What are Weak Links in the npm Supply Chain?
Nusrat Zahan, Tom Zimmermann, Patrice Godefroid, Brendan Murphy, Chandra Maddila, Laurie Williams
ICSE 2022 | May 2022
Publications
Publications
Publications by Year
-
-
Anomalicious: Automated Detection of Anomalous and Potentially Malicious Commits on GitHub
Danielle Gonzalez, Thomas Zimmermann, Patrice Godefroid, Max Schaefer
International Conference on Software Engineering (ICSE), Software Engineering in Practice (SEIP) track | May 2021
-
Security Trend Analysis with CVE Topic Models
Stephan Neuhaus, Tom Zimmermann
Proceedings of the 21st IEEE International Symposium on Software Reliability Engineering (ISSRE) | November 2010
Searching for a Needle in a Haystack: Predicting Security Vulnerabilities for Windows Vista
Tom Zimmermann, Nachi Nagappan, Laurie Williams
Proceedings of the 3rd International Conference on Software Testing, Verification and Validation (ICST) | April 2010
Most Influential Paper Award at ICST 2020 MIP Practical
-
The Beauty and the Beast: Vulnerabilities in Red Hat’s Packages
Stephan Neuhaus, Thomas Zimmermann
Proceedings of the 2009 USENIX Annual Technical Conference (USENIX ATC) | January 2009
Publications by Research Area
-
What are Weak Links in the npm Supply Chain?
Nusrat Zahan, Tom Zimmermann, Patrice Godefroid, Brendan Murphy, Chandra Maddila, Laurie Williams
ICSE 2022 | May 2022
Anomalicious: Automated Detection of Anomalous and Potentially Malicious Commits on GitHub
Danielle Gonzalez, Thomas Zimmermann, Patrice Godefroid, Max Schaefer
International Conference on Software Engineering (ICSE), Software Engineering in Practice (SEIP) track | May 2021
Security Trend Analysis with CVE Topic Models
Stephan Neuhaus, Tom Zimmermann
Proceedings of the 21st IEEE International Symposium on Software Reliability Engineering (ISSRE) | November 2010
Searching for a Needle in a Haystack: Predicting Security Vulnerabilities for Windows Vista
Tom Zimmermann, Nachi Nagappan, Laurie Williams
Proceedings of the 3rd International Conference on Software Testing, Verification and Validation (ICST) | April 2010
Most Influential Paper Award at ICST 2020 MIP Practical
-
Anomalicious: Automated Detection of Anomalous and Potentially Malicious Commits on GitHub
Danielle Gonzalez, Thomas Zimmermann, Patrice Godefroid, Max Schaefer
International Conference on Software Engineering (ICSE), Software Engineering in Practice (SEIP) track | May 2021
Security Trend Analysis with CVE Topic Models
Stephan Neuhaus, Tom Zimmermann
Proceedings of the 21st IEEE International Symposium on Software Reliability Engineering (ISSRE) | November 2010
Searching for a Needle in a Haystack: Predicting Security Vulnerabilities for Windows Vista
Tom Zimmermann, Nachi Nagappan, Laurie Williams
Proceedings of the 3rd International Conference on Software Testing, Verification and Validation (ICST) | April 2010
Most Influential Paper Award at ICST 2020 MIP Practical
The Beauty and the Beast: Vulnerabilities in Red Hat’s Packages
Stephan Neuhaus, Thomas Zimmermann
Proceedings of the 2009 USENIX Annual Technical Conference (USENIX ATC) | January 2009
Publications by Type
-
What are Weak Links in the npm Supply Chain?
Nusrat Zahan, Tom Zimmermann, Patrice Godefroid, Brendan Murphy, Chandra Maddila, Laurie Williams
ICSE 2022 | May 2022
Anomalicious: Automated Detection of Anomalous and Potentially Malicious Commits on GitHub
Danielle Gonzalez, Thomas Zimmermann, Patrice Godefroid, Max Schaefer
International Conference on Software Engineering (ICSE), Software Engineering in Practice (SEIP) track | May 2021
Security Trend Analysis with CVE Topic Models
Stephan Neuhaus, Tom Zimmermann
Proceedings of the 21st IEEE International Symposium on Software Reliability Engineering (ISSRE) | November 2010
Searching for a Needle in a Haystack: Predicting Security Vulnerabilities for Windows Vista
Tom Zimmermann, Nachi Nagappan, Laurie Williams
Proceedings of the 3rd International Conference on Software Testing, Verification and Validation (ICST) | April 2010
Most Influential Paper Award at ICST 2020 MIP Practical
The Beauty and the Beast: Vulnerabilities in Red Hat’s Packages
Stephan Neuhaus, Thomas Zimmermann
Proceedings of the 2009 USENIX Annual Technical Conference (USENIX ATC) | January 2009