We present a new approach to static analysis for security vetting of Android apps and a
general framework called Amandroid. Amandroid determines points-to information for all …

To address the problem of detecting malicious codes in malware and extracting the
corresponding evidences in mobile devices, we construct a consortium blockchain …

Package managers have become a vital part of the modern software development process.
They allow developers to reuse third-party code, share their own code, minimize their …

Java deserialization vulnerability is a severe threat in practice. Researchers have proposed
static analysis solutions to locate candidate vulnerabilities and fuzzing solutions to generate …

The demand for automated security analysis techniques, such as static analysis based
security testing (SAST) tools continues to increase. To develop SASTs that are effectively …

Static information-flow analysis (especially taint-analysis) is a key technique in software
security, computing where sensitive or untrusted data can propagate in a program. Points-to …

Program analysis techniques play an important role in detecting security vulnerabilities. In
this paper we describe our experiences in developing a variety of tools that detect security …

The continuous malicious software (malware) attacks on smartphones pose a serious threat
to the security of users, especially the dominant platform Android. Data-driven methods …

This paper proposes a new technique to detect mobile malware based on information flow
analysis. Our approach examines the structure of information flows to identify patterns of …

Modern JavaScript applications extensively depend on third-party libraries. Especially for
the Node. js platform, vulnerabilities can have severe consequences to the security of …