Data

Tools

Indexes

Applications

Experiments

Awesome

An open API service indexing awesome lists of open source software.

Projects in Awesome Lists by secure-software-engineering

A curated list of projects in awesome lists by secure-software-engineering .

https://github.com/secure-software-engineering/droidbench

A micro-benchmark suite to assess the stability of taint-analysis tools for Android

Last synced: 06 Apr 2025

https://github.com/secure-software-engineering/susi

SuSi - our tool to automatically discover sources and sinks in the Android framework

Last synced: 08 Sep 2025

https://github.com/secure-software-engineering/tamiflex

TamiFlex facilitates static analysis of programs that use reflection and custom class loaders

Last synced: 10 Apr 2025

https://github.com/secure-software-engineering/pointerbench

A points-to and alias analysis benchmark suite

Last synced: 24 Aug 2025

https://github.com/secure-software-engineering/typeevalpy

A Micro-benchmarking Framework for Python Type Inference Tools

benchmark python staticanalysis typeinference

Last synced: 10 Apr 2025

https://github.com/secure-software-engineering/cova

COVA - A static analysis tool to compute path conditions

Last synced: 10 Apr 2025

https://github.com/secure-software-engineering/COVA

COVA - A static analysis tool to compute path conditions

Last synced: 29 Mar 2025

https://github.com/secure-software-engineering/boomerang

Boomerang is a on-demand context and flow-sensitive pointer analysis for Java.

Last synced: 10 Apr 2025

https://github.com/secure-software-engineering/swan

Security methods for WeAkNess detection

Last synced: 24 Jun 2025

https://github.com/secure-software-engineering/droidforce

DroidForce Project Repository. See our ARES'2014 paper for the details on DroidForce.

Last synced: 11 Oct 2025

https://github.com/secure-software-engineering/secucheck

Soot-based taint analysis with internal Java fluent interface for security specifications in fluentTQL implemented with MagpieBridge to support multiple IDEs.

Last synced: 10 Apr 2025

https://github.com/secure-software-engineering/sootdiff

SootDiff - Bytecode Comparison Across Different Java Compilers

Last synced: 10 Apr 2025

https://github.com/secure-software-engineering/sootfx

A Static Code Feature Extraction Tool for Java and Android

Last synced: 10 Apr 2025

https://github.com/secure-software-engineering/headergen

HeaderGen annotates Jupyter notebooks using static analysis. Improves PyCG's call graph analysis by supporting external libraries and flow-sensitivity.

call-graph-analysis jupyter-notebook python static-analysis

Last synced: 10 Apr 2025

https://github.com/secure-software-engineering/HeaderGen

HeaderGen annotates Jupyter notebooks using static analysis. Improves PyCG's call graph analysis by supporting external libraries and flow-sensitivity.

call-graph-analysis jupyter-notebook python static-analysis

Last synced: 07 Nov 2025

https://github.com/secure-software-engineering/authcheck

Analysis for access-control vulnerabilities in Java Spring Security applications.

access-control authentication authorization java security soot springframework

Last synced: 10 Apr 2025

https://github.com/secure-software-engineering/jimple-interpreter

Soot based Jimple interpreter

Last synced: 10 Apr 2025

https://github.com/secure-software-engineering/ideal

IDE/AL - Alias-Aware Framework for Interprocedural Dataflow Analysis

Last synced: 10 Apr 2025

https://github.com/secure-software-engineering/upcy

UpCy automatically finds compatible updates for Maven dependencies.

Last synced: 11 Jul 2025

https://github.com/secure-software-engineering/secucheck-core

Taint Analysis on top of Soot.

Last synced: 10 Apr 2025

https://github.com/secure-software-engineering/opcua-scanner

An opcua client scanning for servers in a network

Last synced: 10 Apr 2025

https://github.com/secure-software-engineering/denial-of-app-attack

Denial-Of-App Attack

Last synced: 10 Nov 2025

https://github.com/secure-software-engineering/cheetah

Eclipse plugin for a JIT taint analysis

Last synced: 04 Oct 2025

https://github.com/secure-software-engineering/achilles-benchmark-depscanners

Achilles - Benchmark for assessing OSS-Vulnerability Scanners 59

Last synced: 10 Apr 2025

https://github.com/secure-software-engineering/rose

Research Tool for Online Social Environments

Last synced: 10 Apr 2025

https://github.com/secure-software-engineering/reviser

Reviser implementation

Last synced: 10 Jan 2026

https://github.com/secure-software-engineering/pathexpression

An implementation of Tarjan's PathExpression algorithm

Last synced: 10 Apr 2025

https://github.com/secure-software-engineering/jadx-taintdoc

Jadx extended to ease documentation of taint flows

Last synced: 04 Mar 2025

https://github.com/secure-software-engineering/spring-petclinic-kotlin

Vulnerable version of the Spring PetClinic application in Kotlin

Last synced: 02 Nov 2025

https://github.com/secure-software-engineering/flowstar

Common base project for taint analyses such as FlowDroid et al.

Last synced: 09 Feb 2026

https://github.com/secure-software-engineering/sparseboomerang

Sparse Demand-Driven Pointer Analysis

Last synced: 10 Apr 2025

https://github.com/secure-software-engineering/cognicrypt-intellij

Static Code Analysis for Crypto-API misuse detection. IDE Plugin for IntelliJ and Android Studio

android-studio-plugin api-misuse intellij-plugin security-scanner static-code-analysis

Last synced: 30 Oct 2025

https://github.com/secure-software-engineering/ts4j

A fluent interface for defining and computing typestate analyses

dataflow-analysis fluent-interface java static-analysis

Last synced: 02 Nov 2025

https://github.com/secure-software-engineering/tamiflex.benchmarks

Automatically exported from code.google.com/p/tamiflex.benchmarks

Last synced: 02 Nov 2025

https://github.com/secure-software-engineering/soot-infoflow-testgenerator

Test case generator for FlowDroid

Last synced: 03 Feb 2026

https://github.com/secure-software-engineering/cards

Component-based Assumptions and Restrictions for Dataflow Specifications

eclipse eclipse-plugin eclipse-sirius java model-based xtend xtext

Last synced: 02 Nov 2025

https://github.com/secure-software-engineering/visuflow

VisuFlow - An Eclipse plugin that helps static code developers in writing static analyses on top of Soot.

Last synced: 05 Oct 2025

https://github.com/secure-software-engineering/sparseide

Sparse IDE/IFDS solver and client implementation

Last synced: 23 Jan 2026

https://github.com/secure-software-engineering/paper-idesolverxx

Supplementary website for the paper "Scaling Interprocedural Static Data-Flow Analysis to Large C/C++ Applications"

Last synced: 24 Jan 2026

https://github.com/secure-software-engineering/mudarri

Source code of the Mudarri IntelliJ plugin, using rule graphs

Last synced: 12 Oct 2025

https://github.com/secure-software-engineering/cilrep

JVM-based representation (and manipulation) of CIL bytecode

Last synced: 02 Nov 2025

https://github.com/secure-software-engineering/actions

Secure Software Engineering groups GitHub Actions - centralized & reusable

Last synced: 31 Aug 2025

https://github.com/secure-software-engineering/soot-panathon

Soot Fork for the ISSTA2018 Panathon

Last synced: 02 Nov 2025

https://github.com/secure-software-engineering/swarm-cg

Swiss Army Knife of Call Graph Micro-Benchmark

Last synced: 28 Jan 2026

https://github.com/secure-software-engineering/cognicrypt-ci-integration

This repository contains code for a Jenkins adaptor for CogniCrypt which is based on warnings-ng-plugin https://github.com/jenkinsci/warnings-ng-plugin

Last synced: 11 Sep 2025