3 papers
cs.CR2025
SIExVulTS: Sensitive Information Exposure Vulnerability Detection System using Transformer Models and Static Analysis
Kyler Katz, Sara Moshtari, Ibrahim Mujhid +2
Sensitive Information Exposure (SIEx) vulnerabilities (CWE-200) remain a persistent and under-addressed threat across software systems, often leading to serious security breaches.…
cs.CR2024
Establishing Minimum Elements for Effective Vulnerability Management in AI Software
Mohamad Fazelnia, Sara Moshtari, Mehdi Mirakhorli
In the rapidly evolving field of artificial intelligence (AI), the identification, documentation, and mitigation of vulnerabilities are paramount to ensuring robust and secure syst…
cs.SE2021
A Grounded Theory Based Approach to Characterize Software Attack Surfaces
Sara Moshtari, Ahmet Okutan, Mehdi Mirakhorli
The notion of Attack Surface refers to the critical points on the boundary of a software system which are accessible from outside or contain valuable content for attackers. The abi…