Demo Data from EDBT 2026 / reviewers in the wild / expert
Seungeun Yu
dblp:426/3774
· DBLP profile ↗
1ranked-venue papers
0as first author
1since 2021 · last 2025
—ORCID · none
Domains — the database's venue-derived domains; a paper can count in several
Software engineering, systems software and programming languages · 1 · 1 since 2021
Expertise — from the expertise taxonomy: the topics of the expert's papers under the CCF categories. A weight counts papers with recency: 1 for a paper about the topic, 0.3 when the topic is its context, halved every five years.
| Network and information security
1 paper |
Systems and software security · 100% | |
| Software engineering, system software, and programming languages
1 paper |
Program analysis · 100% |
Topics — the 3 heaviest of 3, each with the papers that count most for it
| Topic | Weight | Papers | Last | Evidence papers |
|---|---|---|---|---|
Systems and software security › software vulnerability
cryptographic API misuse |
0.9 | 1 | 2025 | Cryptbara: Dependency-Guided Detection of Python Cryptographic API Misuses · ASE 2025 |
Program analysis › static analysis
dependency analysis |
0.3 | 1 | 2025 | Cryptbara: Dependency-Guided Detection of Python Cryptographic API Misuses · ASE 2025 |
Program analysis
static analysis |
0.3 | 1 | 2025 | Cryptbara: Dependency-Guided Detection of Python Cryptographic API Misuses · ASE 2025 |
Methods — techniques the papers use, named apart from their topics
static dependency analysis · 1.7large language model reasoning · 1.7
| Year | Publication | Venue | Position |
|---|---|---|---|
| 2025 | Cryptbara: Dependency-Guided Detection of Python Cryptographic API MisusesabstractWe present Cryptbara, a precise approach for detecting Python cryptographic API misuses. Cryptographic APIs are widely used to ensure data security, but their improper use can inadvertently compromise the security of entire systems. Existing approaches often fail to capture how cryptographic objects are initialized and used across inter-procedural contexts, limiting their ability to detect context-dependent misuses. In contrast, the key innovation of Cryptbara lies in synergistically combining static dependency analysis with LLM reasoning guided by dependency context, enabling context-sensitive misuse detection. To this end, Cryptbara extracts intra- and inter-procedural dependencies from Python code and encodes them into context-rich prompts, allowing the LLM to perform semantically-aware analysis despite syntactic complexity. We evaluated Cryptbara on two benchmarks containing real-world cryptographic API misuses. Cryptbara achieved F1 scores of 95.43% and 84%, outperforming existing approaches that achieved at most 73.68% and 70.59% F1 scores, respectively. Cryptbara further demonstrated its practical impact by discovering previously unknown misuses in popular Python repositories, with 22 representative cases reported to and confirmed by maintainers. Seogyeong Cho, Seungeun Yu, Seunghoon Woo |
ASE | 2 |