Laurie A. Williams

ORCID

Publication Activity (10 Years)

Years Active: 2000-2024
Publications (10 Years): 148

Top Venues

Publications

Sivana Hamer, Marcelo d'Amorim, Laurie A. Williams
Just another copy and paste? Comparing the security vulnerabilities of ChatGPT generated code and StackOverflow answers. SP (Workshops) (2024)
Imranur Rahman, Nusrat Zahan, Stephen Magill, William Enck, Laurie A. Williams
Characterizing Dependency Update Practice of NPM, PyPI and Cargo Packages. CoRR (2024)
Laurie A. Williams, Sammy Migues, Jamie Boote, Ben Hutchison
Proactive Software Supply Chain Risk Management Framework (P-SSCRM) Version 1. CoRR (2024)
Setu Kumar Basak, K. Virgil English, Ken Ogura, Vitesh Kambara, Bradley Reaves, Laurie A. Williams
AssetHarvester: A Static Analysis Tool for Detecting Assets Protected by Secrets in Software Artifacts. CoRR (2024)
Nusrat Zahan, Philipp Burckhardt, Mikola Lysenko, Feross Aboukhadijeh, Laurie A. Williams
MalwareBench: Malware samples are not enough. MSR (2024)
Greg Tystahl, Yasemin Acar, Michel Cukier, William Enck, Christian Kästner, Alexandros Kapravelos, Dominik Wermke, Laurie A. Williams
S3C2 Summit 2024-03: Industry Secure Supply Chain Summit. CoRR (2024)
Sivana Hamer, Nasif Imtiaz, Mahzabin Tamanna, Preya Shabrina, Laurie A. Williams
Trusting code in the wild: Exploring contributor reputation measures to review dependencies in the Rust ecosystem. CoRR (2024)
Sivana Hamer, Marcelo d'Amorim, Laurie A. Williams
Just another copy and paste? Comparing the security vulnerabilities of ChatGPT generated code and StackOverflow answers. CoRR (2024)
Md Rayhanur Rahman, Setu Kumar Basak, Rezvan Mahdavi-Hezaveh, Laurie A. Williams
Attackers reveal their arsenal: An investigation of adversarial techniques in CTI reports. CoRR (2024)
Nusrat Zahan, Philipp Burckhardt, Mikola Lysenko, Feross Aboukhadijeh, Laurie A. Williams
Shifting the Lens: Detecting Malware in npm Ecosystem with Large Language Models. CoRR (2024)
Laurie A. Williams
Narrowing the Software Supply Chain Attack Vectors: The SSDF Is Wonderful but not Enough. IEEE Secur. Priv. 22 (2) (2024)
Md Rayhanur Rahman, Brandon Wroblewski, Quinn Matthews, Brantley Morgan, Tim Menzies, Laurie A. Williams
Mining Temporal Attack Patterns from Cyberthreat Intelligence Reports. CoRR (2024)
Sarah Elder, Md. Rayhanur Rahman, Gage Fringer, Kunal Kapoor, Laurie A. Williams
A Survey on Software Vulnerability Exploitability Assessment. ACM Comput. Surv. 56 (8) (2024)
Setu Kumar Basak, Lorenzo Neil, Bradley Reaves, Laurie A. Williams
SecretBench: A Dataset of Software Secrets. MSR (2023)
Carl E. Landwehr, Michael K. Reiter, Laurie A. Williams, Gene Tsudik, Trent Jaeger, Tadayoshi Kohno, Apu Kapadia
Looking Backwards (and Forwards): NSF Secure and Trustworthy Computing 20-Year Retrospective Panel Transcription. IEEE Secur. Priv. 21 (2) (2023)
Nusrat Zahan, Parth Kanakiya, Brian Hambleton, Shohanuzzaman Shohan, Laurie A. Williams
OpenSSF Scorecard: On the Path Toward Ecosystem-Wide Automated Security Metrics. IEEE Secur. Priv. 21 (6) (2023)
Setu Kumar Basak, Jamison Cox, Bradley Reaves, Laurie A. Williams
A Comparative Study of Software Secrets Reporting by Secret Detection Tools. CoRR (2023)
Eric Bodden, Sam Weber, Laurie A. Williams
Empirical Evaluation of Secure Development Processes (Dagstuhl Seminar 23181). Dagstuhl Reports 13 (5) (2023)
Nasif Imtiaz, Aniqa Khanom, Laurie A. Williams
Open or Sneaky? Fast or Slow? Light or Heavy?: Investigating Security Releases of Open Source Packages. IEEE Trans. Software Eng. 49 (4) (2023)
Mindy Tran, Yasemin Acar, Michel Cucker, William Enck, Alexandros Kapravelos, Christian Kästner, Laurie A. Williams
S3C2 Summit 2202-09: Industry Secure Suppy Chain Summit. CoRR (2023)
Setu Kumar Basak, Lorenzo Neil, Bradley Reaves, Laurie A. Williams
SecretBench: A Dataset of Software Secrets. CoRR (2023)
Fabio Massacci, Laurie A. Williams
Software Supply Chain Security [Guest Editors' Introduction]. IEEE Secur. Priv. 21 (6) (2023)
Aishwarya Seth, Saikath Bhattacharya, Sarah Elder, Nusrat Zahan, Laurie A. Williams
Comparing Effectiveness and Efficiency of Interactive Application Security Testing (IAST) and Runtime Application Self-Protection (RASP) Tools in a Large Java-based System. CoRR (2023)
Nusrat Zahan, Shohanuzzaman Shohan, Dan Harris, Laurie A. Williams
Do Software Security Practices Yield Fewer Vulnerabilities? ICSE-SEIP (2023)
William Enck, Yasemin Acar, Michel Cukier, Alexandros Kapravelos, Christian Kästner, Laurie A. Williams
S3C2 Summit 2023-06: Government Secure Supply Chain Summit. CoRR (2023)
Nasif Imtiaz, Preya Shabrina, Laurie A. Williams
Trusting code in the wild: A social network-based centrality rating for developers in the Rust ecosystem. CoRR (2023)
Setu Kumar Basak, Lorenzo Neil, Bradley Reaves, Laurie A. Williams
What Challenges Do Developers Face About Checked-in Secrets in Software Artifacts? ICSE (2023)
Setu Kumar Basak, Jamison Cox, Bradley Reaves, Laurie A. Williams
A Comparative Study of Software Secrets Reporting by Secret Detection Tools. ESEM (2023)
Trevor Dunlap, Yasemin Acar, Michel Cucker, William Enck, Alexandros Kapravelos, Christian Kästner, Laurie A. Williams
S3C2 Summit 2023-02: Industry Secure Supply Chain Summit. CoRR (2023)
Nasif Imtiaz, Laurie A. Williams
Are Your Dependencies Code Reviewed?: Measuring Code Review Coverage in Dependency Updates. IEEE Trans. Software Eng. 49 (11) (2023)
Nusrat Zahan, Elizabeth Lin, Mahzabin Tamanna, William Enck, Laurie A. Williams
Software Bills of Materials Are Required. Are We There Yet? IEEE Secur. Priv. 21 (2) (2023)
Md. Rayhanur Rahman, Rezvan Mahdavi-Hezaveh, Laurie A. Williams
What Are the Attackers Doing Now? Automating Cyberthreat Intelligence Extraction from Text on Pace with the Changing Threat Landscape: A Survey. ACM Comput. Surv. 55 (12) (2023)
Setu Kumar Basak, Lorenzo Neil, Bradley Reaves, Laurie A. Williams
What Challenges Do Developers Face About Checked-in Secrets in Software Artifacts? CoRR (2023)
Md Rayhanur Rahman, Laurie A. Williams
Investigating co-occurrences of MITRE ATT\&CK Techniques. CoRR (2022)
Setu Kumar Basak, Lorenzo Neil, Bradley Reaves, Laurie A. Williams
What are the Practices for Secret Management in Software Artifacts? SecDev (2022)
Rui Shu, Tianpei Xia, Laurie A. Williams, Tim Menzies
Dazzle: Using Optimized Generative Adversarial Networks to Address Security Data Class Imbalance Issue. MSR (2022)
William Enck, Laurie A. Williams
Top Five Challenges in Software Supply Chain Security: Observations From 30 Industry and Government Organizations. IEEE Secur. Priv. 20 (2) (2022)
Rezvan Mahdavi-Hezaveh, Sameeha Fatima, Laurie A. Williams
An Extended Model of Software Configuration. CoRR (2022)
Charles Weir, Sammy Migues, Laurie A. Williams
Exploring the Shift in Security Responsibility. IEEE Secur. Priv. 20 (6) (2022)
Sarah Elder, Nusrat Zahan, Rui Shu, Monica Metro, Valeri Kozarev, Tim Menzies, Laurie A. Williams
Do I really need all this work to find vulnerabilities? Empir. Softw. Eng. 27 (6) (2022)
Md Rayhanur Rahman, Laurie A. Williams
From Threat Reports to Continuous Threat Intelligence: A Comparison of Attack Technique Extraction Methods from Textual Artifacts. CoRR (2022)
Rui Shu, Tianpei Xia, Laurie A. Williams, Tim Menzies
Dazzle: Using Optimized Generative Adversarial Networks to Address Security Data Class Imbalance Issue. CoRR (2022)
Setu Kumar Basak, Lorenzo Neil, Bradley Reaves, Laurie A. Williams
What are the Practices for Secret Management in Software Artifacts? CoRR (2022)
Nasif Imtiaz, Laurie A. Williams
Phantom Artifacts & Code Review Coverage in Dependency Updates. CoRR (2022)
Rui Shu, Tianpei Xia, Huy Tu, Laurie A. Williams, Tim Menzies
Reducing the Cost of Training Security Classifier (via Optimized Semi-Supervised Learning). CoRR (2022)
Nusrat Zahan, Thomas Zimmermann, Patrice Godefroid, Brendan Murphy, Chandra Shekhar Maddila, Laurie A. Williams
What are Weak Links in the npm Supply Chain? ICSE (SEIP) (2022)
Sarah Elder, Nusrat Zahan, Rui Shu, Monica Metro, Valeri Kozarev, Tim Menzies, Laurie A. Williams
Do I really need all this work to find vulnerabilities? An empirical case study comparing vulnerability detection techniques on a Java application. CoRR (2022)
Rezvan Mahdavi-Hezaveh, Nirav Ajmeri, Laurie A. Williams
Feature toggles as code: Heuristics and metrics for structuring feature toggles. Inf. Softw. Technol. 145 (2022)
Laurie A. Williams
Trusting Trust: Humans in the Software Supply Chain Loop. IEEE Secur. Priv. 20 (5) (2022)
Nusrat Zahan, Shohanuzzaman Shohan, Dan Harris, Laurie A. Williams
PREPRINT: Do OpenSSF Scorecard Practices Contribute to Fewer Vulnerabilities? CoRR (2022)
Md. Rayhanur Rahman, Nasif Imtiaz, Margaret-Anne D. Storey, Laurie A. Williams
Why secret detection tools are not enough: It's not just about false positives - An industrial case study. Empir. Softw. Eng. 27 (3) (2022)
Nusrat Zahan, Parth Kanakiya, Brian Hambleton, Shohanuzzaman Shohan, Laurie A. Williams
PREPRINT: Can the OpenSSF Scorecard be used to measure the security posture of npm and PyPI? CoRR (2022)
Rui Shu, Tianpei Xia, Laurie A. Williams, Tim Menzies
Omni: automated ensemble with unexpected models against adversarial evasion attack. Empir. Softw. Eng. 27 (1) (2022)
Md. Rayhanur Rahman, Rezvan Mahdavi-Hezaveh, Laurie A. Williams
What are the attackers doing now? Automating cyber threat intelligence extraction from text on pace with the changing threat landscape: A survey. CoRR (2021)
Nasif Imtiaz, Laurie A. Williams
Memory Error Detection in Security Testing. CoRR (2021)
Zhe Yu, Christopher Theisen, Laurie A. Williams, Tim Menzies
Improving Vulnerability Inspection Efficiency Using Active Learning. IEEE Trans. Software Eng. 47 (11) (2021)
Nasif Imtiaz, Seaver Thorn, Laurie A. Williams
A comparative study of vulnerability reporting by software composition analysis tools. ESEM (2021)
Saikath Bhattacharya, Munindar P. Singh, Laurie A. Williams
Software Security Readiness and Deployment. ISSRE Workshops (2021)
Nasif Imtiaz, Seaver Thorn, Laurie A. Williams
A Comparative Study of Vulnerability Reporting by Software Composition Analysis Tools. CoRR (2021)
Charles Weir, Sammy Migues, Mike Ware, Laurie A. Williams
Infiltrating security into development: exploring the world's largest software security study. ESEC/SIGSOFT FSE (2021)
Rui Shu, Tianpei Xia, Jianfeng Chen, Laurie A. Williams, Tim Menzies
How to Better Distinguish Security Bug Reports (Using Dual Hyperparameter Optimization). Empir. Softw. Eng. 26 (3) (2021)
Laurie A. Williams
The People Who Live in Glass Houses Are Happy the Stones Weren't Thrown at Them [From the Editors]. IEEE Secur. Priv. 19 (3) (2021)
Akond Rahman, Md. Rayhanur Rahman, Chris Parnin, Laurie A. Williams
Security Smells in Ansible and Chef Scripts: A Replication Study. ACM Trans. Softw. Eng. Methodol. 30 (1) (2021)
Akond Rahman, Laurie A. Williams
Different Kind of Smells: Security Smells in Infrastructure as Code Scripts. IEEE Secur. Priv. 19 (3) (2021)
Sarah Elder, Nusrat Zahan, Val Kozarev, Rui Shu, Tim Menzies, Laurie A. Williams
Structuring a Comprehensive Software Security Course Around the OWASP Application Security Verification Standard. CoRR (2021)
Nasif Imtiaz, Aniqa Khanom, Laurie A. Williams
Open or Sneaky? Fast or Slow? Light or Heavy?: Investigating Security Releases of Open Source Packages. CoRR (2021)
Sarah Elder, Nusrat Zahan, Valeri Kozarev, Rui Shu, Tim Menzies, Laurie A. Williams
Structuring a Comprehensive Software Security Course Around the OWASP Application Security Verification Standard. ICSE (SEET) (2021)
Nusrat Zahan, Laurie A. Williams, Thomas Zimmermann, Patrice Godefroid, Brendan Murphy, Chandra Shekhar Maddila
What are Weak Links in the npm Supply Chain? CoRR (2021)
Rezvan Mahdavi-Hezaveh, Jacob Dremann, Laurie A. Williams
Software development with feature toggles: practices used by practitioners. Empir. Softw. Eng. 26 (1) (2021)
Md. Rayhanur Rahman, William Enck, Laurie A. Williams
Do configuration management tools make systems more secure?: an empirical research plan. HotSoS (2020)
Md. Rayhanur Rahman, Rezvan Mahdavi-Hezaveh, Laurie A. Williams
A Literature Review on Mining Cyberthreat Intelligence from Unstructured Texts. ICDM (Workshops) (2020)
Christopher Theisen, Laurie A. Williams
Better together: Comparing vulnerability prediction models. Inf. Softw. Technol. 119 (2020)
Akond Rahman, Effat Farhana, Laurie A. Williams
The 'as code' activities: development anti-patterns for infrastructure as code. Empir. Softw. Eng. 25 (5) (2020)
Rui Shu, Tianpei Xia, Laurie A. Williams, Tim Menzies
Omni: Automated Ensemble with Unexpected Models against Adversarial Evasion Attack. CoRR (2020)
Akond Rahman, Effat Farhana, Laurie A. Williams
The 'as Code' Activities: Development Anti-patterns for Infrastructure as Code. CoRR (2020)
Akond Rahman, Effat Farhana, Chris Parnin, Laurie A. Williams
Gang of eight: a defect taxonomy for infrastructure as code scripts. ICSE (2020)
Hui Guo, Özgür Kafali, Anne-Liz Jeukeng, Laurie A. Williams, Munindar P. Singh
Çorba: crowdsourcing to obtain requirements from regulations and breaches. Empir. Softw. Eng. 25 (1) (2020)
Mehdi Mirakhorli, Matthias Galster, Laurie A. Williams
Understanding Software Security from Design to Deployment. ACM SIGSOFT Softw. Eng. Notes 45 (2) (2020)
Nuthan Munaiah, Akond Rahman, Justin Pelletier, Laurie A. Williams, Andrew Meneely
Characterizing Attacker Behavior in a Cybersecurity Penetration Testing Competition. ESEM (2019)
Rui Shu, Tianpei Xia, Jianfeng Chen, Laurie A. Williams, Tim Menzies
Improved Recognition of Security Bugs via Dual Hyperparameter Optimization. CoRR (2019)
Akond Rahman, Rezvan Mahdavi-Hezaveh, Laurie A. Williams
A systematic mapping study of infrastructure as code research. Inf. Softw. Technol. 108 (2019)
Md. Rayhanur Rahman, Akond Rahman, Laurie A. Williams
Share, But be Aware: Security Smells in Python Gists. ICSME (2019)
Rui Shu, Tianpei Xia, Laurie A. Williams, Tim Menzies
Better Security Bug Report Classification via Hyperparameter Optimization. CoRR (2019)
Akond Rahman, Md. Rayhanur Rahman, Chris Parnin, Laurie A. Williams
Security Smells in Infrastructure as Code Scripts. CoRR (2019)
Inger Anne Tøndel, Martin Gilje Jaatun, Daniela Soares Cruzes, Laurie A. Williams
Collaborative security risk estimation in agile software development. Inf. Comput. Secur. 27 (4) (2019)
Nasif Imtiaz, Laurie A. Williams
A synopsis of static analysis alerts on open source software. HotSoS (2019)
Akond Rahman, Laurie A. Williams
Source code properties of defective infrastructure as code scripts. Inf. Softw. Technol. 112 (2019)
Nasif Imtiaz, Akond Rahman, Effat Farhana, Laurie A. Williams
Challenges with responding to static analysis tool alerts. MSR (2019)
Rezvan Mahdavi-Hezaveh, Jacob Dremann, Laurie A. Williams
Feature Toggle Driven Development: Practices usedby Practitioners. CoRR (2019)
Akond Rahman, Chris Parnin, Laurie A. Williams
The seven sins: security smells in infrastructure as code scripts. ICSE (2019)
Akond Rahman, Laurie A. Williams
A bird's eye view of knowledge needs related to penetration testing. HotSoS (2019)
Nasif Imtiaz, Brendan Murphy, Laurie A. Williams
How Do Developers Act on Static Analysis Alerts? An Empirical Study of Coverity Usage. ISSRE (2019)
Laurie A. Williams
Science Leaves Clues. IEEE Secur. Priv. 17 (5) (2019)
Patrick Morrison, Rahul Pandita, Xusheng Xiao, Ram Chillarege, Laurie A. Williams
Are vulnerabilities discovered and resolved like other defects? Empir. Softw. Eng. 23 (3) (2018)
Christopher Theisen, Nuthan Munaiah, Mahran Al-Zyoud, Jeffrey C. Carver, Andrew Meneely, Laurie A. Williams
Attack surface definitions: A systematic literature review. Inf. Softw. Technol. 104 (2018)
Akond Rahman, Asif Partho, Patrick Morrison, Laurie A. Williams
What questions do programmers ask about configuration as code? RCoSE@ICSE (2018)
Patrick J. Morrison, Rahul Pandita, Xusheng Xiao, Ram Chillarege, Laurie A. Williams
Are vulnerabilities discovered and resolved like other defects? ICSE (2018)
Akond Rahman, Laurie A. Williams
Source Code Properties of Defective Infrastructure as Code Scripts. CoRR (2018)
Akond Rahman, Sarah Elder, Faysal Hossain Shezan, Vanessa Frost, Jonathan Stallings, Laurie A. Williams
Categorizing Defects in Infrastructure as Code. CoRR (2018)
Akond Rahman, Laurie A. Williams
Characterizing Defective Configuration Scripts Used for Continuous Deployment. ICST (2018)

Laurie A. Williams.css-eqlu8i{font-size:small;padding-left:4px;}

Publication Activity (10 Years)

Top Topics

Top Venues

Laurie A. Williams