11 citations · 15 across the 4 of their papers we have counts for
4 papers
Investigating Vulnerability Disclosures in Open-Source Software Using Bug Bounty Reports and Security Advisories
Jessy Ayala, Yu-Jye Tung, Joshua Garcia
In the world of open-source software (OSS), the number of known vulnerabilities has tremendously increased. The GitHub Advisory Database contains advisories for security risks in G…
A Deep Dive Into How Open-Source Project Maintainers Review and Resolve Bug Bounty Reports
Jessy Ayala, Steven Ngo, Joshua Garcia
Researchers have investigated the bug bounty ecosystem from the lens of platforms, programs, and bug hunters. Understanding the perspectives of bug bounty report reviewers, especia…
A Mixed-Methods Study of Open-Source Software Maintainers On Vulnerability Management and Platform Security Features
Jessy Ayala, Yu-Jye Tung, Joshua Garcia
In open-source software (OSS), software vulnerabilities have significantly increased. Although researchers have investigated the perspectives of vulnerability reporters and OSS con…
An Empirical Study on Workflows and Security Policies in Popular GitHub Repositories
Jessy Ayala, Joshua Garcia
In open-source projects, anyone can contribute, so it is important to have an active continuous integration and continuous delivery (CI/CD) pipeline in addition to a protocol for r…