research
∙
09/16/2022
A Decade of Code Comment Quality Assessment: A Systematic Literature Review
Code comments are important artifacts in software systems and play a par...
share
research
∙
01/13/2022
FuzzingDriver: the Missing Dictionary to Increase Code Coverage in Fuzzers
We propose a tool, called FuzzingDriver, to generate dictionary tokens f...
research
∙
11/05/2021
Security Header Fields in HTTP Clients
HTTP headers are commonly used to establish web communications, and some...
research
∙
11/05/2021
Phish What You Wish
IT professionals have no simple tool to create phishing websites and rai...
research
∙
11/02/2021
Dazed and Confused: What's Wrong with Crypto Libraries?
Recent studies have shown that developers have difficulties in using cry...
research
∙
09/30/2021
Crypto Experts Advise What They Adopt
Previous studies have shown that developers regularly seek advice on onl...
research
∙
09/29/2021
Worrisome Patterns in Developers: A Survey in Cryptography
We surveyed 97 developers who had used cryptography in open-source proje...
research
∙
08/25/2021
RepliComment: Identifying Clones in Code Comments
Code comments are the primary means to document implementation and facil...
research
∙
08/24/2021
Do Comments follow Commenting Conventions? A Case Study in Java and Python
Assessing code comment quality is known to be a difficult problem. A num...
research
∙
08/17/2021
What Do Developers Discuss about Code Comments?
Code comments are important for program comprehension, development, and ...
research
∙
08/16/2021
Security Smells Pervade Mobile App Servers
[Background] Web communication is universal in cyberspace, and security ...
research
∙
08/16/2021
Hurdles for Developers in Cryptography
Prior research has shown that cryptography is hard to use for developers...
research
∙
07/09/2021
How to Identify Class Comment Types? A Multi-language Approach for Class Comment Classification
Most software maintenance and evolution tasks require developers to unde...
research
∙
09/02/2020
Java Cryptography Uses in the Wild
[Background] Previous research has shown that developers commonly misuse...
research
∙
06/01/2020
Security Smells in Android
The ubiquity of smartphones, and their very broad capabilities and usage...
research
∙
05/23/2020
What do class comments tell us? An investigation of comment evolution and practices in Pharo
Previous studies have characterized code comments in different programmi...
research
∙
02/19/2020
Tricking Johnny into Granting Web Permissions
We studied the web permission API dialog box in popular mobile and deskt...
research
∙
02/19/2020
Caveats in Eliciting Mobile App Requirements
Factors such as app stores or platform choices heavily affect functional...
research
∙
01/03/2020
CryptoExplorer: An Interactive Web Platform Supporting Secure Use of Cryptography APIs
Research has shown that cryptographic APIs are hard to use. Consequently...
research
∙
01/01/2020
Web APIs in Android through the Lens of Security
Web communication has become an indispensable characteristic of mobile a...
research
∙
08/12/2019
VISON: An Ontology-Based Approach for Software Visualization Tool Discoverability
Although many tools have been presented in the research literature of so...
research
∙
08/05/2019
The Impact of Developer Experience in Using Java Cryptography
Previous research has shown that crypto APIs are hard for developers to ...
research
∙
08/05/2019
Testability First!
The pivotal role of testing in high-quality software production has driv...
research
∙
04/05/2019
PerfVis: Pervasive Visualization in Immersive AugmentedReality for Performance Awareness
Developers are usually unaware of the impact of code changes to the perf...
research
∙
11/30/2018
Security Code Smells in Android ICC
Android Inter-Component Communication (ICC) is complex, largely unconstr...
research
∙
07/12/2018