Being the Developers' Friend: Our Experience Developing a High-Precision Tool for Secure Coding

Danfeng Daphne Yao; Sazzadur Rahaman; Ya Xiao; Sharmin Afrose; Miles Frantz; Ke Tian; Na Meng; Cristina Cifuentes; Yang Zhao; Nicholas Allen; Nathan Keynes; Barton P. Miller; Elisa Heymann; Murat Kantarcioglu; Fahad Shaon

doi:10.1109/MSEC.2022.3159481

Being the Developers' Friend: Our Experience Developing a High-Precision Tool for Secure Coding

Danfeng Daphne Yao, Sazzadur Rahaman, Ya Xiao, Sharmin Afrose, Miles Frantz, Ke Tian, Na Meng, Cristina Cifuentes, Yang Zhao, Nicholas Allen, Nathan Keynes, Barton P. Miller, Elisa Heymann, Murat Kantarcioglu, Fahad Shaon

Computer Science

Research output: Contribution to journal › Article › peer-review

1 Scopus citations

Abstract

We discuss the needs and challenges of deployable security research by sharing our experience designing CryptoGuard, a high-precision tool for detecting cryptographic application programming interface misuses. Our project has produced multiple benchmarks as well as measurement results on state-of-the-art solutions.

Original language	English (US)
Pages (from-to)	43-52
Number of pages	10
Journal	IEEE Security and Privacy
Volume	20
Issue number	6
DOIs	https://doi.org/10.1109/MSEC.2022.3159481
State	Published - 2022

ASJC Scopus subject areas

Computer Networks and Communications
Electrical and Electronic Engineering
Law

Access to Document

10.1109/MSEC.2022.3159481

Cite this

Yao, D. D., Rahaman, S., Xiao, Y., Afrose, S., Frantz, M., Tian, K., Meng, N., Cifuentes, C., Zhao, Y., Allen, N., Keynes, N., Miller, B. P., Heymann, E., Kantarcioglu, M., & Shaon, F. (2022). Being the Developers' Friend: Our Experience Developing a High-Precision Tool for Secure Coding. IEEE Security and Privacy, 20(6), 43-52. https://doi.org/10.1109/MSEC.2022.3159481

@article{d48fee458e3f46f68a0bfafd45a8a8d0,

title = "Being the Developers' Friend: Our Experience Developing a High-Precision Tool for Secure Coding",

abstract = "We discuss the needs and challenges of deployable security research by sharing our experience designing CryptoGuard, a high-precision tool for detecting cryptographic application programming interface misuses. Our project has produced multiple benchmarks as well as measurement results on state-of-the-art solutions.",

author = "Yao, {Danfeng Daphne} and Sazzadur Rahaman and Ya Xiao and Sharmin Afrose and Miles Frantz and Ke Tian and Na Meng and Cristina Cifuentes and Yang Zhao and Nicholas Allen and Nathan Keynes and Miller, {Barton P.} and Elisa Heymann and Murat Kantarcioglu and Fahad Shaon",

note = "Publisher Copyright: {\textcopyright} 2003-2012 IEEE.",

year = "2022",

doi = "10.1109/MSEC.2022.3159481",

language = "English (US)",

volume = "20",

pages = "43--52",

journal = "IEEE Security and Privacy",

issn = "1540-7993",

publisher = "Institute of Electrical and Electronics Engineers Inc.",

number = "6",

}

TY - JOUR

T1 - Being the Developers' Friend

T2 - Our Experience Developing a High-Precision Tool for Secure Coding

AU - Yao, Danfeng Daphne

AU - Rahaman, Sazzadur

AU - Xiao, Ya

AU - Afrose, Sharmin

AU - Frantz, Miles

AU - Tian, Ke

AU - Meng, Na

AU - Cifuentes, Cristina

AU - Zhao, Yang

AU - Allen, Nicholas

AU - Keynes, Nathan

AU - Miller, Barton P.

AU - Heymann, Elisa

AU - Kantarcioglu, Murat

AU - Shaon, Fahad

PY - 2022

Y1 - 2022

N2 - We discuss the needs and challenges of deployable security research by sharing our experience designing CryptoGuard, a high-precision tool for detecting cryptographic application programming interface misuses. Our project has produced multiple benchmarks as well as measurement results on state-of-the-art solutions.

AB - We discuss the needs and challenges of deployable security research by sharing our experience designing CryptoGuard, a high-precision tool for detecting cryptographic application programming interface misuses. Our project has produced multiple benchmarks as well as measurement results on state-of-the-art solutions.

UR - http://www.scopus.com/inward/record.url?scp=85141834903&partnerID=8YFLogxK

UR - http://www.scopus.com/inward/citedby.url?scp=85141834903&partnerID=8YFLogxK

U2 - 10.1109/MSEC.2022.3159481

DO - 10.1109/MSEC.2022.3159481

M3 - Article

AN - SCOPUS:85141834903

VL - 20

SP - 43

EP - 52

JO - IEEE Security and Privacy

JF - IEEE Security and Privacy

SN - 1540-7993

IS - 6

ER -

Being the Developers' Friend: Our Experience Developing a High-Precision Tool for Secure Coding

Abstract

ASJC Scopus subject areas

Access to Document

Other files and links

Fingerprint

Cite this