Android source code vulnerability detection: a systematic literature review

J Senanayake, H Kalutarage, MO Al-Kadri… - ACM Computing …, 2023 - dl.acm.org
The use of mobile devices is rising daily in this technological era. A continuous and
increasing number of mobile applications are constantly offered on mobile marketplaces to …

Android mobile malware detection using machine learning: A systematic review

J Senanayake, H Kalutarage, MO Al-Kadri - Electronics, 2021 - mdpi.com
With the increasing use of mobile devices, malware attacks are rising, especially on Android
phones, which account for 72.2% of the total market share. Hackers try to attack …

TaintBench: Automatic real-world malware benchmarking of Android taint analyses

L Luo, F Pauck, G Piskachev, M Benz… - Empirical Software …, 2022 - Springer
Due to the lack of established real-world benchmark suites for static taint analyses of
Android applications, evaluations of these analyses are often restricted and hard to …

Language-parametric static semantic code completion

DAA Pelsmaeker, H van Antwerpen… - Proceedings of the …, 2022 - dl.acm.org
Code completion is an editor service in IDEs that proposes code fragments for the user to
insert at the caret position in their code. Code completion should be sound and complete. It …

Easing maintenance of academic static analyzers

R Monat, A Ouadjaout, A Miné - International Journal on Software Tools for …, 2025 - Springer
Academic research in static analysis produces software implementations. These
implementations are time-consuming to develop and some need to be maintained in order …

Abstract debuggers: Exploring program behaviors using static analysis results

K Holter, JO Hennoste, P Lam, S Saan… - Proceedings of the 2024 …, 2024 - dl.acm.org
Traditional, or concrete, debuggers allow developers to step through programs and explore
the corresponding concrete program states—developers can query current values of …

Fluently specifying taint-flow queries with fluentTQL

G Piskachev, J Späth, I Budde, E Bodden - Empirical Software …, 2022 - Springer
Previous work has shown that taint analyses are only useful if correctly customized to the
context in which they are used. Existing domain-specific languages (DSLs) allow such …

Secucheck: Engineering configurable taint analysis for software developers

G Piskachev, R Krishnamurthy… - 2021 IEEE 21st …, 2021 - ieeexplore.ieee.org
Due to its ability to detect many frequently occurring security vulnerabilities, taint analysis is
one of the core static analyses used by many static application security testing (SAST) tools …

Can the configuration of static analyses make resolving security vulnerabilities more effective?-A user study

G Piskachev, M Becker, E Bodden - Empirical Software Engineering, 2023 - Springer
The use of static analysis security testing (SAST) tools has been increasing in recent years.
However, previous studies have shown that, when shipped to end users such as …

Ide support for cloud-based static analyses

L Luo, M Schäf, D Sanchez, E Bodden - … of the 29th ACM Joint meeting …, 2021 - dl.acm.org
Integrating static analyses into continuous integration (CI) or continuous delivery (CD) has
become the best practice for assuring code quality and security. Static Application Security …