… In order to solve these problems, in our previous work (Wang et al., 2019c), we propose
an automatic method to detect apps with SSL/TLS certificate verification vulnerabilities. It …

… of SSLINT has similar performance in terms of detecting SSL/TLS API misuses compared with
[1] and can be used … We use the constructed ground truth dataset to evaluate SAMBA and …

… [44] demonstrated that several widely used applications … SSL/TLS version acceptance and
TLS parameter mapping/mirroring, we alter the Apache web server’s configuration. We use a …

… To facilitate further research, we will share our code with vetted researchers upon … If SSO
was used, our system also checks for information that the web app might have pulled from the …

… in SSL library usages. Our tool is evaluated on 9 real-world widely used SSL applications. …
[5] proposed SSLINT to find the improper usages by matching a program dependence graph…

… SSL verification. This is discouraged, and developers are recommended to use the default
SSL … Zhang, “Vetting SSL Usage in Applications with SSLINT,” in 2015 IEEE Symposium on …

… Therefore, we also build an application which incorporates our test cases to test this API.
Our … Furthermore, it can benefit industry standards of secure use of SSL/TLS, eg, NIST.SP.800-…

… We find many developers use these libraries to implement their service provider applications
… identify incorrect API usage for SSL. Egele et al. [44] studied cryptographic API misuse and …

… We find many developers use these libraries to implement their service provider applications
… identify incorrect API usage for SSL. Egele et al. [44] studied cryptographic API misuse and …

… decompiled code of Android apps to detect potential vulnerabilities related to SSL. It uses …
the validity of SSL certificates for all extracted HTTPS hosts, and iii) identify apps that validate …