89 citations · 148 across the 12 of their papers we have counts for
12 papers
Enhancing LLMs with Context-Specific Knowledge for Mitigating Misinformation in SMEs: A RAG-based Modeling and Analysis
Md. Samiul Islam, Iqbal H. Sarker, Chadni Islam +3
Large Language Models (LLMs), a part of artificial intelligence (AI), are increasingly being adopted by Small and Medium Enterprises (SMEs) to enhance question-answering capabiliti…
Understanding the Impact of AI Code Assistants on Security API Usage: An Empirical Study
Zahra Mousavi, Chadni Islam, M. Ali Babar +2
AI code assistants are transforming software development, but their implications for software security remain a major concern, particularly in the context of security APIs. These A…
eDySec: A Deep Learning-based Explainable Dynamic Analysis Framework for Detecting Malicious Packages in PyPI Ecosystem
Sk Tanzir Mehedi, Raja Jurdak, Chadni Islam +2
The security of open-source software repositories is increasingly threatened by next-gen software supply chain attacks. These attacks include multiphase malware execution, remote a…
SysPro: Reproducing System-level Concurrency Bugs from Bug Reports
Tarannum Shaila Zaman, Zhihui Yan, Chen Wang +3
Reproducing system-level concurrency bugs requires both input data and the precise interleaving order of system calls. This process is challenging because such bugs are non-determi…
An Investigation into Misuse of Java Security APIs by Large Language Models
Zahra Mousavi, Chadni Islam, Kristen Moore +2
The increasing trend of using Large Language Models (LLMs) for code generation raises the question of their capability to generate trustworthy code. While many researchers are expl…
Analyzing the Evolution of Inter-package Dependencies in Operating Systems: A Case Study of Ubuntu
Victor Prokhorenko, Chadni Islam, Muhammad Ali Babar
An Operating System (OS) combines multiple interdependent software packages, which usually have their own independently developed architectures. When a multitude of independent pac…
A Framework for Migrating to Post-Quantum Cryptography: Security Dependency Analysis and Case Studies
Khondokar Fida Hasan, Leonie Simpson, Mir Ali Rezazadeh Baee +5
Quantum computing is emerging as a significant threat to information protected by widely used cryptographic systems. Cryptographic methods, once deemed secure for decades, are now…
Detecting Misuse of Security APIs: A Systematic Review
Zahra Mousavi, Chadni Islam, M. Ali Babar +2
Security Application Programming Interfaces (APIs) are crucial for ensuring software security. However, their misuse introduces vulnerabilities, potentially leading to severe data…
SmartValidator: A Framework for Automatic Identification and Classification of Cyber Threat Data
Chadni Islam, M. Ali Babar, Roland Croft +1
A wide variety of Cyber Threat Information (CTI) is used by Security Operation Centres (SOCs) to perform validation of security incidents and alerts. Security experts manually defi…
Runtime Software Patching: Taxonomy, Survey and Future Directions
Chadni Islam, Victor Prokhorenko, M. Ali Babar
Runtime software patching aims to minimize or eliminate service downtime, user interruptions and potential data losses while deploying a patch. Due to modern software systems' high…
APIRO: A Framework for Automated Security Tools API Recommendation
Zarrin Tasnim Sworna, Chadni Islam, Muhammad Ali Babar
Security Orchestration, Automation, and Response (SOAR) platforms integrate and orchestrate a wide variety of security tools to accelerate the operational activities of Security Op…
A Multi-Vocal Review of Security Orchestration
Chadni Islam, M. Ali Babar, Surya Nepal
Organizations use diverse types of security solutions to prevent cyberattacks. Multiple vendors provide security solutions developed using heterogeneous technologies and paradigms.…