170 citations · 564 across the 17 of their papers we have counts for
4 papers · 1 filter
Open or Sneaky? Fast or Slow? Light or Heavy?: Investigating Security Releases of Open Source Packages
Nasif Imtiaz, Aniqa Khanom, Laurie Williams
Vulnerabilities in open source packages can be a security risk for the client projects that use these packages as dependencies. When a new vulnerability is discovered in a package,…
What are Weak Links in the npm Supply Chain?
Nusrat Zahan, Thomas Zimmermann, Patrice Godefroid +3
Modern software development frequently uses third-party packages, raising the concern of supply chain security attacks. Many attackers target popular package managers, like npm, an…
Omni: Automated Ensemble with Unexpected Models against Adversarial Evasion Attack
Rui Shu, Tianpei Xia, Laurie Williams +1
Background: Machine learning-based security detection models have become prevalent in modern malware and intrusion detection systems. However, previous studies show that such model…
Security Smells in Ansible and Chef Scripts: A Replication Study
Akond Rahman, Md. Rayhanur Rahman, Chris Parnin +1
Context: Security smells are recurring coding patterns that are indicative of security weakness, and require further inspection. As infrastructure as code (IaC) scripts, such as An…