The demand for automated security analysis techniques, such as static analysis based
security testing (SAST) tools continues to increase. To develop SASTs that are effectively …

The increasing trend of using Large Language Models (LLMs) for code generation raises
the question of their capability to generate trustworthy code. While many researchers are …

Many developers rely on Large Language Models (LLMs) to facilitate software development.
Nevertheless, these models have exhibited limited capabilities in the security domain. We …

Cryptography is known as a challenging topic for developers. We studied StackOverflow
posts to identify the problems that developers encounter when using Java Cryptography …

Large Language Models (LLMs) are gaining momentum in software development with
prompt-driven programming enabling developers to create code from natural language (NL) …

Does the act of writing a specification (how the code should behave) for a piece of security
sensitive code lead to developers producing more secure code? We asked 138 developers …

Security Application Programming Interfaces (APIs) are crucial for ensuring software
security. However, their misuse introduces vulnerabilities, potentially leading to severe data …

[Background] Previous research has shown that developers commonly misuse cryptography
APIs.[Aim] We have conducted an exploratory study to find out how crypto APIs are used in …

The correct adoption of cryptography APIs is challenging for mainstream developers, often
resulting in widespread API misuse. Meanwhile, cryptography misuse detectors have …

Research has shown that cryptography concepts are hard to understand for developers, and
secure use of cryptography APIs is challenging for mainstream developers. We have …