29 citations · 31 across the 5 of their papers we have counts for
3 papers · 1 filter
Analyzing Challenges in Deployment of the SLSA Framework for Software Supply Chain Security
Mahzabin Tamanna, Sivana Hamer, Mindy Tran +3
In 2023, Sonatype reported a 200\% increase in software supply chain attacks, including major build infrastructure attacks. To secure the software supply chain, practitioners can f…
Trusting code in the wild: Exploring contributor reputation measures to review dependencies in the Rust ecosystem
Sivana Hamer, Nasif Imtiaz, Mahzabin Tamanna +2
Developers rely on open-source packages and must review dependencies to safeguard against vulnerable or malicious upstream code. A careful review of all dependencies changes often…
Just another copy and paste? Comparing the security vulnerabilities of ChatGPT generated code and StackOverflow answers
Sivana Hamer, Marcelo d'Amorim, Laurie Williams
Sonatype's 2023 report found that 97% of developers and security leads integrate generative Artificial Intelligence (AI), particularly Large Language Models (LLMs), into their deve…