TAJ: effective taint analysis of web applications. - Omer Tripp; Marco Pistoia; Stephen J. Fink; Manu Sridharan; Omri Weisman (PLDI, 2009)

A dynamic evaluation of the precision of static heap abstractions. - Percy Liang; Omer Tripp; Mayur Naik; Mooly Sagiv (OOPSLA, 2010)

Saving the world wide web from vulnerable JavaScript. - Salvatore Guarnieri; Marco Pistoia; Omer Tripp; Julian Dolby; Stephen Teilhet; Ryan Berg (ISSTA, 2011)

F4F: taint analysis of framework-based web applications. - Manu Sridharan; Shay Artzi; Marco Pistoia; Salvatore Guarnieri; Omer Tripp; Ryan Berg (OOPSLA, 2011)

HAWKEYE: effective discovery of dataflow impediments to parallelization. - Omer Tripp; Greta Yorsh; John Field; Mooly Sagiv (OOPSLA, 2011)

Learning minimal abstractions. - Percy Liang; Omer Tripp; Mayur Naik (POPL, 2011)

JANUS: exploiting parallelism via hindsight. - Omer Tripp; Roman Manevich; John Field; Mooly Sagiv (PLDI, 2012)

Andromeda: Accurate and Scalable Security Analysis of Web Applications. - Omer Tripp; Marco Pistoia; Patrick Cousot; Radhia Cousot; Salvatore Guarnieri (FASE, 2013)

Finding your way in the testing jungle: a learning approach to web security testing. - Omer Tripp; Omri Weisman; Lotem Guy (ISSTA, 2013)

Turning nondeterminism into parallelism. - Omer Tripp; Eric Koskinen; Mooly Sagiv (OOPSLA, 2013)

Tightfit: adaptive parallelization with foresight. - Omer Tripp; Noam Rinetzky (ESEC/SIGSOFT FSE, 2013)

Path- and index-sensitive string analysis based on monadic second-order logic. - Takaaki Tateishi; Marco Pistoia; Omer Tripp (ACM Trans. Softw. Eng. Methodol., 2013)

ALETHEIA: Improving the Usability of Static Security Analysis. - Omer Tripp; Salvatore Guarnieri; Marco Pistoia; Aleksandr Y. Aravkin (CCS, 2014)

Hybrid security analysis of web JavaScript code via dynamic partial evaluation. - Omer Tripp; Pietro Ferrara 001; Marco Pistoia (ISSTA, 2014)

Flint: fixing linearizability violations. - Peng Liu 010; Omer Tripp; Xiangyu Zhang 001 (OOPSLA, 2014)

Integrating Security, Analytics and Application Management into the Mobile Development Lifecycle. - Marco Pistoia; Omer Tripp (MobileDeLi, 2014)

Grail: context-aware fixing of concurrency bugs. - Peng Liu 010; Omer Tripp; Charles Zhang 001 (SIGSOFT FSE, 2014)

A Bayesian Approach to Privacy Enforcement in Smartphones. - Omer Tripp; Julia Rubin (USENIX Security Symposium, 2014)

Incorporating data abstractions into concurrency control - Omer Tripp (2014)

MorphDroid: Fine-grained Privacy Verification. - Pietro Ferrara 001; Omer Tripp; Marco Pistoia (ACSAC, 2015)

Effective Search-Space Pruning for Solvers of String Equations, Regular Expressions and Length Constraints. - Yunhui Zheng; Vijay Ganesh 001; Sanu Subramanian; Omer Tripp; Julian Dolby; Xiangyu Zhang 001 (CAV (1), 2015)

Privacy Analysis of Android Apps: Implicit Flows and Quantitative Analysis. - Gianluca Barbon; Agostino Cortesi; Pietro Ferrara 001; Marco Pistoia; Omer Tripp (CISIM, 2015)

Access-rights Analysis in the Presence of Subjects. - Paolina Centonze; Marco Pistoia; Omer Tripp (ECOOP, 2015)

Application- and User-Sensitive Privacy Enforcement in Mobile Systems. - Omer Tripp; Marco Pistoia; Paolina Centonze (MOBILESoft, 2015)

Dynamic detection of inter-application communication vulnerabilities in Android. - Roee Hay; Omer Tripp; Marco Pistoia (ISSTA, 2015)

Labyrinth: Visually Configurable Data-Leakage Detection in Mobile Applications. - Marco Pistoia; Omer Tripp; Paolina Centonze; Joseph W. Ligman (MDM (1), 2015)

ShamDroid: gracefully degrading functionality in the presence of limited resource access. - Lucas Brutschy; Pietro Ferrara 001; Omer Tripp; Marco Pistoia (OOPSLA, 2015)

Automatic detection, correction, and visualization of security vulnerabilities in mobile apps. - Marco Pistoia; Omer Tripp; Pietro Ferrara 001; Paolina Centonze (MobileDeLi, 2015)

Light: replay via tightly bounded recording. - Peng Liu 010; Xiangyu Zhang 001; Omer Tripp; Yunhui Zheng (PLDI, 2015)

Datacentric Semantics for Verification of Privacy Policy Compliance by Mobile Applications. - Agostino Cortesi; Pietro Ferrara 001; Marco Pistoia; Omer Tripp (VMCAI, 2015)

FASE: functionality-aware security enforcement. - Petar Tsankov; Marco Pistoia; Omer Tripp; Martin T. Vechev; Pietro Ferrara 001 (ACSAC, 2016)

A framework for automatic anomaly detection in mobile applications. - Mauro Baluda; Marco Pistoia; Paul C. Castro; Omer Tripp (MOBILESoft, 2016)

Eavesdropping and obfuscation techniques for smartphones. - Supriyo Chakraborty; Omer Tripp (MOBILESoft, 2016)

Improving design validation of mobile application user interface implementation. - Joe W. Ligman; Marco Pistoia; Omer Tripp; Gegi Thomas (MOBILESoft, 2016)

Cognitive mobile security: invited conference keynote. - David M. Lubensky; Marco Pistoia; Ching-Yung Lin; Omer Tripp (MOBILESoft, 2016)

Pinpointing mobile malware using code analysis. - Omer Tripp; Marco Pistoia; Pietro Ferrara 001; Julia Rubin (MOBILESoft, 2016)

IPA: improving predictive analysis with pointer analysis. - Peng Liu 010; Omer Tripp; Xiangyu Zhang 001 (ISSTA, 2016)

Directed synthesis of failing concurrent executions. - Malavika Samak; Omer Tripp; Murali Krishna Ramanathan (OOPSLA, 2016)

Revamping JavaScript static analysis via localization and remediation of root causes of imprecision. - Shiyi Wei; Omer Tripp; Barbara G. Ryder; Julian Dolby (SIGSOFT FSE, 2016)

A Solver for a Theory of Strings and Bit-vectors. - Sanu Subramanian; Murphy Berzish; Yunhui Zheng; Omer Tripp; Vijay Ganesh 001 (CoRR, 2016)

Synergies among Testing, Verification, and Repair for Concurrent Programs (Dagstuhl Seminar 16201). - Julian Dolby; Orna Grumberg; Peter Müller 001; Omer Tripp (Dagstuhl Reports, 2016)

Visual Configuration of Mobile Privacy Policies. - Abdulbaki Aydin; David Piorkowski; Omer Tripp; Pietro Ferrara 001; Marco Pistoia (FASE, 2017)

Identifying Android library dependencies in the presence of code obfuscation and minimization. - Salman Abdul Baset; Shih-Wei Li; Philippe Suter; Omer Tripp (ICSE (Companion Volume), 2017)

A solver for a theory of string and bit-vectors. - Sanu Subramanian; Murphy Berzish; Vijay Ganesh 001; Omer Tripp (ICSE (Companion Volume), 2017)

Foraging goes mobile: Foraging while debugging on mobile devices. - David Piorkowski; Sean Penney; Austin Z. Henley; Marco Pistoia; Margaret M. Burnett; Omer Tripp; Pietro Ferrara 001 (VL/HCC, 2017)

Using Abstract Interpretation to Correct Synchronization Faults. - Pietro Ferrara 001; Omer Tripp; Peng Liu 010; Eric Koskinen (VMCAI, 2017)

Z3str2: an efficient solver for strings, regular expressions, and length constraints. - Yunhui Zheng; Vijay Ganesh 001; Sanu Subramanian; Omer Tripp; Murphy Berzish; Julian Dolby; Xiangyu Zhang 001 (Formal Methods Syst. Des., 2017)

Automatic Generation of Precise and Useful Commutativity Conditions. - Kshitij Bansal; Eric Koskinen; Omer Tripp (TACAS (1), 2018)

Automatic Generation of Precise and Useful Commutativity Conditions (Extended Version). - Kshitij Bansal; Eric Koskinen; Omer Tripp (CoRR, 2018)

Introduction to the special issue: SAAP-2017 (Static Analysis of Android Apps: Security and Privacy). - Agostino Cortesi; Omer Tripp (J. Comput. Lang., 2019)

Synthesizing Precise and Useful Commutativity Conditions. - Kshitij Bansal; Eric Koskinen; Omer Tripp (J. Autom. Reason., 2020)

SAND: a static analysis approach for detecting SQL antipatterns. - Yingjun Lyu; Sasha Volokh; William G. J. Halfond; Omer Tripp (ISSTA, 2021)

Static Analysis for AWS Best Practices in Python Code. - Rajdeep Mukherjee; Omer Tripp; Ben Liblit; Michael Wilson (ECOOP, 2022)

Shifting Left for Early Detection of Machine-Learning Bugs. - Ben Liblit; Linghui Luo; Alejandro Molina 002; Rajdeep Mukherjee; Zachary Patterson; Goran Piskachev; Martin Schäf; Omer Tripp; Willem Visser (FM, 2023)

A Language-agnostic Framework for Mining Static Analysis Rules from Code Changes. - Sedick Baker Effendi; Berk Çirisci; Rajdeep Mukherjee; Hoan Anh Nguyen; Omer Tripp (ICSE-SEIP, 2023)

Long-term Static Analysis Rule Quality Monitoring Using True Negatives. - Linghui Luo; Rajdeep Mukherjee; Omer Tripp; Martin Schäf; Qiang Zhou 009; Daniel Sanchez (ICSE-SEIP, 2023)

User-Assisted Code Query Optimization. - Ben Liblit; Yingjun Lyu; Rajdeep Mukherjee; Omer Tripp; Yanjun Wang 005 (SOAP@PLDI, 2023)

Compositional Taint Analysis for Enforcing Security Policies at Scale. - Subarno Banerjee; Siwei Cui; Michael Emmi; Antonio Filieri; Liana Hadarean; Peixuan Li; Linghui Luo; Goran Piskachev; Nicolás Rosner; Aritra Sengupta; Omer Tripp; Jingbo Wang 006 (ESEC/SIGSOFT FSE, 2023)

Inference for Ever-Changing Policy of Taint Analysis. - Wen-Hao Chiang; Peixuan Li; Qiang Zhou 009; Subarno Banerjee; Martin Schäf; Yingjun Lyu; Hoan Nguyen; Omer Tripp (ICSE-SEIP, 2024)

Understanding Developer-Analyzer Interactions in Code Reviews. - Martin Schäf; Berk Çirisci; Linghui Luo; Muhammad Numair Mansur; Omer Tripp; Daniel Sanchez; Qiang Zhou 009; Muhammad Bilal Zafar (ASE, 2024)

NL2Code-Reasoning and Planning with LLMs for Code Development. - Ye Xing; Jun Huan; Wee Hyong Tok; Cong Shen 001; Johannes Gehrke; Katherine Lin; Arjun Guha; Omer Tripp; Murali Krishna Ramanathan (KDD, 2024)

A Deep Dive into Large Language Models for Automated Bug Localization and Repair. - Soneya Binta Hossain; Nan Jiang 012; Qiang Zhou 009; Xiaopeng Li 002; Wen-Hao Chiang; Yingjun Lyu; Hoan Anh Nguyen; Omer Tripp (Proc. ACM Softw. Eng., 2024)

User-assisted code query customization and optimization. - Ben Liblit; Yingjun Lyu; Rajdeep Mukherjee; Omer Tripp; Yanjun Wang 005 (Int. J. Softw. Tools Technol. Transf., 2024)

QualityFlow: An Agentic Workflow for Program Synthesis Controlled by LLM Quality Checks. - Yaojie Hu; Qiang Zhou 009; Qihong Chen; Xiaopeng Li 002; Linbo Liu; Dejiao Zhang; Amit Kachroo; Talha Oz; Omer Tripp (CoRR, 2025)

MigrationBench: Repository-Level Code Migration Benchmark from Java 8. - Linbo Liu; Xinle Liu; Qiang Zhou; Lin Chen; Yihan Liu; Hoan Nguyen; Behrooz Omidvar-Tehrani; Xi Shen; Jun Huan; Omer Tripp; Anoop Deoras (CoRR, 2025)