{PolyCruise}: A {Cross-Language} dynamic information flow analysis

W Li, J Ming, X Luo, H Cai - 31st USENIX Security Symposium (USENIX …, 2022 - usenix.org
Despite the fact that most real-world software systems today are written in multiple
programming languages, existing program analysis based security techniques are still …

MiniTracker: Large-Scale Sensitive Information Tracking in Mini Apps

W Li, B Yang, H Ye, L Xiang, Q Tao… - … on Dependable and …, 2023 - ieeexplore.ieee.org
Running on host mobile applications, mini apps have gained increasing popularity these
days for its convenience in installation and usage. However, being easy to use allows mini …

Broadening horizons of multilingual static analysis: Semantic summary extraction from C code for JNI program analysis

S Lee, H Lee, S Ryu - Proceedings of the 35th IEEE/ACM International …, 2020 - dl.acm.org
Most programming languages support foreign language interoperation that allows
developers to integrate multiple modules implemented in different languages into a single …

Declarative static analysis for multilingual programs using CodeQL

D Youn, S Lee, S Ryu - Software: Practice and Experience, 2023 - Wiley Online Library
Declarative static program analysis has become one of the widely‐used program analysis
techniques. Declarative static analyzers perform three steps: creating databases of facts …

Bilingual problems: Studying the security risks incurred by native extensions in scripting languages

CA Staicu, S Rahaman, Á Kiss, M Backes - 32nd USENIX Security …, 2023 - usenix.org
Scripting languages are continuously gaining popularity due to their ease of use and the
flourishing software ecosystems surrounding them. These languages offer crash and …

Challenges of multilingual program specification and analysis

CA Furia, A Tiwari - … Symposium on Leveraging Applications of Formal …, 2024 - Springer
Multilingual programs, whose implementations are made of different languages, are gaining
traction especially in domains, such as web programming, that particularly benefit from the …

A large scale analysis of android—web hybridization

A Tiwari, J Prakash, S Groß, C Hammer - Journal of Systems and Software, 2020 - Elsevier
Many Android applications embed webpages via WebView components and execute
JavaScript code within Android. Hybrid applications leverage dedicated APIs to load a …

Understanding the Impact of Fingerprinting in Android Hybrid Apps

A Tiwari, J Prakash, A Rahimov… - 2023 IEEE/ACM 10th …, 2023 - ieeexplore.ieee.org
Numerous studies demonstrate that browser fingerprinting is detrimental to users' security
and privacy. However, little is known about the effects of browser fingerprinting on Android …

Learning to Detect and Localize Multilingual Bugs

H Yang, Y Nong, T Zhang, X Luo, H Cai - Proceedings of the ACM on …, 2024 - dl.acm.org
Increasing studies have shown bugs in multi-language software as a critical loophole in
modern software quality assurance, especially those induced by language interactions (ie …

Software engineering techniques for statically analyzing mobile apps: research trends, characteristics, and potential for industrial adoption

M Autili, I Malavolta, A Perucci, GL Scoccia… - Journal of Internet …, 2021 - Springer
Mobile platforms are rapidly and continuously changing, with support for new sensors, APIs,
and programming abstractions. Static analysis is gaining a growing interest, allowing …