Kim Herzig

Microsoft CloudMine: Data Mining for the Executive Order on Improving the Nation’s Cybersecurity

Kim Herzig, Luke Gostling, Maximilian Grothusmann, Nora Huang, Sascha Just, Alan Klimowski, Yashasvini Ramkumar, Myles McLeroy, Kivanc Muslu, Hitesh Sajnani, Varsha Vadaga

May 2022

Technical report

Chandra Maddila, Apoorva Agrawal, Thomas Zimmermann, Nicole Forsgren, Kim Herzig, Arie van Deursen

MSR-TR-2021-28 | October 2021

Published by Microsoft

Publication

Towards predicting the impact of software changes on building activities

Michele Tufano, Hitesh Sajnani, Kim Herzig

2019 International Conference on Software Engineering | May 2019

DOI Publication Publication Publication Publication

Risk-based attack surface approximation: how much data is enough?

Christopher Theisen, Kim Herzig, Brendan Murphy, Laurie Williams

2017 IEEE/ACM 39th International Conference on Software Engineering: Software Engineering in Practice Track (ICSE-SEIP) | May 2017

Publication

Switching to Git: The Good, the Bad, and the Ugly

Sascha Just, Kim Herzig, Jacek Czerwonka, Brendan Murphy

2016 IEEE 27th International Symposium on Software Reliability Engineering (ISSRE) | October 2016

Publication Project

Approximating Attack Surfaces with Stack Traces

Christopher Theisen, Kim Herzig, Patrick Morrison, Brendan Murphy, Laurie Williams

Companion Proceedings of the 37th International Conference on Software Engineering | May 2015

Please note that this paper is not yet published, but accepted for inclusion.

Publication Project

Code Ownership and Software Quality: A Replication Study

Michaela Greiler, Kim Herzig, Jacek Czerwonka

Proceedings of the 12th Working Conference on Mining Software Repositories | May 2015

Publication Project

Empirically Detecting False Test Alarms Using Association Rules

Kim Herzig, Nachi Nagappan

Companion Proceedings of the 37th International Conference on Software Engineering | May 2015

Publication Project

The Art of Testing Less without Sacrificing Quality

Kim Herzig, Michaela Greiler, Jacek Czerwonka, Brendan Murphy

Proceedings of the 2015 International Conference on Software Engineering | May 2015

Publication Project

Challenges with Applying Vulnerability Prediction Models

Kim Herzig, Brendan Murphy

Proceedings of the 2015 Symposium and Bootcamp on the Science of Security | April 2015

Proceedings of the 2015 Symposium and Bootcamp on the Science of Security

Publication Project

The impact of tangled code changes on defect prediction models

Kim Herzig

Empirical Software Engineering | April 2015, pp. 1-34

Publication Project

Using Pre-Release Test Failures to Build Early Post-Release Defect Prediction Models

Kim Herzig

Proceedings of the 25th International Symposium on Software Reliability Engineering | November 2014

Publication Publication Publication Project

The Impact of Test Ownership and Team Structure on the Reliability and Effectiveness of Quality Test Runs

Kim Herzig, Nachi Nagappan

Proceedings of the 8th International Symposium on Empirical Software Engineering and Measurement | September 2014

Proceedings of the 8th International Symposium on Empirical Software Engineering and Measurement

Publication Publication Publication Project

Predicting Defects Using Change Genealogies

Kim Herzig, Sascha Just, Andreas Rau, Andreas Zeller

Proceedings of the 2013 IEEE 24nd International Symposium on Software Reliability Engineering | November 2013

Publication

It’s not a Bug, It’s a Feature: How Misclassification Impacts Bug Prediction

Kim Herzig, Sascha Just, Andreas Zeller

Proceedings of the 2013 International Conference on Software Engineering | May 2013

Publication Project

The Impact of Tangled Code Changes

Kim Herzig

Proceedings of the 10th Working Conference on Mining Software Repositories | January 2013

http://dl.acm.org/citation.cfm?id=2487085.2487113

Publication

An Empirical Study of the Factors Relating Field Failures and Dependencies

Tom Zimmermann, Nachi Nagappan, Laurie Williams, Kim Herzig, Rahul Premraj

Proceedings of the 4th International Conference on Software Testing, Verification and Validation (ICST) | March 2011

Publication Project Project

Change Bursts as Defect Predictors

Nachi Nagappan, Andreas Zeller, Tom Zimmermann, Kim Herzig, Brendan Murphy

Proceedings of the 21st IEEE International Symposium on Software Reliability Engineering (ISSRE) | November 2010

Proceedings of the 21st IEEE International Symposium on Software Reliability Engineering (ISSRE)

Publication Project Project

Microsoft CloudMine: Data Mining for the Executive Order on Improving the Nation’s Cybersecurity

Kim Herzig, Luke Gostling, Maximilian Grothusmann, Nora Huang, Sascha Just, Alan Klimowski, Yashasvini Ramkumar, Myles McLeroy, Kivanc Muslu, Hitesh Sajnani, Varsha Vadaga

May 2022

Approximating Attack Surfaces with Stack Traces

Christopher Theisen, Kim Herzig, Patrick Morrison, Brendan Murphy, Laurie Williams

Companion Proceedings of the 37th International Conference on Software Engineering | May 2015

Please note that this paper is not yet published, but accepted for inclusion.

Publication Project

Challenges with Applying Vulnerability Prediction Models

Kim Herzig, Brendan Murphy

Proceedings of the 2015 Symposium and Bootcamp on the Science of Security | April 2015

Proceedings of the 2015 Symposium and Bootcamp on the Science of Security

Publication Project

Technical report

Chandra Maddila, Apoorva Agrawal, Thomas Zimmermann, Nicole Forsgren, Kim Herzig, Arie van Deursen

MSR-TR-2021-28 | October 2021

Published by Microsoft

Publication

Towards predicting the impact of software changes on building activities

Michele Tufano, Hitesh Sajnani, Kim Herzig

2019 International Conference on Software Engineering | May 2019

DOI Publication Publication Publication Publication

Risk-based attack surface approximation: how much data is enough?

Christopher Theisen, Kim Herzig, Brendan Murphy, Laurie Williams

2017 IEEE/ACM 39th International Conference on Software Engineering: Software Engineering in Practice Track (ICSE-SEIP) | May 2017

Publication

Switching to Git: The Good, the Bad, and the Ugly

Sascha Just, Kim Herzig, Jacek Czerwonka, Brendan Murphy

2016 IEEE 27th International Symposium on Software Reliability Engineering (ISSRE) | October 2016

Publication Project

Code Ownership and Software Quality: A Replication Study

Michaela Greiler, Kim Herzig, Jacek Czerwonka

Proceedings of the 12th Working Conference on Mining Software Repositories | May 2015

Publication Project

Approximating Attack Surfaces with Stack Traces

Christopher Theisen, Kim Herzig, Patrick Morrison, Brendan Murphy, Laurie Williams

Companion Proceedings of the 37th International Conference on Software Engineering | May 2015

Please note that this paper is not yet published, but accepted for inclusion.

Publication Project

Empirically Detecting False Test Alarms Using Association Rules

Kim Herzig, Nachi Nagappan

Companion Proceedings of the 37th International Conference on Software Engineering | May 2015

Publication Project

The Art of Testing Less without Sacrificing Quality

Kim Herzig, Michaela Greiler, Jacek Czerwonka, Brendan Murphy

Proceedings of the 2015 International Conference on Software Engineering | May 2015

Publication Project

Challenges with Applying Vulnerability Prediction Models

Kim Herzig, Brendan Murphy

Proceedings of the 2015 Symposium and Bootcamp on the Science of Security | April 2015

Proceedings of the 2015 Symposium and Bootcamp on the Science of Security

Publication Project

The impact of tangled code changes on defect prediction models

Kim Herzig

Empirical Software Engineering | April 2015, pp. 1-34

Publication Project

Using Pre-Release Test Failures to Build Early Post-Release Defect Prediction Models

Kim Herzig

Proceedings of the 25th International Symposium on Software Reliability Engineering | November 2014

Publication Publication Publication Project

The Impact of Test Ownership and Team Structure on the Reliability and Effectiveness of Quality Test Runs

Kim Herzig, Nachi Nagappan

Proceedings of the 8th International Symposium on Empirical Software Engineering and Measurement | September 2014

Proceedings of the 8th International Symposium on Empirical Software Engineering and Measurement

Publication Publication Publication Project

It’s not a Bug, It’s a Feature: How Misclassification Impacts Bug Prediction

Kim Herzig, Sascha Just, Andreas Zeller

Proceedings of the 2013 International Conference on Software Engineering | May 2013

Publication Project

An Empirical Study of the Factors Relating Field Failures and Dependencies

Tom Zimmermann, Nachi Nagappan, Laurie Williams, Kim Herzig, Rahul Premraj

Proceedings of the 4th International Conference on Software Testing, Verification and Validation (ICST) | March 2011

Publication Project Project

Change Bursts as Defect Predictors

Nachi Nagappan, Andreas Zeller, Tom Zimmermann, Kim Herzig, Brendan Murphy

Proceedings of the 21st IEEE International Symposium on Software Reliability Engineering (ISSRE) | November 2010

Proceedings of the 21st IEEE International Symposium on Software Reliability Engineering (ISSRE)

Publication Project Project

Code Ownership and Software Quality: A Replication Study

Michaela Greiler, Kim Herzig, Jacek Czerwonka

Proceedings of the 12th Working Conference on Mining Software Repositories | May 2015

Publication Project

Approximating Attack Surfaces with Stack Traces

Christopher Theisen, Kim Herzig, Patrick Morrison, Brendan Murphy, Laurie Williams

Companion Proceedings of the 37th International Conference on Software Engineering | May 2015

Please note that this paper is not yet published, but accepted for inclusion.

Publication Project

Empirically Detecting False Test Alarms Using Association Rules

Kim Herzig, Nachi Nagappan

Companion Proceedings of the 37th International Conference on Software Engineering | May 2015

Publication Project

The Art of Testing Less without Sacrificing Quality

Kim Herzig, Michaela Greiler, Jacek Czerwonka, Brendan Murphy

Proceedings of the 2015 International Conference on Software Engineering | May 2015

Publication Project

Challenges with Applying Vulnerability Prediction Models

Kim Herzig, Brendan Murphy

Proceedings of the 2015 Symposium and Bootcamp on the Science of Security | April 2015

Proceedings of the 2015 Symposium and Bootcamp on the Science of Security

Publication Project

The impact of tangled code changes on defect prediction models

Kim Herzig

Empirical Software Engineering | April 2015, pp. 1-34

Publication Project

Using Pre-Release Test Failures to Build Early Post-Release Defect Prediction Models

Kim Herzig

Proceedings of the 25th International Symposium on Software Reliability Engineering | November 2014

Publication Publication Publication Project

The Impact of Test Ownership and Team Structure on the Reliability and Effectiveness of Quality Test Runs

Kim Herzig, Nachi Nagappan

Proceedings of the 8th International Symposium on Empirical Software Engineering and Measurement | September 2014

Proceedings of the 8th International Symposium on Empirical Software Engineering and Measurement

Publication Publication Publication Project

The impact of tangled code changes on defect prediction models

Kim Herzig

Empirical Software Engineering | April 2015, pp. 1-34

Publication Project

Predicting Defects Using Change Genealogies

Kim Herzig, Sascha Just, Andreas Rau, Andreas Zeller

Proceedings of the 2013 IEEE 24nd International Symposium on Software Reliability Engineering | November 2013

Publication

The Impact of Tangled Code Changes

Kim Herzig

Proceedings of the 10th Working Conference on Mining Software Repositories | January 2013

http://dl.acm.org/citation.cfm?id=2487085.2487113

Publication

Microsoft CloudMine: Data Mining for the Executive Order on Improving the Nation’s Cybersecurity

Kim Herzig, Luke Gostling, Maximilian Grothusmann, Nora Huang, Sascha Just, Alan Klimowski, Yashasvini Ramkumar, Myles McLeroy, Kivanc Muslu, Hitesh Sajnani, Varsha Vadaga

May 2022

Technical report

Chandra Maddila, Apoorva Agrawal, Thomas Zimmermann, Nicole Forsgren, Kim Herzig, Arie van Deursen

MSR-TR-2021-28 | October 2021

Published by Microsoft

Publication

Towards predicting the impact of software changes on building activities

Michele Tufano, Hitesh Sajnani, Kim Herzig

2019 International Conference on Software Engineering | May 2019

DOI Publication Publication Publication Publication

Risk-based attack surface approximation: how much data is enough?

Christopher Theisen, Kim Herzig, Brendan Murphy, Laurie Williams

2017 IEEE/ACM 39th International Conference on Software Engineering: Software Engineering in Practice Track (ICSE-SEIP) | May 2017

Publication

Switching to Git: The Good, the Bad, and the Ugly

Sascha Just, Kim Herzig, Jacek Czerwonka, Brendan Murphy

2016 IEEE 27th International Symposium on Software Reliability Engineering (ISSRE) | October 2016

Publication Project

Code Ownership and Software Quality: A Replication Study

Michaela Greiler, Kim Herzig, Jacek Czerwonka

Proceedings of the 12th Working Conference on Mining Software Repositories | May 2015

Publication Project

Approximating Attack Surfaces with Stack Traces

Christopher Theisen, Kim Herzig, Patrick Morrison, Brendan Murphy, Laurie Williams

Companion Proceedings of the 37th International Conference on Software Engineering | May 2015

Please note that this paper is not yet published, but accepted for inclusion.

Publication Project

Empirically Detecting False Test Alarms Using Association Rules

Kim Herzig, Nachi Nagappan

Companion Proceedings of the 37th International Conference on Software Engineering | May 2015

Publication Project

The Art of Testing Less without Sacrificing Quality

Kim Herzig, Michaela Greiler, Jacek Czerwonka, Brendan Murphy

Proceedings of the 2015 International Conference on Software Engineering | May 2015

Publication Project

Challenges with Applying Vulnerability Prediction Models

Kim Herzig, Brendan Murphy

Proceedings of the 2015 Symposium and Bootcamp on the Science of Security | April 2015

Proceedings of the 2015 Symposium and Bootcamp on the Science of Security

Publication Project

Using Pre-Release Test Failures to Build Early Post-Release Defect Prediction Models

Kim Herzig

Proceedings of the 25th International Symposium on Software Reliability Engineering | November 2014

Publication Publication Publication Project

The Impact of Test Ownership and Team Structure on the Reliability and Effectiveness of Quality Test Runs

Kim Herzig, Nachi Nagappan

Proceedings of the 8th International Symposium on Empirical Software Engineering and Measurement | September 2014

Proceedings of the 8th International Symposium on Empirical Software Engineering and Measurement

Publication Publication Publication Project

Predicting Defects Using Change Genealogies

Kim Herzig, Sascha Just, Andreas Rau, Andreas Zeller

Proceedings of the 2013 IEEE 24nd International Symposium on Software Reliability Engineering | November 2013

Publication

It’s not a Bug, It’s a Feature: How Misclassification Impacts Bug Prediction

Kim Herzig, Sascha Just, Andreas Zeller

Proceedings of the 2013 International Conference on Software Engineering | May 2013

Publication Project

The Impact of Tangled Code Changes

Kim Herzig

Proceedings of the 10th Working Conference on Mining Software Repositories | January 2013

http://dl.acm.org/citation.cfm?id=2487085.2487113

Publication

An Empirical Study of the Factors Relating Field Failures and Dependencies

Tom Zimmermann, Nachi Nagappan, Laurie Williams, Kim Herzig, Rahul Premraj

Proceedings of the 4th International Conference on Software Testing, Verification and Validation (ICST) | March 2011

Publication Project Project

Change Bursts as Defect Predictors

Nachi Nagappan, Andreas Zeller, Tom Zimmermann, Kim Herzig, Brendan Murphy

Proceedings of the 21st IEEE International Symposium on Software Reliability Engineering (ISSRE) | November 2010

Proceedings of the 21st IEEE International Symposium on Software Reliability Engineering (ISSRE)

Publication Project Project

The impact of tangled code changes on defect prediction models

Kim Herzig

Empirical Software Engineering | April 2015, pp. 1-34

Publication Project