5 papers
A Guide to Stakeholder Analysis for Cybersecurity Researchers
James C Davis, Sophie Chen, Huiyun Peng +2
Stakeholder-based ethics analysis is now a formal requirement for submissions to top cybersecurity research venues. This requirement reflects a growing consensus that cybersecurity…
Is Reuse All You Need? A Systematic Comparison of Regular Expression Composition Strategies
Berk Çakar, Charles M. Sale, Sophie Chen +2
Composing regexes is a common but challenging engineering activity. Software engineers struggle with regex complexity, leading to defects, performance issues, and security vulnerab…
Why Johnny Adopts Identity-Based Software Signing: A Usability Case Study of Sigstore
Kelechi G. Kalu, Sofia Okorafor, Tanmay Singla +3
Software signing is the most robust method for ensuring the integrity and authenticity of components in a software supply chain. Legacy key-managed signing tools (e.g., OpenPGP) bu…
PeaTMOSS: Mining Pre-Trained Models in Open-Source Software
Wenxin Jiang, Jason Jones, Jerin Yasmin +6
Developing and training deep learning models is expensive, so software engineers have begun to reuse pre-trained deep learning models (PTMs) and fine-tune them for downstream tasks…
Reflecting on the Use of the Policy-Process-Product Theory in Empirical Software Engineering
Kelechi G. Kalu, Taylor R. Schorlemmer, Sophie Chen +3
The primary theory of software engineering is that an organization's Policies and Processes influence the quality of its Products. We call this the PPP Theory. Although empirical s…