Evaluation of Static Vulnerability Detection Tools With Java Cryptographic API Benchmarks-Reference-Cited by-同舟云学术

Evaluation of Static Vulnerability Detection Tools With Java Cryptographic API Benchmarks

Author:

Afrose Sharmin¹^ORCID,Xiao Ya¹,Rahaman Sazzadur²,Miller Barton P.³^ORCID,Yao Danfeng¹^ORCID

Affiliation:

1. Department of Computer Science, Virginia Tech, Blacksburg, VA, USA

2. Department of Computer Science, University of Arizona, Tucson, AZ, USA

3. Computer Sciences Department, University of Wisconsin-Madison, Madison, WI, USA

Funder

National Science Foundation

Virginia Commonwealth Cyber Initiative

Publisher

Institute of Electrical and Electronics Engineers (IEEE)

Subject

Software

Link

Reference63 articles.

1. CrySL: An extensible approach to validating the correct usage of cryptographic APIs;krüger;Proc Eur Conf Object-Oriented Program,2018

5. CRYLOGGER: Detecting crypto misuses dynamically;piccolboni,2020

Cited by 21 articles. 订阅此论文施引文献订阅此论文施引文献，注册后可以免费订阅5篇论文的施引文献，订阅后可以查看论文全部施引文献

3. Effectiveness of ChatGPT for Static Analysis: How Far Are We?;Proceedings of the 1st ACM International Conference on AI-Powered Software;2024-07-10

4. An Investigation into Misuse of Java Security APIs by Large Language Models;Proceedings of the 19th ACM Asia Conference on Computer and Communications Security;2024-07

5. LLM Security Guard for Code;Proceedings of the 28th International Conference on Evaluation and Assessment in Software Engineering;2024-06-18