249 citations · 296 across the 32 of their papers we have counts for
18 papers · 1 filter
Security and Quality in LLM-Generated Code: A Multi-Language, Multi-Model Analysis
Mohammed Kharma, Soohyeon Choi, Mohammed AlKhanafseh +1
Artificial Intelligence (AI)-driven code generation tools are increasingly used throughout the software development lifecycle to accelerate coding tasks. However, the security of A…
Untargeted Code Authorship Evasion with Seq2Seq Transformation
Soohyeon Choi, Rhongho Jang, DaeHun Nyang +1
Code authorship attribution is the problem of identifying authors of programming language codes through the stylistic features in their codes, a topic that recently witnessed signi…
The Infrastructure Utilization of Free Contents Websites Reveal their Security Characteristics
Mohamed Alqadhi, David Mohaisen
Free Content Websites (FCWs) are a significant element of the Web, and realizing their use is essential. This study analyzes FCWs worldwide by studying how they correlate with diff…
Understanding the Country-Level Security of Free Content Websites and their Hosting Infrastructure
Mohammed Alqadhi, Ali Alkinoon, Saeed Salem +1
This paper examines free content websites (FCWs) and premium content websites (PCWs) in different countries, comparing them to general websites. The focus is on the distribution of…
Understanding the Security and Performance of the Web Presence of Hospitals: A Measurement Study
Mohammed Alkinoon, Abdulrahman Alabduljabbar, Hattan Althebeiti +3
Using a total of 4,774 hospitals categorized as government, non-profit, and proprietary hospitals, this study provides the first measurement-based analysis of hospitals' websites a…
SHIELD: Thwarting Code Authorship Attribution
Mohammed Abuhamad, Changhun Jung, David Mohaisen +1
Authorship attribution has become increasingly accurate, posing a serious privacy risk for programmers who wish to remain anonymous. In this paper, we introduce SHIELD to examine t…
Analyzing In-browser Cryptojacking
Muhammad Saad, David Mohaisen
Cryptojacking is the permissionless use of a target device to covertly mine cryptocurrencies. With cryptojacking, attackers use malicious JavaScript codes to force web browsers int…
Learning Location from Shared Elevation Profiles in Fitness Apps: A Privacy Perspective
Ulku Meteriz-Yildiran, Necip Fazil Yildiran, Joongheon Kim +1
The extensive use of smartphones and wearable devices has facilitated many useful applications. For example, with Global Positioning System (GPS)-equipped smart and wearable device…
Do Content Management Systems Impact the Security of Free Content Websites? A Correlation Analysis
Mohammed Alaqdhi, Abdulrahman Alabduljabbar, Kyle Thomas +3
This paper investigates the potential causes of the vulnerabilities of free content websites to address risks and maliciousness. Assembling more than 1,500 websites with free and p…
Enriching Vulnerability Reports Through Automated and Augmented Description Summarization
Hattan Althebeiti, David Mohaisen
Security incidents and data breaches are increasing rapidly, and only a fraction of them is being reported. Public vulnerability databases, e.g., national vulnerability database (N…
ML-based IoT Malware Detection Under Adversarial Settings: A Systematic Evaluation
Ahmed Abusnaina, Afsah Anwar, Sultan Alshamrani +4
The rapid growth of the Internet of Things (IoT) devices is paralleled by them being on the front-line of malicious attacks. This has led to an explosion in the number of IoT malwa…
ShellCore: Automating Malicious IoT Software Detection by Using Shell Commands Representation
Hisham Alasmary, Afsah Anwar, Ahmed Abusnaina +6
The Linux shell is a command-line interpreter that provides users with a command interface to the operating system, allowing them to perform a variety of functions. Although very u…
Understanding Internet of Things Malware by Analyzing Endpoints in their Static Artifacts
Afsah Anwar, Jinchun Choi, Abdulrahman Alabduljabbar +7
The lack of security measures among the Internet of Things (IoT) devices and their persistent online connection gives adversaries a prime opportunity to target them or even abuse t…
e-PoS: Making Proof-of-Stake Decentralized and Fair
Muhammad Saad, Zhan Qin, Kui Ren +2
Blockchain applications that rely on the Proof-of-Work (PoW) have increasingly become energy inefficient with a staggering carbon footprint. In contrast, energy-efficient alternati…
Cleaning the NVD: Comprehensive Quality Assessment, Improvements, and Analyses
Afsah Anwar, Ahmed Abusnaina, Songqing Chen +2
Vulnerability databases are vital sources of information on emergent software security concerns. Security professionals, from system administrators to developers to researchers, he…
A Deep Learning-based Fine-grained Hierarchical Learning Approach for Robust Malware Classification
Ahmed Abusnaina, Mohammed Abuhamad, Hisham Alasmary +5
The wide acceptance of Internet of Things (IoT) for both household and industrial applications is accompanied by several security concerns. A major security concern is their probab…
Contra-*: Mechanisms for Countering Spam Attacks on Blockchain's Memory Pools
Muhammad Saad, Joongheon Kim, DaeHun Nyang +1
Blockchain-based cryptocurrencies, such as Bitcoin, have seen on the rise in their popularity and value, making them a target to several forms of Denial-of-Service (DoS) attacks, a…
Sensor-based Continuous Authentication of Smartphones' Users Using Behavioral Biometrics: A Contemporary Survey
Mohammed Abuhamad, Ahmed Abusnaina, DaeHun Nyang +1
Mobile devices and technologies have become increasingly popular, offering comparable storage and computational capabilities to desktop computers allowing users to store and intera…