2 citations · 5 across the 6 of their papers we have counts for
6 papers
From Adoption to Deployment: A Qualitative Study on AI Integration in Software Development Practice
Mahzabin Tamanna, Elizabeth Lin, Sparsha Gowda +2
The increasing adoption of Large Language Models (LLMs) as AI components in modern software systems introduces distinct security risks to the software supply chain. While many cons…
What Are Adversaries Doing? Automating Tactics, Techniques, and Procedures Extraction: A Systematic Review
Mahzabin Tamanna, Shaswata Mitra, Md Erfan +4
Adversaries continuously evolve their tactics, techniques, and procedures (TTPs) to achieve their objectives while evading detection, requiring defenders to continually update thei…
Your Build Scripts Stink: The State of Code Smells in Build Scripts
Mahzabin Tamanna, Yash Chandrani, Matthew Burrows +3
Build scripts automate the process of compiling source code, managing dependencies, running tests, and packaging software into deployable artifacts. These scripts are ubiquitous in…
Security Implications of User Non-compliance Behavior to Software Updates: A Risk Assessment Study
Mahzabin Tamanna, Mohd Anwar, Joseph D. W. Stephens
Software updates are essential to enhance security, fix bugs, and add better features to the existing software. While some users accept software updates, non-compliance remains a w…
Analyzing Challenges in Deployment of the SLSA Framework for Software Supply Chain Security
Mahzabin Tamanna, Sivana Hamer, Mindy Tran +3
In 2023, Sonatype reported a 200\% increase in software supply chain attacks, including major build infrastructure attacks. To secure the software supply chain, practitioners can f…
Trusting code in the wild: Exploring contributor reputation measures to review dependencies in the Rust ecosystem
Sivana Hamer, Nasif Imtiaz, Mahzabin Tamanna +2
Developers rely on open-source packages and must review dependencies to safeguard against vulnerable or malicious upstream code. A careful review of all dependencies changes often…