Ehsan Firouzi, Ammar Mansuri, Mohammad Ghafari, Maziar Kaveh
{"title":"From Struggle to Simplicity with a Usable and Secure API for Encryption in Java","authors":"Ehsan Firouzi, Ammar Mansuri, Mohammad Ghafari, Maziar Kaveh","doi":"arxiv-2409.05128","DOIUrl":null,"url":null,"abstract":"Cryptography misuses are prevalent in the wild. Crypto APIs are hard to use\nfor developers, and static analysis tools do not detect every misuse. We\ndeveloped SafEncrypt, an API that streamlines encryption tasks for Java\ndevelopers. It is built on top of the native Java Cryptography Architecture,\nand it shields developers from crypto complexities and erroneous low-level\ndetails. Experiments showed that SafEncrypt is suitable for developers with\nvarying levels of experience.","PeriodicalId":501278,"journal":{"name":"arXiv - CS - Software Engineering","volume":"20 1","pages":""},"PeriodicalIF":0.0000,"publicationDate":"2024-09-08","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":"0","resultStr":null,"platform":"Semanticscholar","paperid":null,"PeriodicalName":"arXiv - CS - Software Engineering","FirstCategoryId":"1085","ListUrlMain":"https://doi.org/arxiv-2409.05128","RegionNum":0,"RegionCategory":null,"ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":null,"EPubDate":"","PubModel":"","JCR":"","JCRName":"","Score":null,"Total":0}
引用次数: 0
Abstract
Cryptography misuses are prevalent in the wild. Crypto APIs are hard to use
for developers, and static analysis tools do not detect every misuse. We
developed SafEncrypt, an API that streamlines encryption tasks for Java
developers. It is built on top of the native Java Cryptography Architecture,
and it shields developers from crypto complexities and erroneous low-level
details. Experiments showed that SafEncrypt is suitable for developers with
varying levels of experience.