3 papers
cs.CR2023
Empirical Analysis of Software Vulnerabilities Causing Timing Side Channels
M. Mehdi Kholoosi, M. Ali Babar, Cemal Yilmaz
Timing attacks are considered one of the most damaging side-channel attacks. These attacks exploit timing fluctuations caused by certain operations to disclose confidential informa…
cs.SE2023
Data Quality for Software Vulnerability Datasets
Roland Croft, M. Ali Babar, Mehdi Kholoosi
The use of learning-based techniques to achieve automated software vulnerability detection has been of longstanding interest within the software security domain. These data-driven…
cs.CR2021
KGSecConfig: A Knowledge Graph Based Approach for Secured Container Orchestrator Configuration
Mubin Ul Haque, M. Mehdi Kholoosi, M. Ali Babar
Container Orchestrator (CO) is a vital technology for managing clusters of containers, which may form a virtualized infrastructure for developing and operating software systems. Li…