Today's cyber attacks have become more severe and frequent, which calls for a new line of
security defenses to protect against them. The dynamic nature of new-generation threats …

软件复杂性的增加给软件安全性带来极大的挑战. 随着软件规模不断增大以及漏洞形态多样化,
传统漏洞挖掘方法由于存在高误报率和高漏报率的问题, 已无法满足复杂软件的安全性分析需求 …

With the increasing popularity of the Internet of Things (IoT), many IoT cloud platforms have
emerged to help the IoT manufacturers connect their devices to their users. Serving the …

IoT clouds facilitate the communication between IoT devices and users, and authorize users'
access to their devices. In this paradigm, an IoT device is usually managed under a …

软件复杂性的增加给软件安全性带来极大的挑战. 随着软件规模不断增大以及漏洞形态多样化,
传统漏洞挖掘方法由于存在高误报率和高漏报率的问题, 已无法满足复杂软件的安全性分析需求 …

Automated attack discovery techniques, such as attacker synthesis or model-based fuzzing,
provide powerful ways to ensure network protocols operate correctly and securely. Such …

Conformance tests are critical for finding security weaknesses in carrier network systems.
However, building a conformance test procedure from specifications is challenging, as …

To use library APIs, a developer is supposed to follow guidance and respect some
constraints, which we call integration assumptions (IAs). Violations of these assumptions can …

Although the newest versions of TLS are considered secure, flawed implementations may
undermine the promised security properties. Such implementation flaws result from the TLS …

The manifest file of an Android app is crucial for app security as it declares sensitive app
configurations, such as access permissions required to access app components …