Software security research & supervision

Advancing software security through source-code analysis, testing, and vulnerability research.

Led by Dr Junaid Akram at COMSATS University Islamabad, Lahore Campus, the SSA Lab develops practical methods and tools for vulnerability detection, malware analysis, code-clone analysis, and automated software testing.

  • Postdoctoral research at SnT, University of Luxembourg
  • PhD from Tsinghua University
  • HEC-approved PhD Supervisor
0B+Lines of Code AnalyzedIndexed on Hadoop MapReduce
0+Open-Source Repos ScannedSQVDT Vulnerability Engine
0+High-Impact PublicationsApplied Soft Computing, IEEE, IET
0+Researchers & Students MentoredPhD, MS & BS Engineering Graduates

Interactive Vulnerability Inspection

Code Vulnerability & Remediation Analysis

Explore real-world CVE vulnerability patterns and their verified secure remediations across multiple programming languages.

Vulnerability Inspector
CRITICAL 9.8CVE-2015-7547CWE-120: Buffer Copy without Checking Size
VULNERABLE CODE
// Vulnerable: Unbounded string copy
void parse_input(char *user_str) {
    char buffer[64];
    // Risk: Stack buffer overflow
    strcpy(buffer, user_str); 
    process_data(buffer);
}
REMEDIATED CODE
// Patched: Bounded copy with size check
void parse_input(const char *user_str) {
    char buffer[64];
    if (snprintf(buffer, sizeof(buffer), "%s", user_str) >= sizeof(buffer)) {
        log_security_alert("Buffer truncation detected", user_str);
        return;
    }
    process_data(buffer);
}
Identified Vulnerabilitystrcpy() copies untrusted input without bounds checking, leading to stack corruption.
Applied RemediationReplaced with bounded snprintf() and strict length verification.

Research domains

Focused on practical software-security problems

View all research
01Explore Roadmap
Cyber Security 3D Illustration

Cyber Security

Source-level assessment methods for identifying, understanding, and mitigating software vulnerabilities.

02Explore Roadmap
Vulnerability Detection 3D Illustration

Vulnerability Detection

Scalable techniques and tools that trace vulnerable code through patches, fingerprints, and code similarity.

03Explore Roadmap
Software Testing 3D Illustration

Software Testing

Search-based testing, automated test-data generation, regression testing, and test-smell detection.

04Explore Roadmap
Malware Detection 3D Illustration

Malware Detection

Static and learning-based analysis of Android and cross-architecture malware at source-code level.

05Explore Roadmap
Code Clone Analysis 3D Illustration

Code Clone Analysis

Large-scale detection of exact, near-miss, and obfuscated code clones across software systems.

06Explore Roadmap
Software Evolution & Reuse 3D Illustration

Software Evolution & Reuse

Understanding how code, vulnerabilities, and reusable components propagate between systems.

Research Methodology

How Our Research Works

How our lab transforms source code repositories, patch data, and test suites into verified security benchmarks, published research, and student production systems.

SSA Core Engine

Static Analysis · Vulnerability Scanning · Clone Detection

324B+ Lines Indexed
Source EvidenceINPUT
git clone & cve_parse_patch()

152,823+ Open Source Repositories

Security ToolsSQVDT

Vulnerability detection & obfuscation analyzer tools

99.4% Accuracy
PublicationsQ1 JOURNAL

Applied Soft Computing & IEEE Security papers

25+ Papers Published
Innovation & ImpactIMPACT

Practical contribution to researchers, developers, industry, and society

Supervision & Security Platforms
SSA Core Engine

Static Analysis · Vulnerability Scanning · Clone Detection

324B+ Lines Indexed
1. Source EvidenceINPUT
git clone & cve_parse_patch()

152,823+ Open Source Repositories

2. Security ToolsSQVDT

Vulnerability detection & obfuscation analyzer tools

99.4% Accuracy
3. PublicationsQ1 JOURNAL

Applied Soft Computing & IEEE Security papers

25+ Papers Published
4. Innovation & ImpactIMPACT

Practical contribution to researchers, developers, industry, and society

Supervision & Security Platforms
Full automated flow from code collection to publication & project deployment

Publications

Selected research output

View all publications
2025

An Advanced Ensemble Framework for Defending Against Obfuscated Windows, Android, and IoT Malware

Applied Soft Computing, Volume 173, 112908

2022

Obfuscated Code is Identifiable by a Token Based Clone Detection Technique

International Journal of Information and Computer Security, 19(3–4), 254–273

2021

DroidMD: An Efficient and Scalable Android Malware Detection Approach at Source Code Level

International Journal of Information and Computer Security, 16(3/4)

2021

SQVDT: Scalable Quantitative Vulnerability Detection Technique for Source Code Security Assessment

Software: Practice and Experience, 51(2), 294–318

Supervision

Research Project Supervision

Explore supervision directory

Collaborate with SSA Lab

Interested in software security research or student supervision?

Dr Junaid Akram supervises BS, MS, and PhD students in software vulnerability detection, automated testing, malware analysis, and code clone research.

Academic and Research Affiliations

COMSATS University Islamabad
Tsinghua University
SnT, University of Luxembourg
SES Satellites
King Fahd University of Petroleum & Minerals