@inproceedings{b4548c7ab1c44f4f945677add5ec5620,
title = "FireBugs: Finding and repairing bugs with security patterns",
abstract = "Security is often a critical problem in software systems. The consequences of the failure lead to substantial economic loss or extensive environmental damage. Developing secure software is challenging, and retrofitting existing systems to introduce security is even harder. In this paper, we propose an automated approach for Finding and Repairing Bugs based on security patterns (FireBugs), to repair defects causing security vulnerabilities. To locate and fix security bugs, we apply security patterns that are reusable solutions comprising large amounts of software design experience in many different situations. In the evaluation, we investigated 2,800 Android app repositories to apply our approach to 200 subject projects that use javax.crypto APIs. The vision of our automated approach is to reduce software maintenance burdens where the number of outstanding software defects exceeds available resources. Our ultimate vision is to design more security patterns that have a positive impact on software quality by disseminating correlated sets of best security design practices and knowledge.",
keywords = "Bug Repair, Cryptography, Security, Software Maintenance",
author = "Larry Singleton and Rui Zhao and Myoungkyu Song and Harvey Siy",
note = "Publisher Copyright: {\textcopyright} 2019 IEEE.; 6th IEEE/ACM International Conference on Mobile Software Engineering and Systems, MOBILESoft 2019 ; Conference date: 25-05-2019",
year = "2019",
month = may,
doi = "10.1109/MOBILESoft.2019.00014",
language = "English (US)",
series = "Proceedings - 2019 IEEE/ACM 6th International Conference on Mobile Software Engineering and Systems, MOBILESoft 2019",
publisher = "Institute of Electrical and Electronics Engineers Inc.",
pages = "30--34",
booktitle = "Proceedings - 2019 IEEE/ACM 6th International Conference on Mobile Software Engineering and Systems, MOBILESoft 2019",
}