| TAJ: effective taint analysis of web applications O Tripp, M Pistoia, SJ Fink, M Sridharan, O Weisman ACM Sigplan Notices 44 (6), 87-97, 2009 | 349 | 2009 |
| Static specification mining using automata-based abstractions S Shoham, E Yahav, SJ Fink, M Pistoia IEEE Transactions on Software Engineering 34 (5), 651-666, 2008 | 211 | 2008 |
| System and method for supporting digital rights management in an enhanced Java™ 2 runtime environment L Koved, MM Mourad, JP Munson, G Pacifici, M Pistoia, AS Youssef US Patent 7,308,717, 2007 | 145 | 2007 |
| Directed test generation for effective fault localization S Artzi, J Dolby, F Tip, M Pistoia Proceedings of the 19th international symposium on Software testing and …, 2010 | 144 | 2010 |
| Saving the world wide web from vulnerable JavaScript S Guarnieri, M Pistoia, O Tripp, J Dolby, S Teilhet, R Berg Proceedings of the 2011 International Symposium on Software Testing and …, 2011 | 134 | 2011 |
| Access rights analysis for Java L Koved, M Pistoia, A Kershenbaum ACM Sigplan Notices 37 (11), 359-372, 2002 | 129 | 2002 |
| Andromeda: Accurate and Scalable Security Analysis of Web Applications O Tripp, M Pistoia, P Cousot, R Cousot, S Guarnieri International Conference on Fundamental Approaches to Software Engineering …, 2013 | 108 | 2013 |
| Software verification system, method and computer program element PH Abbott, L Koved, AJ Nadalin, M Pistoia US Patent 7,496,757, 2009 | 94 | 2009 |
| Practical fault localization for dynamic web applications S Artzi, J Dolby, F Tip, M Pistoia 2010 ACM/IEEE 32nd International Conference on Software Engineering 1, 265-274, 2010 | 92 | 2010 |
| Method, system and computer program product for enforcing privacy policies L Koved, M Pistoia US Patent 7,877,812, 2011 | 84 | 2011 |
| Transparent digital rights management for extendible content viewers MM Mourad, JP Munson, T Nadeem, G Pacifici, M Pistoia, AS Youssef US Patent 7,171,558, 2007 | 84 | 2007 |
| F4F: taint analysis of framework-based web applications M Sridharan, S Artzi, M Pistoia, S Guarnieri, O Tripp, R Berg Proceedings of the 2011 ACM international conference on Object oriented …, 2011 | 82 | 2011 |
| A survey of static analysis methods for identifying security vulnerabilities in software systems M Pistoia, S Chandra, SJ Fink, E Yahav IBM Systems Journal 46 (2), 265-288, 2007 | 81 | 2007 |
| Interprocedural analysis for privileged code placement and tainted variable detection M Pistoia, RJ Flynn, L Koved, VC Sreedhar European Conference on Object-Oriented Programming, 362-386, 2005 | 78 | 2005 |
| Automatic detection of inter-application permission leaks in Android applications D Sbīrlea, MG Burke, S Guarnieri, M Pistoia, V Sarkar IBM Journal of Research and Development 57 (6), 10: 1-10: 12, 2013 | 77 | 2013 |
| Path-and index-sensitive string analysis based on monadic second-order logic T Tateishi, M Pistoia, O Tripp ACM Transactions on Software Engineering and Methodology (TOSEM) 22 (4), 1-33, 2013 | 75 | 2013 |
| Static analysis based error reduction for software applications B Alpern, R Johnson, A Kershenbaum, L Koved, G Leeman, M Pistoia, ... US Patent App. 10/620,078, 2005 | 75 | 2005 |
| Beyond stack inspection: A unified access-control and information-flow security model M Pistoia, A Banerjee, DA Naumann 2007 IEEE Symposium on Security and Privacy (SP'07), 149-163, 2007 | 67 | 2007 |
| Java 2 network security M Pistoia, D Gupta, M Nagnur, A Ramani, DF Reller Prentice Hall 1 (1), 1999 | 64 | 1999 |
| Enterprise Java security: building secure J2EE applications M Pistoia, L Koved, N Nagaratnam, A Nadalin Addison-Wesley Professional, 2004 | 59 | 2004 |
Omer TrippGoogleVerified email at google.com
