CogniCryptGEN: generating code for the secure usage of crypto APIs

Abstract

Many software applications are insecure because they misuse cryptographic APIs. Prior attempts to address misuses focused on detecting them after the fact. However, avoiding such misuses in the first place would significantly reduce development cost.