179 citations · 805 across the 48 of their papers we have counts for
8 papers · 2 filters
Collaborative Application Security Testing for DevSecOps: An Empirical Analysis of Challenges, Best Practices and Tool Support
Roshan Namal Rajapakse, Mansooreh Zahedi, Muhammad Ali Babar
DevSecOps is a software development paradigm that places a high emphasis on the culture of collaboration between developers (Dev), security (Sec) and operations (Ops) teams to deli…
LogGD:Detecting Anomalies from System Logs by Graph Neural Networks
Yongzheng Xie, Hongyu Zhang, Muhammad Ali Babar
Log analysis is one of the main techniques engineers use to troubleshoot faults of large-scale software systems. During the past decades, many log analysis approaches have been pro…
An Empirical Study of Automation in Software Security Patch Management
Nesara Dissanayake, Asangi Jayatilaka, Mansooreh Zahedi +1
Several studies have shown that automated support for different activities of the security patch management process has great potential for reducing delays in installing security p…
Noisy Label Learning for Security Defects
Roland Croft, M. Ali Babar, Huaming Chen
Data-driven software engineering processes, such as vulnerability prediction heavily rely on the quality of the data used. In this paper, we observe that it is infeasible to obtain…
On the Use of Fine-grained Vulnerable Code Statements for Software Vulnerability Assessment Models
Triet H. M. Le, M. Ali Babar
Many studies have developed Machine Learning (ML) approaches to detect Software Vulnerabilities (SVs) in functions and fine-grained code statements that cause such SVs. However, th…
Why, How and Where of Delays in Software Security Patch Management: An Empirical Investigation in the Healthcare Sector
Nesara Dissanayake, Mansooreh Zahedi, Asangi Jayatilaka +1
Numerous security attacks that resulted in devastating consequences can be traced back to a delay in applying a security patch. Despite the criticality of timely patch application,…
An Investigation into Inconsistency of Software Vulnerability Severity across Data Sources
Roland Croft, M. Ali Babar, Li Li
Software Vulnerability (SV) severity assessment is a vital task for informing SV remediation and triage. Ranking of SV severity scores is often used to advise prioritization of pat…
NLP Methods in Host-based Intrusion Detection Systems: A Systematic Review and Future Directions
Zarrin Tasnim Sworna, Zahra Mousavi, Muhammad Ali Babar
Host based Intrusion Detection System (HIDS) is an effective last line of defense for defending against cyber security attacks after perimeter defenses (e.g., Network based Intrusi…