使用实用安全的 Java 加密应用程序接口，从苦苦挣扎到化繁为简

arXiv - CS - Software Engineering Pub Date : 2024-09-08 DOI:arxiv-2409.05128

Ehsan Firouzi, Ammar Mansuri, Mohammad Ghafari, Maziar Kaveh

{"title":"使用实用安全的 Java 加密应用程序接口，从苦苦挣扎到化繁为简","authors":"Ehsan Firouzi, Ammar Mansuri, Mohammad Ghafari, Maziar Kaveh","doi":"arxiv-2409.05128","DOIUrl":null,"url":null,"abstract":"Cryptography misuses are prevalent in the wild. Crypto APIs are hard to use\nfor developers, and static analysis tools do not detect every misuse. We\ndeveloped SafEncrypt, an API that streamlines encryption tasks for Java\ndevelopers. It is built on top of the native Java Cryptography Architecture,\nand it shields developers from crypto complexities and erroneous low-level\ndetails. Experiments showed that SafEncrypt is suitable for developers with\nvarying levels of experience.","PeriodicalId":501278,"journal":{"name":"arXiv - CS - Software Engineering","volume":"20 1","pages":""},"PeriodicalIF":0.0000,"publicationDate":"2024-09-08","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":"0","resultStr":"{\"title\":\"From Struggle to Simplicity with a Usable and Secure API for Encryption in Java\",\"authors\":\"Ehsan Firouzi, Ammar Mansuri, Mohammad Ghafari, Maziar Kaveh\",\"doi\":\"arxiv-2409.05128\",\"DOIUrl\":null,\"url\":null,\"abstract\":\"Cryptography misuses are prevalent in the wild. Crypto APIs are hard to use\\nfor developers, and static analysis tools do not detect every misuse. We\\ndeveloped SafEncrypt, an API that streamlines encryption tasks for Java\\ndevelopers. It is built on top of the native Java Cryptography Architecture,\\nand it shields developers from crypto complexities and erroneous low-level\\ndetails. Experiments showed that SafEncrypt is suitable for developers with\\nvarying levels of experience.\",\"PeriodicalId\":501278,\"journal\":{\"name\":\"arXiv - CS - Software Engineering\",\"volume\":\"20 1\",\"pages\":\"\"},\"PeriodicalIF\":0.0000,\"publicationDate\":\"2024-09-08\",\"publicationTypes\":\"Journal Article\",\"fieldsOfStudy\":null,\"isOpenAccess\":false,\"openAccessPdf\":\"\",\"citationCount\":\"0\",\"resultStr\":null,\"platform\":\"Semanticscholar\",\"paperid\":null,\"PeriodicalName\":\"arXiv - CS - Software Engineering\",\"FirstCategoryId\":\"1085\",\"ListUrlMain\":\"https://doi.org/arxiv-2409.05128\",\"RegionNum\":0,\"RegionCategory\":null,\"ArticlePicture\":[],\"TitleCN\":null,\"AbstractTextCN\":null,\"PMCID\":null,\"EPubDate\":\"\",\"PubModel\":\"\",\"JCR\":\"\",\"JCRName\":\"\",\"Score\":null,\"Total\":0}","platform":"Semanticscholar","paperid":null,"PeriodicalName":"arXiv - CS - Software Engineering","FirstCategoryId":"1085","ListUrlMain":"https://doi.org/arxiv-2409.05128","RegionNum":0,"RegionCategory":null,"ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":null,"EPubDate":"","PubModel":"","JCR":"","JCRName":"","Score":null,"Total":0}

引用次数: 0

摘要

密码学滥用在野外非常普遍。开发人员很难使用加密 API，静态分析工具也无法检测到所有滥用行为。我们开发了 SafEncrypt，这是一个为 Java 开发人员简化加密任务的 API。它建立在本地 Java 密码体系结构之上，使开发人员免受密码复杂性和错误低级细节的影响。实验表明，SafEncrypt 适合具有不同经验水平的开发人员使用。

本文章由计算机程序翻译，如有差异，请以英文原文为准。

查看原文本刊更多论文

From Struggle to Simplicity with a Usable and Secure API for Encryption in Java

Cryptography misuses are prevalent in the wild. Crypto APIs are hard to use for developers, and static analysis tools do not detect every misuse. We developed SafEncrypt, an API that streamlines encryption tasks for Java developers. It is built on top of the native Java Cryptography Architecture, and it shields developers from crypto complexities and erroneous low-level details. Experiments showed that SafEncrypt is suitable for developers with varying levels of experience.

求助全文

通过发布文献求助，成功后即可免费获取论文全文。去求助

来源期刊

arXiv - CS - Software Engineering

自引率

0.00%

发文量