77 citations · 82 across the 6 of their papers we have counts for
6 papers
Trusting code in the wild: Exploring contributor reputation measures to review dependencies in the Rust ecosystem
Sivana Hamer, Nasif Imtiaz, Mahzabin Tamanna +2
Developers rely on open-source packages and must review dependencies to safeguard against vulnerable or malicious upstream code. A careful review of all dependencies changes often…
Trusting code in the wild: A social network-based centrality rating for developers in the Rust ecosystem
Nasif Imtiaz, Preya Shabrina, Laurie Williams
As modern software extensively uses open source packages, developers regularly pull in new upstream code through frequent updates. While a manual review of all upstream changes may…
Are your dependencies code reviewed?: Measuring code review coverage in dependency updates
Nasif Imtiaz, Laurie Williams
As modern software extensively uses free open source packages as dependencies, developers have to regularly pull in new third-party code through frequent updates. However, without…
Open or Sneaky? Fast or Slow? Light or Heavy?: Investigating Security Releases of Open Source Packages
Nasif Imtiaz, Aniqa Khanom, Laurie Williams
Vulnerabilities in open source packages can be a security risk for the client projects that use these packages as dependencies. When a new vulnerability is discovered in a package,…
A Comparative Study of Vulnerability Reporting by Software Composition Analysis Tools
Nasif Imtiaz, Seaver Thorne, Laurie Williams
Background: Modern software uses many third-party libraries and frameworks as dependencies. Known vulnerabilities in these dependencies are a potential security risk. Software comp…
Memory Error Detection in Security Testing
Nasif Imtiaz, Laurie Williams
We study 10 C/C++ projects that have been using a static analysis security testing tool. We analyze the historical scan reports generated by the tool and study how frequently memor…