Java malware exploiting language vulnerabilities has become increasingly prevalent in the
recent past. Since Java is a platform-independent language, these security threats open up …

Nowadays, an increasing number of applications use deserialization. This technique, based
on rebuilding the instance of objects from serialized byte streams, can be dangerous since it …

Many critical codebases are written in C, and most of them use preprocessor directives to
encode variability, effectively encoding software product lines. These preprocessor …

Static analysis is used to automatically detect bugs and security breaches, and aids compiler
optimization. Whole-program analysis (WPA) can yield high precision, however causes long …

As a popular platform-independent language, Java is widely used in enterprise applications.
In the past few years, language vulnerabilities exploited by Java malware have become …

Due to the quality and security requirements that come with an always-on mobile device
processing large amounts of highly sensitive information, Android apps are an important …

RPCs are fundamental to our large-scale distributed system. From a security perspective,
the blast radius of RPCs is worryingly big since each RPC often interacts with tens of internal …

The Java runtime is installed on billions of devices worldwide, and over years it has been a
primary attack vector for online criminals. In this work, we address that many attack vectors …

While cloud customers can benefit from migrating applications to the cloud, they are
concerned about the security of the hosted applications. This is complicated by the …

The embedded web server technologies are based on Internet browser to provide flexible
remote device monitoring and management, and it has become an advanced development …