5 papers
Software Vulnerability Management in the Era of Artificial Intelligence: An Industry Perspective
M. Mehdi Kholoosi, Triet Huynh Minh Le, M. Ali Babar
Artificial Intelligence (AI) has revolutionized software development, particularly by automating repetitive tasks and improving developer productivity. While these advancements are…
A Qualitative Study on Using ChatGPT for Software Security: Perception vs. Practicality
M. Mehdi Kholoosi, M. Ali Babar, Roland Croft
Artificial Intelligence (AI) advancements have enabled the development of Large Language Models (LLMs) that can perform a variety of tasks with remarkable semantic understanding an…
Empirical Analysis of Software Vulnerabilities Causing Timing Side Channels
M. Mehdi Kholoosi, M. Ali Babar, Cemal Yilmaz
Timing attacks are considered one of the most damaging side-channel attacks. These attacks exploit timing fluctuations caused by certain operations to disclose confidential informa…
Data Quality for Software Vulnerability Datasets
Roland Croft, M. Ali Babar, Mehdi Kholoosi
The use of learning-based techniques to achieve automated software vulnerability detection has been of longstanding interest within the software security domain. These data-driven…
KGSecConfig: A Knowledge Graph Based Approach for Secured Container Orchestrator Configuration
Mubin Ul Haque, M. Mehdi Kholoosi, M. Ali Babar
Container Orchestrator (CO) is a vital technology for managing clusters of containers, which may form a virtualized infrastructure for developing and operating software systems. Li…