179 citations · 243 across the 32 of their papers we have counts for
34 papers
From Registry to Repository: How AI Agent Skills Are Written, Adapted, and Maintained
Haoyu Gao, Jai Lal Lulla, Hong Yi Lin +3
AI coding agents increasingly rely on skills: structured context bundles, typically a SKILLmd file with a YAML header and Markdown body, loaded on demand for domain knowledge, w…
When AI Models Become Dependencies: Studying the Evolution of Pre-Trained Model Reuse in Downstream Software Systems
Peerachai Banyongrakkul, Mansooreh Zahedi, Christoph Treude +2
Modern software systems have transitioned from purely code-based architectures to AI-integrated systems where pre-trained models (PTMs) serve as permanent dependencies. However, wh…
Does My README File Need To Be Updated? Exploring LLM-Based README Maintenance
Haoyu Gao, Hong Yi Lin, Christoph Treude +2
README files are critical for understanding and onboarding contributors to open-source software, yet they frequently become outdated. We formulate surgical documentation update rec…
Reading Between the Code Lines: On the Use of Self-Admitted Technical Debt for Security Analysis
Nicolás E. Díaz Ferreyra, Moritz Mock, Max Kretschmann +4
Static Analysis Tools (SATs) are central to security engineering activities, as they enable early identification of code weaknesses without requiring execution. However, their effe…
On Autopilot? An Empirical Study of Human-AI Teaming and Review Practices in Open Source
Haoyu Gao, Peerachai Banyongrakkul, Hao Guan +2
Large Language Models (LLMs) increasingly automate software engineering tasks. While recent studies highlight the accelerated adoption of ``AI as a teammate'' in Open Source Softwa…
From Release to Adoption: Challenges in Reusing Pre-trained AI Models for Downstream Developers
Peerachai Banyongrakkul, Mansooreh Zahedi, Patanamon Thongtanunam +2
Pre-trained models (PTMs) have gained widespread popularity and achieved remarkable success across various fields, driven by their groundbreaking performance and easy accessibility…
AI Failures in the Eyes of the Downstream Developer: A First Look at Concerns, Practices, and Challenges
Haoyu Gao, Mansooreh Zahedi, Wenxin Jiang +3
With the advancement of AI models, more software systems are adopting AI as a component to facilitate automation. Pre-trained models (PTMs) have become a cornerstone of AI-based so…
Documenting Ethical Considerations in Open Source AI Models
Haoyu Gao, Mansooreh Zahedi, Christoph Treude +2
Background: The development of AI-enabled software heavily depends on AI model documentation, such as model cards, due to different domain expertise between software engineers and…
Systematic Literature Review on Application of Learning-based Approaches in Continuous Integration
Ali Kazemi Arani, Triet Huynh Minh Le, Mansooreh Zahedi +1
Context: Machine learning (ML) and deep learning (DL) analyze raw data to extract valuable insights in specific phases. The rise of continuous practices in software projects emphas…
What Can Self-Admitted Technical Debt Tell Us About Security? A Mixed-Methods Study
Nicolás E. Díaz Ferreyra, Mojtaba Shahin, Mansooreh Zahedi +2
Self-Admitted Technical Debt (SATD) encompasses a wide array of sub-optimal design and implementation choices reported in software artefacts (e.g., code comments and commit message…
Are You a Real Software Engineer? Best Practices in Online Recruitment for Software Engineering Studies
Adam Alami, Mansooreh Zahedi, Neil Ernst
Online research platforms, such as Prolific, offer rapid access to diverse participant pools but also pose unique challenges in participant qualification and skill verification. Pr…
Fairness Concerns in App Reviews: A Study on AI-based Mobile Apps
Ali Rezaei Nasab, Maedeh Dashti, Mojtaba Shahin +4
Fairness is one of the socio-technical concerns that must be addressed in software systems. Considering the popularity of mobile software applications (apps) among a wide range of…
Adapting Installation Instructions in Rapidly Evolving Software Ecosystems
Haoyu Gao, Christoph Treude, Mansooreh Zahedi
README files play an important role in providing installation-related instructions to software users and are widely used in open source software systems on platforms such as GitHub…
Evaluating Transfer Learning for Simplifying GitHub READMEs
Haoyu Gao, Christoph Treude, Mansooreh Zahedi
Software documentation captures detailed knowledge about a software product, e.g., code, technologies, and design. It plays an important role in the coordination of development tea…
Mitigating ML Model Decay in Continuous Integration with Data Drift Detection: An Empirical Study
Ali Kazemi Arani, Triet Huynh Minh Le, Mansooreh Zahedi +1
Background: Machine Learning (ML) methods are being increasingly used for automating different activities, e.g., Test Case Prioritization (TCP), of Continuous Integration (CI). How…
Systematic Literature Review on Application of Machine Learning in Continuous Integration
Ali Kazemi Arani, Triet Huynh Minh Le, Mansooreh Zahedi +1
This research conducted a systematic review of the literature on machine learning (ML)-based methods in the context of Continuous Integration (CI) over the past 22 years. The study…
SoK: Machine Learning for Continuous Integration
Ali Kazemi Arani, Mansooreh Zahedi, Triet Huynh Minh Le +1
Continuous Integration (CI) has become a well-established software development practice for automatically and continuously integrating code changes during software development. An…
A Study of Gender Discussions in Mobile Apps
Mojtaba Shahin, Mansooreh Zahedi, Hourieh Khalajzadeh +1
Mobile software apps ("apps") are one of the prevailing digital technologies that our modern life heavily depends on. A key issue in the development of apps is how to design gender…
Collaborative Application Security Testing for DevSecOps: An Empirical Analysis of Challenges, Best Practices and Tool Support
Roshan Namal Rajapakse, Mansooreh Zahedi, Muhammad Ali Babar
DevSecOps is a software development paradigm that places a high emphasis on the culture of collaboration between developers (Dev), security (Sec) and operations (Ops) teams to deli…
An Empirical Study on Secure Usage of Mobile Health Apps: The Attack Simulation Approach
Bakheet Aljedaani, Aakash Ahmad, Mansooreh Zahedi +1
Mobile applications, mobile apps for short, have proven their usefulness in enhancing service provisioning across a multitude of domains that range from smart healthcare, to mobile…
An Empirical Study of Automation in Software Security Patch Management
Nesara Dissanayake, Asangi Jayatilaka, Mansooreh Zahedi +1
Several studies have shown that automated support for different activities of the security patch management process has great potential for reducing delays in installing security p…
Why, How and Where of Delays in Software Security Patch Management: An Empirical Investigation in the Healthcare Sector
Nesara Dissanayake, Mansooreh Zahedi, Asangi Jayatilaka +1
Numerous security attacks that resulted in devastating consequences can be traced back to a delay in applying a security patch. Despite the criticality of timely patch application,…
Evaluation of Security Training and Awareness Programs: Review of Current Practices and Guideline
Asangi Jayatilaka, Nathan Beu, Irina Baetu +4
Evaluating the effectiveness of security awareness and training programs is critical for minimizing organizations' human security risk. Based on a literature review and industry in…
Systematic Literature Review on Cyber Situational Awareness Visualizations
Liuyue Jiang, Asangi Jayatilaka, Mehwish Nasim +3
The dynamics of cyber threats are increasingly complex, making it more challenging than ever for organizations to obtain in-depth insights into their cyber security status. Therefo…