179 citations · 805 across the 48 of their papers we have counts for
13 papers · 1 filter
Privacy Engineering in the Wild: Understanding the Practitioners' Mindset, Organisational Aspects, and Current Practices
Leonardo Horn Iwaya, Muhammad Ali Babar, Awais Rashid
Privacy engineering, as an emerging field of research and practice, comprises the technical capabilities and management processes needed to implement, deploy, and operate privacy f…
LineVD: Statement-level Vulnerability Detection using Graph Neural Networks
David Hin, Andrey Kan, Huaming Chen +1
Current machine-learning based software vulnerability detection methods are primarily conducted at the function-level. However, a key limitation of these methods is that they do no…
APIRO: A Framework for Automated Security Tools API Recommendation
Zarrin Tasnim Sworna, Chadni Islam, Muhammad Ali Babar
Security Orchestration, Automation, and Response (SOAR) platforms integrate and orchestrate a wide variety of security tools to accelerate the operational activities of Security Op…
Well Begun is Half Done: An Empirical Study of Exploitability & Impact of Base-Image Vulnerabilities
Mubin Ul Haque, M. Ali Babar
Container technology, (e.g., Docker) is being widely adopted for deploying software infrastructures or applications in the form of container images. Security vulnerabilities in the…
Systematic Literature Review on Cyber Situational Awareness Visualizations
Liuyue Jiang, Asangi Jayatilaka, Mehwish Nasim +3
The dynamics of cyber threats are increasingly complex, making it more challenging than ever for organizations to obtain in-depth insights into their cyber security status. Therefo…
On the Scalability of Big Data Cyber Security Analytics Systems
Faheem Ullah, Muhammad Ali Babar
Big Data Cyber Security Analytics (BDCA) systems use big data technologies (e.g., Apache Spark) to collect, store, and analyze a large volume of security event data for detecting c…
Automated Security Assessment for the Internet of Things
Xuanyu Duan, Mengmeng Ge, Triet H. M. Le +4
Internet of Things (IoT) based applications face an increasing number of potential security risks, which need to be systematically assessed and addressed. Expert-based manual asses…
Falling for Phishing: An Empirical Investigation into People's Email Response Behaviors
Asangi Jayatilaka, Nalin Asanka Gamagedara Arachchilage, Muhammad Ali Babar
Despite sophisticated phishing email detection systems, and training and awareness programs, humans continue to be tricked by phishing emails. In an attempt to better understand wh…
An Empirical Analysis of Practitioners' Perspectives on Security Tool Integration into DevOps
Roshan Namal Rajapakse, Mansooreh Zahedi, Muhammad Ali Babar
Background: Security tools play a vital role in enabling developers to build secure software. However, it can be quite challenging to introduce and fully leverage security tools wi…
A Review on C3I Systems' Security: Vulnerabilities, Attacks, and Countermeasures
Hussain Ahmad, Isuru Dharmadasa, Faheem Ullah +1
Command, Control, Communication, and Intelligence (C3I) systems are increasingly used in critical civil and military domains for achieving information superiority, operational effi…
Machine Learning for Detecting Data Exfiltration: A Review
Bushra Sabir, Faheem Ullah, M. Ali Babar +1
Context: Research at the intersection of cybersecurity, Machine Learning (ML), and Software Engineering (SE) has recently taken significant steps in proposing countermeasures for d…
A Multi-Vocal Review of Security Orchestration
Chadni Islam, M. Ali Babar, Surya Nepal
Organizations use diverse types of security solutions to prevent cyberattacks. Multiple vendors provide security solutions developed using heterogeneous technologies and paradigms.…
Architectural Tactics for Big Data Cybersecurity Analytic Systems: A Review
Faheem Ullah, M. Ali Babar
Context: Big Data Cybersecurity Analytics is aimed at protecting networks, computers, and data from unauthorized access by analysing security event data using big data tools and te…