The classifier judged this item not relevant to AI security, so it is left out of lists, feeds, the API and dataset releases. If that is wrong, report a correction on this page.
InfoResearchPeer-reviewed
Measuring and Understanding Expectation Inconsistency in Java Libraries
- Published
- Record updated
Summary
Researchers ask how inconsistencies between Java library behavior and developer expectations create security risks. They propose EIFinder, an automated approach, and apply it to 29,149 popular Java libraries. EIFinder flags 8,156 sensitive APIs across 246 libraries, and manual checks of 1,145 suspicious APIs confirm 972 zero-day remote code execution vulnerabilities affecting 118 popular libraries, including those from Google, Apache and IBM.