63 citations · 92 across the 18 of their papers we have counts for
4 papers · 1 filter
Trusting code in the wild: A social network-based centrality rating for developers in the Rust ecosystem
Nasif Imtiaz, Preya Shabrina, Laurie Williams
As modern software extensively uses open source packages, developers regularly pull in new upstream code through frequent updates. While a manual review of all upstream changes may…
What Challenges Do Developers Face About Checked-in Secrets in Software Artifacts?
Setu Kumar Basak, Lorenzo Neil, Bradley Reaves +1
Throughout 2021, GitGuardian's monitoring of public GitHub repositories revealed a two-fold increase in the number of secrets (database credentials, API keys, and other credentials…
Do I really need all this work to find vulnerabilities? An empirical case study comparing vulnerability detection techniques on a Java application
Sarah Elder, Nusrat Zahan, Rui Shu +4
CONTEXT: Applying vulnerability detection techniques is one of many tasks using the limited resources of a software project. OBJECTIVE: The goal of this research is to assist manag…
Are your dependencies code reviewed?: Measuring code review coverage in dependency updates
Nasif Imtiaz, Laurie Williams
As modern software extensively uses free open source packages as dependencies, developers have to regularly pull in new third-party code through frequent updates. However, without…