Don't leak your keys: Understanding, measuring, and exploiting the appsecret leaks in mini-programs

Y Zhang, Y Yang, Z Lin - Proceedings of the 2023 ACM SIGSAC …, 2023 - dl.acm.org
Mobile mini-programs in WeChat have gained significant popularity since their debut in
2017, reaching a scale similar to that of Android apps in the Play Store. Like Google …

[PDF][PDF] How bad can it git? characterizing secret leakage in public github repositories.

M Meli, MR McNiece, B Reaves - NDSS, 2019 - bradreaves.net
GitHub and similar platforms have made public collaborative development of software
commonplace. However, a problem arises when this public code must manage …

Automated detection of password leakage from public github repositories

R Feng, Z Yan, S Peng, Y Zhang - Proceedings of the 44th International …, 2022 - dl.acm.org
The prosperity of the GitHub community has raised new concerns about data security in
public repositories. Practitioners who manage authentication secrets such as textual …

Open source solutions for vulnerability assessment: A comparative analysis

DB Cruz, JR Almeida, JL Oliveira - IEEE Access, 2023 - ieeexplore.ieee.org
As software applications continue to become more complex and attractive to cyber-attackers,
enhancing resilience against cyber threats becomes essential. Aiming to provide more …

Pushed by Accident: A {Mixed-Methods} Study on Strategies of Handling Secret Information in Source Code Repositories

A Krause, JH Klemmer, N Huaman, D Wermke… - 32nd USENIX Security …, 2023 - usenix.org
Version control systems for source code, such as Git, are key tools in modern software
development. Many developers use services like GitHub or GitLab for collaborative software …

Secrets in source code: Reducing false positives using machine learning

A Saha, T Denning, V Srikumar… - … Systems & NETworkS …, 2020 - ieeexplore.ieee.org
Private and public git repositories often contain unintentional sensitive information in the
source code. Many tools have been developed to scan repositories looking for potential …

Secretbench: A dataset of software secrets

SK Basak, L Neil, B Reaves… - 2023 IEEE/ACM 20th …, 2023 - ieeexplore.ieee.org
According to GitGuardian's monitoring of public GitHub repositories, the exposure of secrets
(API keys and other credentials) increased two-fold in 2021 compared to 2020, totaling more …

Measuring the leakage and exploitability of authentication secrets in super-apps: The wechat case

S Baskaran, L Zhao, M Mannan, A Youssef - Proceedings of the 26th …, 2023 - dl.acm.org
Super-apps such as WeChat and Baidu host millions of mini-apps, which are very popular
among users and developers because of the mini-apps' convenience, lightweight, ease of …

Strengthening KMS security with advanced cryptography, machine learning, deep learning, and IoT technologies

JO Ogala, S Ahmad, I Shakeel, J Ahmad… - SN Computer …, 2023 - Springer
This paper presents an innovative approach to strengthening Key Management Systems
(KMS) against the escalating landscape of cyber threats by integrating advanced …

What challenges do developers face about checked-in secrets in software artifacts?

SK Basak, L Neil, B Reaves… - 2023 IEEE/ACM 45th …, 2023 - ieeexplore.ieee.org
Throughout 2021, GitGuardian's monitoring of public GitHub repositories revealed a two-fold
increase in the number of secrets (database credentials, API keys, and other credentials) …