Software developers are key players in the security ecosystem as they produce code that
runs on millions of devices. Yet we continue to see insecure code being developed and …

While researchers have developed many tools, techniques, and protocols for improving
software security, exploits and breaches are only becoming more frequent. Some of this gap …

The evolution of artificial intelligence (AI) and machine learning (ML) has led to the
development of sophisticated large language models (LLMs) that are used extensively in …

Vulnerabilities in Android code--including but not limited to insecure data storage,
unprotected inter-component communication, broken TLS implementations, and violations of …

The app economy is largely reliant on data collection as its primary revenue model. To
comply with legal requirements, app developers are often obligated to notify users of their …

Mobile apps have to satisfy various privacy requirements. App publishers are often obligated
to provide a privacy policy and notify users of their apps' privacy practices. But how can we …

Privacy by design (PbD) is a policy measure that guides software developers to apply
inherent solutions to achieve better privacy protection. For PbD to be a viable option, it is …

While much effort has been made to detect and measure the privacy leakage caused by the
advertising (ad) libraries integrated in mobile applications, analytics libraries, which are also …

Recruiting professional programmers in sufficient numbers for research studies can be
challenging because they often cannot spare the time, or due to their geographical …

Despite security advice in the official documentation and an extensive body of security
research about vulnerabilities and exploits, many developers still fail to write secure Android …