Online programming discussion platforms such as Stack Overflow serve as a rich source of
information for software developers. Available information include vibrant discussions and …

Vulnerabilities in Android code--including but not limited to insecure data storage,
unprotected inter-component communication, broken TLS implementations, and violations of …

Potentially dangerous cryptography errors are well-documented in many applications.
Conventional wisdom suggests that many of these errors are caused by cryptographic …

A password manager stores and handles users' passwords from different services. This
relieves the users from constantly remembering and recalling many different login …

We study the security of popular password managers and their policies on automatically
filling in Web passwords. We examine browser built-in password managers, mobile …

Android security and privacy research has boomed in recent years, far outstripping
investigations of other appified platforms. However, despite this attention, research efforts …

Android applications have a long history of being vulnerable to man-in-the-middle attacks
due to insecure custom TLS certificate validation implementations. To resolve this, Google …

Modern versions of Android have introduced a number of features in the name of
convenience. This paper shows how two of these features, mobile password managers and …

A 2015 study by Iulia Ion, Rob Reeder, and Sunny Consolvo examined the self-reported
security behavior of security experts and non-experts. They also analyzed what kind of …

Studying developer behavior is a hot topic for usable security researchers. While the usable
security community has ample experience and best-practice knowledge concerning the …