CogniCrypt: Supporting developers in using cryptography

No abstract is available for this paper.

• Publication year

  2017

• Venue

  International Conference on Automated Software Engineering

• Publication date

  2017-10-30

• Fields of study

  Computer Science

• Identifiers
  DOI 10.1109/ASE.2017.8115707
• External record

  Open on Semantic Scholar

• Source metadata

  Semantic Scholar

• No claims are published for this paper.

• No concepts are published for this paper.

• MoPS: A Modular Protection Scheme for Long-Term Storage

  2017influential reference
• "Jumping Through Hoops": Why do Java Developers Struggle with Cryptography APIs?

  2016cited by this paper
• Variability Modeling of Cryptographic Components: Clafer Experience Report

  2016cited by this paper
• Evaluation of Cryptography Usage in Android Applications

  2016cited by this paper
• Towards secure integration of cryptographic software

  2015cited by this paper
• Vetting SSL Usage in Applications with SSLINT

  2015cited by this paper
• How Can I Use This Method?

  2015cited by this paper
• ABY - A Framework for Efficient Mixed-Protocol Secure Two-Party Computation

  2015cited by this paper
• Danger is my middle name: experimenting with SSL vulnerabilities in Android apps

  2015cited by this paper
• TS4J: a fluent interface for defining and computing typestate analyses

  2014cited by this paper
• Modelling Analysis and Auto-detection of Cryptographic Misuse in Android Applications

  2014cited by this paper
• Spotting working code examples

  2014cited by this paper
• Why does cryptographic software fail?: a case study and open problems

  2014cited by this paper
• On the Security of RC4 in TLS

  2013cited by this paper
• An empirical study of cryptographic misuse in android applications

  2013cited by this paper
• Why eve and mallory love android: an analysis of android SSL (in)security

  2012cited by this paper
• Synthesizing API usage examples

  2012cited by this paper
• Better Key Sizes (and Attacks) for LWE-Based Encryption

  2011cited by this paper
• Towards an Intelligent Code Search Engine

  2010cited by this paper
• The Transport Layer Security (TLS) Protocol Version 1.2

  2008cited by this paper
• Optimizing Java Bytecode Using the Soot Framework: Is It Feasible?

  2000cited by this paper
• Typestate: A programming language concept for enhancing software reliability

  1986cited by this paper
• Software and Systems Modeling Manuscript No. Clafer: Unifying Class and Feature Modeling

  year unknowncited by this paper

• How Can ChatGPT Support Human Security Testers to Help Mitigate Supply Chain Attacks?

  2026cites this paper
• DECISION-ORIENTED AUDITING OF ENCRYPTION AND KEY MANAGEMENT POLICIES BASED ON CONSISTENCY, STABILITY, AND RISK METRICS

  2026cites this paper
• Reaching Software Quality for Bioinformatics Applications: How Far Are We?

  2026cites this paper
• Detecting Encryption Vulnerabilities by Coupling Architectural Analyses and Source Code Analyses

  2025cites this paper
• “I’m Pretty Expert and I Still Screw It Up”: Qualitative Insights into Experiences and Challenges of Designing and Implementing Cryptographic Library APIs

  2025cites this paper
• Beyond Static Pattern Matching? Rethinking Automatic Cryptographic API Misuse Detection in the Era of LLMs

  2025cites this paper
• Cryptoscope: Analyzing cryptographic usages in modern software

  2025influential citation
• VulPA: Detecting Semantically Recurring Vulnerabilities with Multi-object Typestate Analysis

  2025cites this paper
• Beyond Rules: How Large Language Models Are Redefining Cryptographic Misuse Detection

  2025influential citation
• SAVANT: Vulnerability Detection in Application Dependencies through Semantic-Guided Reachability Analysis

  2025cites this paper
• Extended Version: It Should Be Easy but... New Users Experiences and Challenges with Secret Management Tools

  2025cites this paper
• Cryptographic API Misuses in Industry: A Case Study on Prevalence and Remediation

  2025influential citation
• Automatic Generation of a Cryptography Misuse Taxonomy Using Large Language Models

  2025cites this paper
• Detecting and Fixing API Misuses of Data Science Libraries Using Large Language Models

  2025cites this paper
• From base cases to backdoors: An Empirical Study of Unnatural Crypto-API Misuse

  2025cites this paper
• It Should Be Easy but... New Users' Experiences and Challenges with Secret Management Tools

  2025cites this paper
• Cryptbara: Dependency-Guided Detection of Python Cryptographic API Misuses

  2025cites this paper
• SecCityVR: Visualization and Collaborative Exploration of Software Vulnerabilities in Virtual Reality

  2025cites this paper
• An Exploratory Study on the Engineering of Security Features

  2025cites this paper
• "That's my perspective from 30 years of doing this": An Interview Study on Practices, Experiences, and Challenges of Updating Cryptographic Code

  2025cites this paper
• X.509DoS: Exploiting and Detecting Denial-of-Service Vulnerabilities in Cryptographic Libraries using Crafted X.509 Certificates

  2025cites this paper
• Gopher: High-Precision and Deep-Dive Detection of Cryptographic API Misuse in the Go Ecosystem

  2024cites this paper
• CryptoPyt: Unraveling Python Cryptographic APIs Misuse with Precise Static Taint Analysis

  2024cites this paper
• Enhanced Analysis of Cryptographic Library Usage Patterns and Trends in Android Applications

  2024cites this paper
• Beyond Static Tools: Evaluating Large Language Models for Cryptographic Misuse Detection

  2024influential citation
• Consistency Management for Security Annotations for Continuous Verification

  2024cites this paper
• The Rocky Road to Sustainable Security

  2024cites this paper
• CryptoLLM: Harnessing the Power of LLMs to Detect Cryptographic API Misuse

  2024influential citation
• ChatGPT’s Potential in Cryptography Misuse Detection: A Comparative Analysis with Static Analysis Tools

  2024cites this paper
• An Empirical Study of API Misuses of Data-Centric Libraries

  2024cites this paper
• Exploring Automatic Cryptographic API Misuse Detection in the Era of LLMs

  2024cites this paper
• Cryptography in the Wild: An Empirical Analysis of Vulnerabilities in Cryptographic Libraries

  2024cites this paper
• "Belt and suspenders" or "just red tape"?: Investigating Early Artifacts and User Perceptions of IoT App Security Certification

  2024cites this paper
• Methods and Benchmark for Detecting Cryptographic API Misuses in Python

  2024cites this paper
• "These results must be false": A usability evaluation of constant-time analysis tools

  2024cites this paper
• Supporting Error Chains in Static Analysis for Precise Evaluation Results and Enhanced Usability

  2024cites this paper
• Towards Precise Reporting of Cryptographic Misuses

  2024cites this paper
• CryptoShield - Automatic On-Device Mitigation for Crypto API Misuse in Android Applications

  2023cites this paper
• Towards Trustworthy AI Software Development Assistance

  2023influential citation
• A Reevaluation of Why Crypto-detectors Fail: A Systematic Revaluation of Cryptographic Misuse Detection Techniques

  2023cites this paper
• Voice App Developer Experiences with Alexa and Google Assistant: Juggling Risks, Liability, and Security

  2023cites this paper
• Vision: How to Provide Documentation to Non-skilled Developers for Appropriate Use of Cryptography: Action Research Study on Expert Monitoring

  2023cites this paper
• ELCA: Introducing Enterprise-level Cryptographic Agility for a Post-Quantum Era

  2023cites this paper
• Runtime Verification of Crypto APIs: An Empirical Study

  2023cites this paper
• How well does LLM generate security tests?

  2023cites this paper
• A Comparative Study on Design and Usability of Cryptographic Libraries

  2023cites this paper
• Securing Your Crypto-API Usage Through Tool Support - A Usability Study

  2023influential citation
• Detecting Cryptography Misuses With Machine Learning: Graph Embeddings, Transfer Learning and Data Augmentation in Source Code Related Tasks

  2023cites this paper
• "False negative - that one is going to kill you": Understanding Industry Perspectives of Static Analysis based Security Testing

  2023cites this paper
• Automatic Detection of Java Cryptographic API Misuses: Are We There Yet?

  2023cites this paper
• Navigating the Concurrency Landscape: A Survey of Race Condition Vulnerability Detectors

  2023cites this paper
• On the privacy of mental health apps

  2022cites this paper
• Towards practical privacy-preserving protocols

  2022cites this paper
• Industrial Strength Static Detection for Cryptographic API Misuses

  2022cites this paper
• jGuard: Programming Misuse-Resilient APIs

  2022cites this paper
• “I just looked for the solution!”On Integrating Security-Relevant Information in Non-Security API Documentation to Support Secure Coding Practices

  2022cites this paper
• Understanding IoT Security from a Market-Scale Perspective

  2022influential citation
• Web Cryptography API: Prevalence and Possible Developer Mistakes

  2022cites this paper
• From Theory to Code: Identifying Logical Flaws in Cryptographic Implementations in C/C++

  2022influential citation
• FUM - A Framework for API Usage constraint and Misuse Classification

  2022influential citation
• Towards Immediate Feedback for Security Relevant Code in Development Environments

  2022cites this paper
• How Does Usable Security (Not) End Up in Software Products? Results From a Qualitative Interview Study

  2022cites this paper
• Static data-flow analysis for software product lines in C

  2022cites this paper
• Example-Based Vulnerability Detection and Repair in Java Code

  2022influential citation
• “They’re not that hard to mitigate”: What Cryptographic Library Developers Think About Timing Attacks

  2022cites this paper
• CryptoEval: Evaluating the Risk of Cryptographic Misuses in Android Apps with Data-Flow Analysis

  2021cites this paper
• Why Eve and Mallory Still Love Android: Revisiting TLS (In)Security in Android Applications

  2021cites this paper
• Systematic Mutation-Based Evaluation of the Soundness of Security-Focused Android Static Analysis Techniques

  2021cites this paper
• Software Ticks Need No Specifications

  2021cites this paper
• Embedding Code Contexts for Cryptographic API Suggestion: New Methodologies and Comparisons

  2021cites this paper
• Lossless, Persisted Summarization of Static Callgraph, Points-To and Data-Flow Analysis

  2021cites this paper
• Security Notifications in Static Analysis Tools: Developers’ Attitudes, Comprehension, and Ability to Act on Them

  2021cites this paper
• Dealing with Variability in API Misuse Specification

  2021cites this paper
• If It’s Not Secure, It Should Not Compile: Preventing DOM-Based XSS in Large-Scale Web Development with API Hardening

  2021cites this paper
• Automated cell header generator for Jupyter notebooks

  2021cites this paper
• You Really Shouldn't Roll Your Own Crypto: An Empirical Study of Vulnerabilities in Cryptographic Libraries

  2021cites this paper
• Mutation-based Evaluation of Cryptographic API Misuse Detectors

  2021cites this paper
• Ontology-driven evolution of software security

  2021cites this paper
• The Case for Adaptive Security Interventions

  2021cites this paper
• FluentCrypto: Cryptography in Easy Mode

  2021cites this paper
• RAPID: checking API usage for the cloud in the cloud

  2021cites this paper
• Multi-location cryptographic code repair with neural-network-based methodologies

  2021cites this paper
• Hotfixing misuses of crypto APIs in Java programs

  2021cites this paper
• Evaluation of Static Vulnerability Detection Tools With Java Cryptographic API Benchmarks

  2021cites this paper
• Static and Dynamic Analysis in Cryptographic-API Misuse Detection of Mobile Application

  2021cites this paper
• CRYScanner: Finding cryptographic libraries misuse

  2021cites this paper
• From Needs to Actions to Secure Apps? The Effect of Requirements and Developer Practices on App Security

  2020cites this paper
• Model-driven Development of Evolving Secure Software Systems

  2020cites this paper
• Automated Hotfixes for Misuses of Crypto APIs

  2020influential citation
• Analyzing Cryptographic API Usages for Android Applications Using HMM and N-Gram

  2020cites this paper
• Up2Dep: Android Tool Support to Fix Insecure Code Dependencies

  2020influential citation
• CogniCrypt - the secure integration of cryptographic software

  2020cites this paper
• Bitcoin’s APIs in Open-Source Projects: Security Usability Evaluation

  2020cites this paper
• CryptoExplorer: An Interactive Web Platform Supporting Secure Use of Cryptography APIs

  2020influential citation
• From Theory to Practice: Deployment-grade Tools and Methodologies for Software Security

  2020cites this paper
• CogniCryptGEN: generating code for the secure usage of crypto APIs

  2020influential citation
• One Size Does Not Fit All: A Grounded Theory and Online Survey Study of Developer Preferences for Security Warning Types

  2020cites this paper
• Erratum zu: Mensch-Computer-Interaktion als zentrales Gebiet der Informatik – Bestandsaufnahme, Trends und Herausforderungen

  2020cites this paper
• Security in Centralized Data Store-based Home Automation Platforms

  2020cites this paper
• Fixing the Fixes: Assessing the Solutions of SAST Tools for Securing Password Storage

  2020cites this paper