Andrew Meneely

Publication Activity (10 Years)

Years Active: 2006-2024
Publications (10 Years): 21

Top Topics

Penetration Testing

Natural Language

Security Vulnerabilities

Top Venues

WAMA@SIGSOFT FSE

Publications

Benjamin S. Meyers, Andrew Meneely
Taxonomy-Based Human Error Assessment for Senior Software Engineering Students. SIGCSE (1) (2024)
Brandon N. Keller, Andrew Meneely, Benjamin S. Meyers
What Happens When We Fuzz? Investigating OSS-Fuzz Bug History. CoRR (2023)
Brandon N. Keller, Benjamin S. Meyers, Andrew Meneely
What Happens When We Fuzz? Investigating OSS-Fuzz Bug History. MSR (2023)
Benjamin S. Meyers, Sultan Fahad Almassari, Brandon N. Keller, Andrew Meneely
Examining Penetration Tester Behavior in the Collegiate Penetration Testing Competition. ACM Trans. Softw. Eng. Methodol. 31 (3) (2022)
Benjamin S. Meyers, Andrew Meneely
An Automated Post-Mortem Analysis of Vulnerability Relationships using Natural Language Word Embeddings. ANT/EDI40 (2021)
Nikolaos Alexopoulos, Andrew Meneely, Dorian Arnouts, Max Mühlhäuser
Who are Vulnerability Reporters?: A Large-scale Empirical Study on FLOSS. ESEM (2021)
Nuthan Munaiah, Akond Rahman, Justin Pelletier, Laurie A. Williams, Andrew Meneely
Characterizing Attacker Behavior in a Cybersecurity Penetration Testing Competition. ESEM (2019)
Nuthan Munaiah, Andrew Meneely
Systematization of Vulnerability Discovery Knowledge: Review Protocol. CoRR (2019)
Nuthan Munaiah, Andrew Meneely
Data-driven insights from vulnerability discovery metrics. RCoSE-DDrEE@ICSE (2019)
Benjamin S. Meyers, Nuthan Munaiah, Andrew Meneely, Emily Prud'hommeaux
Pragmatic characteristics of security conversations: an exploratory linguistic analysis. CHASE@ICSE (2019)
Benjamin S. Meyers, Nuthan Munaiah, Emily Prud'hommeaux, Andrew Meneely, Josephine Wolff, Cecilia Ovesdotter Alm, Pradeep K. Murukannaiah
A dataset for identifying actionable feedback in collaborative software development. ACL (2) (2018)
Christopher Theisen, Nuthan Munaiah, Mahran Al-Zyoud, Jeffrey C. Carver, Andrew Meneely, Laurie A. Williams
Attack surface definitions: A systematic literature review. Inf. Softw. Technol. 104 (2018)
Nuthan Munaiah, Benjamin S. Meyers, Cecilia Ovesdotter Alm, Andrew Meneely, Pradeep K. Murukannaiah, Emily Prud'hommeaux, Josephine Wolff, Yang Yu
Natural Language Insights from Code Reviews that Missed a Vulnerability - A Large Scale Study of Chromium. ESSoS (2017)
Nuthan Munaiah, Andrew Meneely, Pradeep K. Murukannaiah
A Domain-Independent Model for Identifying Security Requirements. RE (2017)
Nuthan Munaiah, Felivel Camilo, Wesley Wigham, Andrew Meneely, Meiyappan Nagappan
Do bugs foreshadow vulnerabilities? An in-depth study of the chromium project. Empir. Softw. Eng. 22 (3) (2017)
Daniel E. Krutz, Nuthan Munaiah, Andrew Meneely, Samuel A. Malachowsky
Examining the relationship between security metrics and user ratings of mobile apps: a case study. WAMA@SIGSOFT FSE (2016)
Iván Tactuk Mercado, Nuthan Munaiah, Andrew Meneely
The impact of cross-platform development approaches for mobile applications from the user's perspective. WAMA@SIGSOFT FSE (2016)
Nuthan Munaiah, Andrew Meneely
Beyond the Attack Surface: Assessing Security Risk with Random Walks on Call Graphs. SPRO@CCS (2016)
Nuthan Munaiah, Andrew Meneely
Vulnerability severity scoring and bounties: why the disconnect? SWAN@SIGSOFT FSE (2016)
Felivel Camilo, Andrew Meneely, Meiyappan Nagappan
Do Bugs Foreshadow Vulnerabilities? A Study of the Chromium Project. MSR (2015)
Daniel E. Krutz, Andrew Meneely, Samuel A. Malachowsky
An insider threat activity in a software security course. FIE (2015)
Andrew Meneely, Alberto Rodriguez Tejeda, Brian Spates, Shannon Trudeau, Danielle Neuberger, Katherine Whitlock, Christopher Ketant, Kayla Davis
An empirical investigation of socio-technical code review metrics and security vulnerabilities. SSE@SIGSOFT FSE (2014)
Daniel E. Krutz, Andrew Meneely
Teaching Web Engineering using a project component. FIE (2013)
Andrew Meneely, Harshavardhan Srinivasan, Ayemi Musa, Alberto Rodriguez Tejeda, Matthew Mokary, Brian Spates
When a Patch Goes Bad: Exploring the Properties of Vulnerability-Contributing Commits. ESEM (2013)
Andrew Meneely, Samuel Lucidi
Vulnerability of the day: concrete demonstrations for software engineering undergraduates. ICSE (2013)
Andrew Meneely, Ben H. Smith, Laurie A. Williams
Validating software metrics: A spectrum of philosophies. ACM Trans. Softw. Eng. Methodol. 21 (4) (2012)
Andrew Meneely, Oluyinka Williams
Interactive churn metrics: socio-technical variants of code churn. ACM SIGSOFT Softw. Eng. Notes 37 (6) (2012)
Andrew Meneely, Pete Rotella, Laurie A. Williams
Does adding manpower also affect quality?: an empirical, longitudinal analysis. SIGSOFT FSE (2011)
Andrew Meneely, Laurie A. Williams
Socio-technical developer networks: should we trust our measurements? ICSE (2011)
Yonghee Shin, Andrew Meneely, Laurie A. Williams, Jason A. Osborne
Evaluating Complexity, Code Churn, and Developer Activity Metrics as Indicators of Software Vulnerabilities. IEEE Trans. Software Eng. 37 (6) (2011)
Andrew Meneely, Laurie A. Williams
Strengthening the empirical analysis of the relationship between Linus' Law and software security. ESEM (2010)
Andrew Meneely, Mackenzie Corcoran, Laurie A. Williams
Improving developer activity metrics with issue tracking annotations. WETSoM (2010)
Laurie A. Williams, Andrew Meneely, Grant Shipley
Protection Poker: The New Software Security "Game";. IEEE Secur. Priv. 8 (3) (2010)
Andrew Meneely, Laurie A. Williams
On the Use of Issue Tracking Annotations for Improving Developer Activity Metrics. Adv. Softw. Eng. 2010 (2010)
Andrew Meneely, Laurie A. Williams
On preparing students for distributed software development with a synchronous, collaborative development platform. SIGCSE (2009)
Laurie A. Williams, Michael Gegick, Andrew Meneely
Protection Poker: Structuring Software Security Risk Assessment and Knowledge Transfer. ESSoS (2009)
Andrew Meneely, Laurie A. Williams
Secure open source collaboration: an empirical study of linus' law. CCS (2009)
Andrew Meneely, Laurie A. Williams, Will Snipes, Jason A. Osborne
Predicting failures with developer networks and social network analysis. SIGSOFT FSE (2008)
Andrew Meneely, Laurie A. Williams, Edward F. Gehringer
ROSE: a repository of education-friendly open-source projects. ITiCSE (2008)
Jeremy D. Frens, Andrew Meneely
Fifteen compilers in fifteen days. SIGCSE (2006)