77 citations · 77 across the 2 of their papers we have counts for
3 papers
cs.SE2024
Trusting code in the wild: Exploring contributor reputation measures to review dependencies in the Rust ecosystem
Sivana Hamer, Nasif Imtiaz, Mahzabin Tamanna +2
Developers rely on open-source packages and must review dependencies to safeguard against vulnerable or malicious upstream code. A careful review of all dependencies changes often…
cs.SE2021★ 77 cited
A Comparative Study of Vulnerability Reporting by Software Composition Analysis Tools
Nasif Imtiaz, Seaver Thorne, Laurie Williams
Background: Modern software uses many third-party libraries and frameworks as dependencies. Known vulnerabilities in these dependencies are a potential security risk. Software comp…
cs.SE2021
Memory Error Detection in Security Testing
Nasif Imtiaz, Laurie Williams
We study 10 C/C++ projects that have been using a static analysis security testing tool. We analyze the historical scan reports generated by the tool and study how frequently memor…