13 citations · 15 across the 6 of their papers we have counts for
7 papers
Conflicting Scores, Confusing Signals: An Empirical Study of Vulnerability Scoring Systems
Viktoria Koscinski, Mark Nelson, Ahmet Okutan +2
Accurately assessing software vulnerabilities is essential for effective prioritization and remediation. While various scoring systems exist to support this task, their differing g…
A Novel Approach to Identify Security Controls in Source Code
Ahmet Okutan, Ali Shokri, Viktoria Koscinski +2
Secure by Design has become the mainstream development approach ensuring that software systems are not vulnerable to cyberattacks. Architectural security controls need to be carefu…
Supporting AI/ML Security Workers through an Adversarial Techniques, Tools, and Common Knowledge (AI/ML ATT&CK) Framework
Mohamad Fazelnia, Ahmet Okutan, Mehdi Mirakhorli
This paper focuses on supporting AI/ML Security Workers -- professionals involved in the development and deployment of secure AI-enabled software systems. It presents AI/ML Adversa…
A Grounded Theory Based Approach to Characterize Software Attack Surfaces
Sara Moshtari, Ahmet Okutan, Mehdi Mirakhorli
The notion of Attack Surface refers to the critical points on the boundary of a software system which are accessible from outside or contain valuable content for attackers. The abi…
Near Real-time Learning and Extraction of Attack Models from Intrusion Alerts
Shanchieh Jay Yang, Ahmet Okutan, Gordon Werner +3
Critical and sophisticated cyberattacks often take multitudes of reconnaissance, exploitations, and obfuscation techniques to penetrate through well protected enterprise networks.…
Use of Source Code Similarity Metrics in Software Defect Prediction
Ahmet Okutan
In recent years, defect prediction has received a great deal of attention in the empirical software engineering world. Predicting software defects before the maintenance phase is v…
Forecasting Cyber Attacks with Imbalanced Data Sets and Different Time Granularities
Ahmet Okutan, Shanchieh Jay Yang, Katie McConky
If cyber incidents are predicted a reasonable amount of time before they occur, defensive actions to prevent their destructive effects could be planned. Unfortunately, most of the…