… require expert-level domain knowledge and cannot be applied for general asynchronous
apps. Researchers have also used symbolic execution to verify web applications (eg, [12…

… Zhang, “Vetting ssl usage in applications with sslint,” in 2015 IEEE Symposium on
Security and Privacy, May 2015, pp. 519–534. [6] “PMD Tool,” https://pmd.github.io/pmd-5.8.1/index.…

… an app to get Smali code and search the code to locate the SSL/… We use the results of
static analysis on the app to guide the … An automatically vetting mechanism for SSL error-handling …

… In order to solve these problems, in our previous work (Wang et al., 2019c), we propose
an automatic method to detect apps with SSL/TLS certificate verification vulnerabilities. It …

… application and obtaining the call graph, we supplied our tool with the Hypothesis to test the
implementation of SSL within this application. … in this paper, SSLINT considers the data flows …

… modeling the correct logic usage of SSL APIs. Although SSLINT is capable of detecting …
bugs in OpenSSL implementation and 15 applications in Ubuntu which use SSL APIs, out of …

… use HVLearn to analyze the hostname verification implementations in a number of popular
SSL/TLS libraries and applications … SSL/TLS family of protocols are the most commonly used …

… on the usage of OAuth APIs in Android applications and … apps which have more than 10
millions of downloads. The evaluation shows that 101 (32%) out of 316 applications that use …

… IdP apps (Facebook, Google and Sina) and their corresponding SDKs widely used by the …
cation, which can be either manually speci ed (eg, SSLint [65]), extracted from code [19] or …

… of SSLINT has similar performance in terms of detecting SSL/TLS API misuses compared with
[1] and can be used … We use the constructed ground truth dataset to evaluate SAMBA and …