English (United Kingdom)

https://curated-unify.zendy.io/wp-json/zendy-region/v1/featured_content/oa?rat=en

https://curated-unify.zendy.io/wp-json/zendy-region/v1/highlighted_journal/

Global: Zendy Tools annual

Presents the keyphrase highlighting as premium feature

Keyphrase Highlighting

Presents the summarisation as premium feature

Summarisation

Insights

Presents the pdf analysis as premium feature

PDF Analysis

Presents the zaia usage as premium feature

ZAIA

Global: Zendy Tools monthly

Global: Zendy Plus monthly

Presents the access of premium content as premium feature

Premium Content

Global: Zendy Plus annual

Global: Zendy Free Plan

The Java libraries JCA and JSSE offer cryptographic APIs to facilitate securecoding. When developers misuse some of the APIs, their code becomes vulnerableto cyber-attacks. To eliminate such vulnerabilities, people built tools todetect security-API misuses via pattern matching. However, most tools do not(1) fix misuses or (2) allow users to extend tools' pattern sets. To overcomeboth limitations, we created Seader-an example-based approach to detect andrepair security-API misuses. Given an exemplar <insecure, secure>code pair,Seader compares the snippets to infer any API-misuse template and correspondingfixing edit. Based on the inferred info, given a program, Seader performsinter-procedural static analysis to search for security-API misuses and topropose customized fixes. For evaluation, we applied Seader to 28 <insecure,secure> codepairs; Seader successfully inferred 21 unique API-misuse templatesand related fixes. With these <vulnerability, fix> patterns, we applied SEADERto a program benchmark that has 86 known vulnerabilities. Seader detectedvulnerabilities with 95% precision, 72% recall, and82% F-score. We also appliedSeader to 100 open-source projects and manually checked 77 suggested repairs;76 of the repairs were correct. Seader can help developers correctly usesecurity APIs.

Example-Based Vulnerability Detection and Repair in Java Code