diff --git a/README.md b/README.md index ab8e7eb1bd..d75a0a4a5d 100644 --- a/README.md +++ b/README.md @@ -187,6 +187,8 @@ Before accepting external contributions, you need to sign our [CLA](https://cla- ## Further reading +You can find a complete list of papers [here](https://fraunhofer-aisec.github.io/cpg/#publications) + A quick write-up of our CPG has been published on arXiv: [1] Konrad Weiss, Christian Banse. A Language-Independent Analysis Platform for Source Code. https://arxiv.org/abs/2203.08424 @@ -205,6 +207,11 @@ An initial publication on the concept of using code property graphs for static a [5] https://github.com/ShiftLeftSecurity/joern/ -Additional extensions of the CPG into the field of Cloud security: +Additional extensions of the CPG to support further use-cases: [6] Christian Banse, Immanuel Kunz, Angelika Schneider and Konrad Weiss. Cloud Property Graph: Connecting Cloud Security Assessments with Static Code Analysis. IEEE CLOUD 2021. https://doi.org/10.1109/CLOUD53861.2021.00014 + +[7] Alexander Küchler, Christian Banse. Representing LLVM-IR in a Code Property Graph. 25th Information Security Conference (ISC). Bali, Indonesia. 2022 + +[8] Maximilian Kaul, Alexander Küchler, Christian Banse. A Uniform Representation of Classical and Quantum Source Code for Static Code Analysis. IEEE International Conference on Quantum Computing and Engineering (QCE). Bellevue, WA, USA. 2023 + diff --git a/docs/docs/index.md b/docs/docs/index.md index 70688c45ef..2c11bd716a 100755 --- a/docs/docs/index.md +++ b/docs/docs/index.md @@ -127,6 +127,30 @@ collaborate and push the boundaries of static code analysis.
+
+

A Uniform Representation of Classical and Quantum Source Code for Static Code Analysis

+
+

Maximilian Kaul, Alexander Küchler, Christian Banse

+

In: IEEE International Conference on Quantum Computing and Engineering (QCE). Bellevue, WA, USA.

+
bibtex +
@inproceedings{kaul2023qcpg,
+  author={Maximilian Kaul and Alexander K\"uchler and Christian Banse},
+  title={A Uniform Representation of Classical and Quantum Source Code for Static Code Analysis},
+  year={2023},
+  booktitle={2023 IEEE International Conference on Quantum Computing and Engineering},
+  series={QCE '23},
+  doi={10.1109/QCE57702.2023.00115},
+  location={Bellevue, WA, USA},
+  publisher={IEEE}
+}
+
+
+
+ preprint
+ paper +
+
+

AbsIntIO: Towards Showing the Absence of Integer Overflows in Binaries using Abstract Interpretation

@@ -134,7 +158,7 @@ collaborate and push the boundaries of static code analysis.

In: ACM ASIA Conference on Computer and Communications Security (Asia CCS). Melbourne, VIC, Australia.

bibtex
@inproceedings{kuechler2023absintio,
-  author={Alexander K\"uchler and Leon Wenning, and Florian Wendland},
+  author={Alexander K\"uchler and Leon Wenning and Florian Wendland},
   title={AbsIntIO: Towards Showing the Absence of Integer Overflows in Binaries using Abstract Interpretation},
   year={2023},
   booktitle={ACM ASIA Conference on Computer and Communications Security},