipeline for Privacy Leak Analysis of Android Applications. Yifan Zhou | ASE | 2021 | Security / Privacy / Vulnerability; DevOps / CI / Build / Release; Mobile / Web / GUI / Android |