37 citations · 124 across the 35 of their papers we have counts for
12 papers · 1 filter
SPIDER4TianoCore: Enhancing Patch-Propagation for the TianoCore UEFI Firmware Development Ecosystem
Laura Baird, Devin Haggitt, Terrance E. Boult +2
We propose and demonstrate SPIDER4TianoCore, a packaged Python command-line tool that provides integration-stage patch-status evidence for the TianoCore/UEFI firmware supply chain.…
Enhancing Bug Report Templates in the TianoCore UEFI Firmware Development Community
Laura Baird, Neelesh Reddybattula, Nazanin Siavash +2
We propose enhancing the bug report templates in the GitHub Issues issue tracking system used by the TianoCore open-source community with the aim of improving the bug triage and re…
An Empirical Study of the TianoCore Community
Nazanin Siavash, Connor Glosner, Ayushi Sharma +4
We investigate the software security and maintenance practices adopted by stakeholders in the TianoCore community and identify opportunities to improve firmware development workflo…
TianoForge: An Automated Bug Triage Approach for the TianoCore UEFI Firmware Development Community
Nazanin Siavash, Terrance E. Boult, Armin Moin
We propose a novel approach to bug triage in the TianoCore open-source UEFI firmware development ecosystem. This integrated approach, called TianoForge, deploys the state of the ar…
Automated Quantum Software and AI Engineering
Nazanin Siavash, Armin Moin
In this paper, we conduct a systematic literature review of (semi-) automated approaches to Quantum Software Engineering (QSE) and Quantum Artificial Intelligence (QAI). Prior work…
LLM4C2Rust: Large Language Models for Automated Memory-Safe Code Transpilation
Sarah Bedell, Nazanin Siavash, Armin Moin
Memory safety has long been a critical challenge in software engineering, particularly for legacy systems written in memory-unsafe languages such as C and C++. Rust, one of the you…
Enhancing Large Language Models with Retrieval Augmented Generation for Software Testing and Inspection Automation
Zoe Fingleton, Nazanin Siavash, Armin Moin
In this paper, we focus on automating two of the widely used Verification and Validation (V&V) activities in the Software Development Lifecycle (SDLC): Software testing and softwar…
Towards Predicting Multi-Vulnerability Attack Chains in Software Supply Chains from Software Bill of Materials Graphs
Laura Baird, Armin Moin
Software supply chain security compromises often stem from cascaded interactions of vulnerabilities, for example, between multiple vulnerable components. Yet, Software Bill of Mate…
A Bayesian Optimization-Based AutoML Framework for Non-Intrusive Load Monitoring
Nazanin Siavash, Armin Moin
Non-Intrusive Load Monitoring (NILM), commonly known as energy disaggregation, aims to estimate the power consumption of individual appliances by analyzing a home's total electrici…
Cascaded Vulnerability Attacks in Software Supply Chains
Laura Baird, Armin Moin
Most of the current software security analysis tools assess vulnerabilities in isolation. However, sophisticated software supply chain security threats often stem from cascaded vul…
"ENERGY STAR" LLM-Enabled Software Engineering Tools
Himon Thakur, Armin Moin
The discussion around AI-Engineering, that is, Software Engineering (SE) for AI-enabled Systems, cannot ignore a crucial class of software systems that are increasingly becoming AI…
State of the Quantum Software Engineering Ecosystem
Nazanin Siavash, Armin Moin
We study the current state of the Quantum Software Engineering (QSE) ecosystem, focusing on the achievements, activities, and engagements from academia and industry, with a special…