Nusrat Zahan

Publication Activity (10 Years)

Years Active: 2018-2024
Publications (10 Years): 19

Top Topics

Gaussian Process

Risk Assessment

Security Vulnerabilities

Top Venues

IEEE Secur. Priv.

Publications

Imranur Rahman, Nusrat Zahan, Stephen Magill, William Enck, Laurie A. Williams
Characterizing Dependency Update Practice of NPM, PyPI and Cargo Packages. CoRR (2024)
Nusrat Zahan, Philipp Burckhardt, Mikola Lysenko, Feross Aboukhadijeh, Laurie A. Williams
MalwareBench: Malware samples are not enough. MSR (2024)
Nusrat Zahan, Philipp Burckhardt, Mikola Lysenko, Feross Aboukhadijeh, Laurie A. Williams
Shifting the Lens: Detecting Malware in npm Ecosystem with Large Language Models. CoRR (2024)
Nusrat Zahan, Parth Kanakiya, Brian Hambleton, Shohanuzzaman Shohan, Laurie A. Williams
OpenSSF Scorecard: On the Path Toward Ecosystem-Wide Automated Security Metrics. IEEE Secur. Priv. 21 (6) (2023)
Aishwarya Seth, Saikath Bhattacharya, Sarah Elder, Nusrat Zahan, Laurie A. Williams
Comparing Effectiveness and Efficiency of Interactive Application Security Testing (IAST) and Runtime Application Self-Protection (RASP) Tools in a Large Java-based System. CoRR (2023)
Nusrat Zahan, Shohanuzzaman Shohan, Dan Harris, Laurie A. Williams
Do Software Security Practices Yield Fewer Vulnerabilities? ICSE-SEIP (2023)
Nusrat Zahan
Software Supply Chain Risk Assessment Framework. ICSE Companion (2023)
Nusrat Zahan, Elizabeth Lin, Mahzabin Tamanna, William Enck, Laurie A. Williams
Software Bills of Materials Are Required. Are We There Yet? IEEE Secur. Priv. 21 (2) (2023)
Sarah Elder, Nusrat Zahan, Rui Shu, Monica Metro, Valeri Kozarev, Tim Menzies, Laurie A. Williams
Do I really need all this work to find vulnerabilities? Empir. Softw. Eng. 27 (6) (2022)
Nusrat Zahan, Thomas Zimmermann, Patrice Godefroid, Brendan Murphy, Chandra Shekhar Maddila, Laurie A. Williams
What are Weak Links in the npm Supply Chain? ICSE (SEIP) (2022)
Sarah Elder, Nusrat Zahan, Rui Shu, Monica Metro, Valeri Kozarev, Tim Menzies, Laurie A. Williams
Do I really need all this work to find vulnerabilities? An empirical case study comparing vulnerability detection techniques on a Java application. CoRR (2022)
Nusrat Zahan, Shohanuzzaman Shohan, Dan Harris, Laurie A. Williams
PREPRINT: Do OpenSSF Scorecard Practices Contribute to Fewer Vulnerabilities? CoRR (2022)
Nusrat Zahan, Parth Kanakiya, Brian Hambleton, Shohanuzzaman Shohan, Laurie A. Williams
PREPRINT: Can the OpenSSF Scorecard be used to measure the security posture of npm and PyPI? CoRR (2022)
Sarah Elder, Nusrat Zahan, Val Kozarev, Rui Shu, Tim Menzies, Laurie A. Williams
Structuring a Comprehensive Software Security Course Around the OWASP Application Security Verification Standard. CoRR (2021)
Kaniz Fatema, Md. Awlad Hossen Rony, Nusrat Zahan, Md. Zahid Hasan
A Multi-attribute Decision Making Approach for Trauma Center Site Selection. ICCCNT (2021)
Sarah Elder, Nusrat Zahan, Valeri Kozarev, Rui Shu, Tim Menzies, Laurie A. Williams
Structuring a Comprehensive Software Security Course Around the OWASP Application Security Verification Standard. ICSE (SEET) (2021)
Nusrat Zahan, Laurie A. Williams, Thomas Zimmermann, Patrice Godefroid, Brendan Murphy, Chandra Shekhar Maddila
What are Weak Links in the npm Supply Chain? CoRR (2021)
Sheikh Tonmoy, Habiba Khan Hiya, Md. Zahid Hasan, K. M. Zubair Hasan, Nusrat Zahan
Breast Cancer Prediction with Gaussian Process Using Anthropometric Parameters. ICCCNT (2021)
Md. Zahid Hasan, Kh. Tanzila Rahman, Rokeya Islam Riya, K. M. Zubair Hasan, Nusrat Zahan
A CNN-Based Classification Model for Recognizing Visual Bengali Font. IJCCI (2018)