We present DroidSafe, a static information flow analysis tool that reports potential leaks of
sensitive information in Android applications. DroidSafe combines a comprehensive …

You can write a compiler pass extending Soot, as either a BodyTransformer, for a
intraprocedural analysis; or SceneTransformer, for a whole-program analysis. You choose …

We present a novel technique for static race detection in Java programs, comprised of a
series of stages that employ a combination of static analyses to successively reduce the …

We present a points-to analysis technique suitable for environments with small time and
memory budgets, such as just-in-time (JIT) compilers and interactive development …

This paper reports on a new approach to solving a subset-based points-to analysis for Java
using Binary Decision Diagrams (BDDs). In the model checking community, BDDs have …

Modern software engineering practice increasingly brings redundant code into software
products, which has caused a phenomenon called bloatware, leading to software system …

We present Paddle, a framework of BDD-based context-sensitive points-to and call graph
analyses for Java, as well as client analyses that use their results. Paddle supports several …

Program analysis tools often produce undesirable output due to various approximations. We
present an approach and a system EUGENE that allows user feedback to guide such …

Existing Android malware detection systems primarily concentrate on detecting malware
apps, leaving a gap in the research concerning the detection of malicious components in …

Mobile applications are becoming increasingly ubiquitous and provide ever richer
functionality on mobile devices, while such applications drain increasingly more battery …