The Case of the Poisoned Event Handler: Weaknesses in the Node.js Event-Driven Architecture. - James C. Davis 001; Gregor Kildow; Dongyoon Lee (EUROSEC, 2017)

Node.fz: Fuzzing the Server-Side Event-Driven Architecture. - James C. Davis 001; Arun Thekumparampil; Dongyoon Lee (EuroSys, 2017)

The impact of regular expression denial of service (ReDoS) in practice: an empirical study at the ecosystem scale. - James C. Davis 001; Christy A. Coghlan; Francisco Servant; Dongyoon Lee (ESEC/SIGSOFT FSE, 2018)

A Sense of Time for JavaScript and Node.js: First-Class Timeouts as a Cure for Event Handler Poisoning. - James C. Davis 001; Eric R. Williamson; Dongyoon Lee (USENIX Security Symposium, 2018)

An Empirical Study of GraphQL Schemas. - Erik Wittern; Alan Cha; James C. Davis 001; Guillaume Baudart; Louis Mandel (ICSOC, 2019)

Testing Regex Generalizability And Its Implications: A Large-Scale Many-Language Measurement Study. - James C. Davis 001; Daniel Moyer; Ayaan M. Kazerouni; Dongyoon Lee (ASE, 2019)

Regexes are Hard: Decision-Making, Difficulties, and Risks in Programming Regular Expressions. - Louis G. Michael IV; James Donohue; James C. Davis 001; Dongyoon Lee; Francisco Servant (ASE, 2019)

Ursprung: Provenance for Large-Scale Analytics Environments. - Lukas Rupprecht; James C. Davis 001; Constantine Arnold; Alexander L. R. Lubbock; Darren R. Tyson; Deepavali Bhagwat (SIGMOD Conference, 2019)

Rethinking Regex engines to address ReDoS. - James C. Davis 001 (ESEC/SIGSOFT FSE, 2019)

Why aren't regular expressions a lingua franca? an empirical study on the re-use and portability of regular expressions. - James C. Davis 001; Louis G. Michael IV; Christy A. Coghlan; Francisco Servant; Dongyoon Lee (ESEC/SIGSOFT FSE, 2019)

EdgeWise: A Better Stream Processing Engine for the Edge. - Xinwei Fu; Talha Ghaffar; James C. Davis 001; Dongyoon Lee (USENIX ATC, 2019)

A principled approach to GraphQL query cost analysis. - Alan Cha; Erik Wittern; Guillaume Baudart; James C. Davis 001; Louis Mandel; Jim Alain Laredo (ESEC/SIGSOFT FSE, 2020)

Improving Reproducibility of Data Science Pipelines through Transparent Provenance Capture. - Lukas Rupprecht; James C. Davis 001; Constantine Arnold; Yaniv Gur; Deepavali Bhagwat (Proc. VLDB Endow., 2020)

On the Impact and Defeat of Regular Expression Denial of Service. - James C. Davis 001 (2020)

Low-Power Multi-Camera Object Re-Identification using Hierarchical Neural Networks. - Abhinav Goel; Caleb Tung; Xiao Hu 004; Haobo Wang; James C. Davis 001; George K. Thiruvathukal; Yung-Hsiang Lu (ISLPED, 2021)

A replication of 'DeepBugs: a learning approach to name-based bug detection'. - Jordan Winkler; Abhimanyu Agarwal; Caleb Tung; Dario Rios Ugalde; Young Jin Jung; James C. Davis 001 (ESEC/SIGSOFT FSE, 2021)

Using Selective Memoization to Defeat Regular Expression Denial of Service (ReDoS). - James C. Davis 001; Francisco Servant; Dongyoon Lee (SP, 2021)

An Experience Report on Machine Learning Reproducibility: Guidance for Practitioners and TensorFlow Model Garden Contributors. - Vishnu Banna; Akhil Chinnakotla; Zhengxin Yan; Anirudh Vegesana; Naveen Vivek; Kruthi Krishnappa; Wenxin Jiang 001; Yung-Hsiang Lu; George K. Thiruvathukal; James C. Davis 001 (CoRR, 2021)

Fast and accurate incremental feedback for students' software tests using selective mutation analysis. - Ayaan M. Kazerouni; James C. Davis 001; Arinjoy Basak; Clifford A. Shaffer; Francisco Servant; Stephen H. Edwards (J. Syst. Softw., 2021)

Efficient Computer Vision on Edge Devices with Pipeline-Parallel Hierarchical Neural Networks. - Abhinav Goel; Caleb Tung; Xiao Hu 004; George K. Thiruvathukal; James C. Davis 001; Yung-Hsiang Lu (ASP-DAC, 2022)

Exploiting Input Sanitization for Regex Denial of Service. - Efe Barlas; Xin Du; James C. Davis 001 (ICSE, 2022)

Directed Acyclic Graph-based Neural Networks for Tunable Low-Power Computer Vision. - Abhinav Goel; Caleb Tung; Nick Eliopoulos; Xiao Hu 004; George K. Thiruvathukal; James C. Davis 001; Yung-Hsiang Lu (ISLPED, 2022)

Reflecting on Recurring Failures in IoT Development. - Dharun Anandayuvaraj; James C. Davis 001 (ASE, 2022)

Snapshot Metrics Are Not Enough: Analyzing Software Repositories with Longitudinal Metrics. - Nicholas M. Synovic; Matt Hyatt; Rohan Sethi; Sohini Thota; Shilpika; Allan J. Miller; Wenxin Jiang 001; Emmanuel S. Amobi; Austin Pinderski; Konstantin Läufer; Nicholas J. Hayward; Neil Klingensmith; et al. (ASE, 2022)

An Empirical Study of Artifacts and Security Risks in the Pre-trained Model Supply Chain. - Wenxin Jiang 001; Nicholas Synovic; Rohan Sethi; Aryan Indarapu; Matt Hyatt; Taylor R. Schorlemmer; George K. Thiruvathukal; James C. Davis 001 (SCORED@CCS, 2022)

SoK: Analysis of Software Supply Chain Security by Establishing Secure Design Properties. - Chinenye Okafor; Taylor R. Schorlemmer; Santiago Torres-Arias; James C. Davis 001 (SCORED@CCS, 2022)

"If security is required": Engineering and Security Practices for Machine Learning-based IoT Devices. - Nikhil Krishna Gopalakrishna; Dharun Anandayuvaraj; Annan Detti; Forrest Lee Bland; Sazzadur Rahaman; James C. Davis 001 (SERP4IoT, 2022)

Reflections on software failure analysis. - Paschal C. Amusuo; Aishwarya Sharma; Siddharth R. Rao; Abbey Vincent; James C. Davis 001 (ESEC/SIGSOFT FSE, 2022)

Discrepancies among pre-trained deep neural networks: a new threat to model zoo reliability. - Diego Montes; Pongpatapee Peerapatanapokin; Jeff Schultz; Chengjun Guo; Wenxin Jiang 001; James C. Davis 001 (ESEC/SIGSOFT FSE, 2022)

An Empirical Study on the Impact of Deep Parameters on Mobile App Energy Usage. - Qiang Xu 006; James C. Davis 001; Y. Charlie Hu; Abhilash Jindal (SANER, 2022)

Establishing trust in vehicle-to-vehicle coordination: a sensor fusion approach. - Jakob Veselsky; Jack West; Isaac Ahlgren; George K. Thiruvathukal; Neil Klingensmith; Abhinav Goel; Wenxin Jiang 001; James C. Davis 001; Kyuin Lee; Younghyun Kim 001 (HotMobile, 2022)

Towards a Failure-Aware SDLC for Internet of Things. - Dharun Anandayuvaraj; Pujita Thulluri; Justin Figueroa; Harshit Shandilya; James C. Davis 001 (CoRR, 2022)

Full results for paper "An Empirical Study on the Impact of Deep Parameters on Mobile App Energy Usage" (SANER 2022). - Qiang Xu 006; James C. Davis 001; Y. Charlie Hu; Abhilash Jindal (Zenodo, 2022)

Replication package for paper "An Empirical Study on the Impact of Deep Parameters on Mobile App Energy Usage" (SANER 2022). - Qiang Xu 006; James C. Davis 001; Y. Charlie Hu; Abhilash Jindal (Zenodo, 2022)

Towards Rehosting Embedded Applications as Linux Applications. - Jayashree Srinivasan; Sai Ritvik Tanksalkar; Paschal C. Amusuo; James C. Davis 001; Aravind Machiry (DSN-S, 2023)

An Empirical Study of Pre-Trained Model Reuse in the Hugging Face Deep Learning Model Registry. - Wenxin Jiang 001; Nicholas Synovic; Matt Hyatt; Taylor R. Schorlemmer; Rohan Sethi; Yung-Hsiang Lu; George K. Thiruvathukal; James C. Davis 001 (ICSE, 2023)

Reusing Deep Learning Models: Challenges and Directions in Software Engineering. - James C. Davis 001; Purvish Jajal; Wenxin Jiang 001; Taylor R. Schorlemmer; Nicholas Synovic; George K. Thiruvathukal (JVA, 2023)

Systematically Detecting Packet Validation Vulnerabilities in Embedded Network Stacks. - Paschal C. Amusuo; Ricardo Andrés Calvo Méndez; Zhongwei Xu; Aravind Machiry; James C. Davis 001 (ASE, 2023)

Towards Automated Identification of Layering Violations in Embedded Applications (WIP). - Mingjie Shen; James C. Davis 001; Aravind Machiry (LCTES, 2023)

PTMTorrent: A Dataset for Mining Open-source Pre-trained Model Packages. - Wenxin Jiang 001; Nicholas Synovic; Purvish Jajal; Taylor R. Schorlemmer; Arav Tewari; Bhavesh Pareek; George K. Thiruvathukal; James C. Davis 001 (MSR, 2023)

An Empirical Study on Using Large Language Models to Analyze Software Supply Chain Security Failures. - Tanmay Singla; Dharun Anandayuvaraj; Kelechi G. Kalu; Taylor R. Schorlemmer; James C. Davis 001 (SCORED@CCS, 2023)

Incorporating Failure Knowledge into Design Decisions for IoT Systems: A Controlled Experiment on Novices. - Dharun Anandayuvaraj; Pujita Thulluri; Justin Figueroa; Harshit Shandilya; James C. Davis 001 (SERP4IoT, 2023)

Reflecting on the Use of the Policy-Process-Product Theory in Empirical Software Engineering. - Kelechi G. Kalu; Taylor R. Schorlemmer; Sophie Chen; Kyle A. Robinson; Erik Kocinare; James C. Davis 001 (ESEC/SIGSOFT FSE, 2023)

Improving Developers' Understanding of Regex Denial of Service Tools through Anti-Patterns and Fix Strategies. - Sk Adnan Hassan; Zainab Aamir; Dongyoon Lee; James C. Davis 001; Francisco Servant (SP, 2023)

Analysis of Failures and Risks in Deep Learning Model Converters: A Case Study in the ONNX Ecosystem. - Purvish Jajal; Wenxin Jiang 001; Arav Tewari; Joseph Woo; Yung-Hsiang Lu; George K. Thiruvathukal; James C. Davis 001 (CoRR, 2023)

An Empirical Study on the Use of Static Analysis Tools in Open Source Embedded Software. - Mingjie Shen; Akul Abhilash Pillai; Brian A. Yuan; James C. Davis 001; Aravind Machiry (CoRR, 2023)

Exploring Naming Conventions (and Defects) of Pre-trained Deep Learning Models in Hugging Face and Other Model Hubs. - Wenxin Jiang 001; Chingwo Cheung; George K. Thiruvathukal; James C. Davis 001 (CoRR, 2023)

A Unified Taxonomy and Evaluation of IoT Security Guidelines. - Jesse Chen; Dharun Anandayuvaraj; James C. Davis 001; Sazzadur Rahaman (CoRR, 2023)

PeaTMOSS: Mining Pre-Trained Models in Open-Source Software. - Wenxin Jiang 001; Jason Jones; Jerin Yasmin; Nicholas Synovic; Rajeev Sashti; Sophie Chen; George K. Thiruvathukal; Yuan Tian 008; James C. Davis 001 (CoRR, 2023)

Preventing Supply Chain Vulnerabilities in Java with a Fine-Grained Permission Manager. - Paschal C. Amusuo; Kyle A. Robinson; Santiago Torres-Arias; Laurent Simon; James C. Davis 001 (CoRR, 2023)

SoftwareSystemsLaboratory/PTMTorrent. - Wenxin Jiang 001; Nicholas Synovic; Purvish Jajal; Taylor R. Schorlemmer; Arav Tewari; Bhavesh Pareek; George K. Thiruvathukal; James C. Davis 001 (Zenodo, 2023)

SoftwareSystemsLaboratory/PTMTorrent. - Wenxin Jiang 001; Nicholas Synovic; Purvish Jajal; Taylor R. Schorlemmer; Arav Tewari; Bhavesh Pareek; George K. Thiruvathukal; James C. Davis 001 (Zenodo, 2023)

SoftwareSystemsLaboratory/PTMTorrent. - Wenxin Jiang 001; Nicholas Synovic; Purvish Jajal; Taylor R. Schorlemmer; Arav Tewari; Bhavesh Pareek; George K. Thiruvathukal; James C. Davis 001 (Zenodo, 2023)

SoftwareSystemsLaboratory/PTMTorrent. - Wenxin Jiang 001; Nicholas Synovic; Purvish Jajal; Taylor R. Schorlemmer; Arav Tewari; Bhavesh Pareek; George K. Thiruvathukal; James C. Davis 001 (Zenodo, 2023)

SoftwareSystemsLaboratory/PTMTorrent. - Wenxin Jiang 001; Nicholas Synovic; Purvish Jajal; Taylor R. Schorlemmer; Arav Tewari; Bhavesh Pareek; George K. Thiruvathukal; James C. Davis 001 (Zenodo, 2023)

SoftwareSystemsLaboratory/PTMTorrent. - Wenxin Jiang 001; Nicholas Synovic; Purvish Jajal; Taylor R. Schorlemmer; Arav Tewari; Bhavesh Pareek; George K. Thiruvathukal; James C. Davis 001 (Zenodo, 2023)

SoftwareSystemsLaboratory/PTMTorrent. - Wenxin Jiang 001; Nicholas Synovic; Purvish Jajal; Taylor R. Schorlemmer; Arav Tewari; Bhavesh Pareek; George K. Thiruvathukal; James C. Davis 001 (Zenodo, 2023)

An Empirical Study of Pre-Trained Model Reuse in the Hugging Face Deep Learning Model Registry VM. - Wenxin Jiang 001; Nicholas Synovic; Matt Hyatt; Taylor R. Schorlemmer; Rohan Sethi; Yung-Hsiang Lu; George K. Thiruvathukal; James C. Davis 001 (Zenodo, 2023)

An Empirical Study of Pre-Trained Model Reuse in the Hugging Face Deep Learning Model Registry VM. - Wenxin Jiang 001; Nicholas Synovic; Matt Hyatt; Taylor R. Schorlemmer; Rohan Sethi; Yung-Hsiang Lu; George K. Thiruvathukal; James C. Davis 001 (Zenodo, 2023)

An Empirical Study of Pre-Trained Model Reuse in the Hugging Face Deep Learning Model Registry VM. - Wenxin Jiang 001; Nicholas Synovic; Matt Hyatt; Taylor R. Schorlemmer; Rohan Sethi; Yung-Hsiang Lu; George K. Thiruvathukal; James C. Davis 001 (Zenodo, 2023)

An Empirical Study of Pre-Trained Model Reuse in the Hugging Face Deep Learning Model Registry VM. - Wenxin Jiang 001; Nicholas Synovic; Matt Hyatt; Taylor R. Schorlemmer; Rohan Sethi; Yung-Hsiang Lu; George K. Thiruvathukal; James C. Davis 001 (Zenodo, 2023)

Tree-Based Unidirectional Neural Networks for Low-Power Computer Vision. - Abhinav Goel; Caleb Tung; Nick Eliopoulos; George K. Thiruvathukal; Amy Wang; Yung-Hsiang Lu; James C. Davis 001 (IEEE Des. Test, 2023)

Evolution of Winning Solutions in the 2021 Low-Power Computer Vision Challenge. - Xiao Hu 004; Ziteng Jiao; Ayden Kocher; Zhenyu Wu 002; Junjie Liu; James C. Davis 001; George K. Thiruvathukal; Yung-Hsiang Lu (Computer, 2023)

An Exploratory Mixed-methods Study on General Data Protection Regulation (GDPR) Compliance in Open-Source Software. - Lucas Franke; Huayu Liang; Sahar Farzanehpour; Aaron Brantly; James C. Davis 001; Chris Brown 001 (ESEM, 2024)

What do we know about Hugging Face? A systematic literature review and quantitative validation of qualitative claims. - Jason Jones; Wenxin Jiang 001; Nicholas Synovic; George K. Thiruvathukal; James C. Davis 001 (ESEM, 2024)

A First Look at the General Data Protection Regulation (GDPR) in Open-Source Software. - Lucas Franke; Huayu Liang; Aaron Brantly; James C. Davis 001; Chris Brown 001 (ICSE Companion, 2024)

Interoperability in Deep Learning: A User Survey and Failure Analysis of ONNX Model Converters. - Purvish Jajal; Wenxin Jiang 001; Arav Tewari; Erik Kocinare; Joseph Woo; Anusha Sarraf; Yung-Hsiang Lu; George K. Thiruvathukal; James C. Davis 001 (ISSTA, 2024)

FAIL: Analyzing Software Failures from the News Using LLMs. - Dharun Anandayuvaraj; Matthew Campbell; Arav Tewari; James C. Davis 001 (ASE, 2024)

PeaTMOSS: A Dataset and Initial Analysis of Pre-Trained Models in Open-Source Software. - Wenxin Jiang 001; Jerin Yasmin; Jason Jones; Nicholas Synovic; Jiashen Kuo; Nathaniel Bielanski; Yuan Tian 008; George K. Thiruvathukal; James C. Davis 001 (MSR, 2024)

Signing in Four Public Software Package Registries: Quantity, Quality, and Influencing Factors. - Taylor R. Schorlemmer; Kelechi G. Kalu; Luke Chigges; Kyung Myung Ko; Eman Abu Ishgair; Saurabh Bagchi; Santiago Torres-Arias; James C. Davis 001 (SP, 2024)

An Interview Study on Third-Party Cyber Threat Hunting Processes in the U.S. Department of Homeland Security. - William P. Maxam III; James C. Davis 001 (USENIX Security Symposium, 2024)

Signing in Four Public Software Package Registries: Quantity, Quality, and Influencing Factors. - Taylor R. Schorlemmer; Kelechi G. Kalu; Luke Chigges; Kyung Myung Ko; Eman Abdul-Muhd Abu Isghair; Saurabh Baghi; Santiago Torres-Arias; James C. Davis 001 (CoRR, 2024)

An Exploratory Study on Upper-Level Computing Students' Use of Large Language Models as Tools in a Semester-Long Project. - Ben Arie Tanay; Lexy Arinze; Siddhant Sanjay Joshi; Kirsten A. Davis; James C. Davis 001 (CoRR, 2024)

Introducing Systems Thinking as a Framework for Teaching and Assessing Threat Modeling Competency. - Siddhant Sanjay Joshi; Preeti Mukherjee; Kirsten A. Davis; James C. Davis 001 (CoRR, 2024)

A Partial Replication of MaskFormer in TensorFlow on TPUs for the TensorFlow Model Garden. - Vishal Purohit; Wenxin Jiang 001; Akshath R. Ravikiran; James C. Davis 001 (CoRR, 2024)

An Industry Interview Study of Software Signing for Supply Chain Security. - Kelechi G. Kalu; Tanya Singla; Chinenye Okafor; Santiago Torres-Arias; James C. Davis 001 (CoRR, 2024)

Can Large Language Models Analyze Software Failures in the News? An End-to-End Automated Pipeline with FAIL. - Dharun Anandayuvaraj; Matthew Campbell; Arav Tewari; James C. Davis 001 (CoRR, 2024)

SoK: A Literature and Engineering Review of Regular Expression Denial of Service. - Masudul Hasan Masud Bhuiyan; Berk Çakar; Ethan H. Burmane; James C. Davis 001; Cristian-Alexandru Staicu (CoRR, 2024)

DiVerify: Diversifying Identity Verification in Next-Generation Software Signing. - Chinenye L. Okafor; James C. Davis 001; Santiago Torres-Arias (CoRR, 2024)

Establishing Provenance Before Coding: Traditional and Next-Gen Signing. - Taylor R. Schorlemmer; Ethan H. Burmane; Kelechi G. Kalu; Santiago Torres-Arias; James C. Davis 001 (CoRR, 2024)

Large Language Models for Energy-Efficient Code: Emerging Results and Future Directions. - Huiyun Peng; Arjun Gupte; Nicholas John Eliopoulos; Chien Chou Ho; Rishi Mantri; Leo Deng; Wenxin Jiang 001; Yung-Hsiang Lu; Konstantin Läufer; George K. Thiruvathukal; James C. Davis 001 (CoRR, 2024)

Enabling Unit Proofing for Software Implementation Verification. - Paschal C. Amusuo; Parth V. Patil; Owen Cochell; Taylor Le Lievre; James C. Davis 001 (CoRR, 2024)

Can Large-Language Models Help us Better Understand and Teach the Development of Energy-Efficient Software? - Ryan Hasler; Konstantin Läufer; George K. Thiruvathukal; Huiyun Peng; Kyle Robinson; Kirsten Davis; Yung-Hsiang Lu; James C. Davis 001 (CoRR, 2024)

Recommending Pre-Trained Models for IoT Devices. - Parth V. Patil; Wenxin Jiang 001; Huiyun Peng; Daniel Lugo; Kelechi G. Kalu; David J. LeBlanc; Lawrence Smith; Hyeonwoo Heo; Nathanael Aou; James C. Davis 001 (CoRR, 2024)

On the Contents and Utility of IoT Cybersecurity Guidelines. - Jesse Chen; Dharun Anandayuvaraj; James C. Davis 001; Sazzadur Rahaman (Proc. ACM Softw. Eng., 2024)

Challenges and practices of deep learning model reengineering: A case study on computer vision. - Wenxin Jiang 001; Vishnu Banna; Naveen Vivek; Abhinav Goel; Nicholas Synovic; George K. Thiruvathukal; James C. Davis 001 (Empir. Softw. Eng., 2024)

Detecting Music Performance Errors with Transformers. - Benjamin Shiue-Hal Chou; Purvish Jajal; Nicholas John Eliopoulos; Tim Nadolsky; Cheng-Yun Yang; Nikita Ravi; James C. Davis 001; Kristen Yeon-Ji Yun; Yung-Hsiang Lu (AAAI, 2025)

A Unit Proofing Framework for Code-level Verification: A Research Agenda. - Paschal C. Amusuo; Parth V. Patil; Owen Cochell; Taylor Le Lievre; James C. Davis 001 (NIER@ICSE, 2025)

$ZTD_{ text{JAVA}}$: Mitigating Software Supply Chain Vulnerabilities via Zero-Trust Dependencies. - Paschal C. Amusuo; Kyle A. Robinson; Tanmay Singla; Huiyun Peng; Aravind Machiry; Santiago Torres-Arias; Laurent Simon; James C. Davis 001 (ICSE, 2025)

Recommending Pre-Trained Models for IoT Devices. - Parth V. Patil; Wenxin Jiang 001; Huiyun Peng; Daniel Lugo; Kelechi G. Kalu; Josh LeBlanc; Lawrence Smith; Hyeonwoo Heo; Nathanael Aou; James C. Davis 001 (SERP4IoT, 2025)

Pruning One More Token is Enough: Leveraging Latency-Workload Non-Linearities for Vision Transformers on the Edge. - Nicholas John Eliopoulos; Purvish Jajal; James C. Davis 001; Gaowen Liu; George K. Thiravathukal; Yung-Hsiang Lu (WACV, 2025)

Token Turing Machines are Efficient Vision Models. - Purvish Jajal; Nick John Eliopoulos; Benjamin Shiue-Hal Chou; George K. Thiravathukal; James C. Davis 001; Yung-Hsiang Lu (WACV, 2025)

Establishing Provenance Before Coding: Traditional and Next-Generation Software Signing. - Taylor R. Schorlemmer; Ethan H. Burmane; Kelechi G. Kalu; Santiago Torres-Arias; James C. Davis 001 (IEEE Secur. Priv., 2025)

Engineering patterns for Trust and Safety on social media platforms: A case study of Mastodon and Diaspora. - Geoffrey Cramer; William P. Maxam III; James C. Davis 001 (J. Syst. Softw., 2025)

Finding 709 Defects in 258 Projects: An Experience Report on Applying CodeQL to Open-Source Embedded Software (Experience Paper). - Mingjie Shen; Akul Abhilash Pillai; Brian A. Yuan; James C. Davis 001; Aravind Machiry (Proc. ACM Softw. Eng., 2025)

Detecting Active and Stealthy Typosquatting Threats in Package Registries. - Wenxin Jiang 001; Berk Çakar; Mikola Lysenko; James C. Davis 001 (CoRR, 2025)

Why Johnny Signs with Sigstore: Examining Tooling as a Factor in Software Signing Adoption in the Sigstore Ecosystem. - Kelechi G. Kalu; Sofia Okorafor; Tanmay Singla; Santiago Torres-Arias; James C. Davis 001 (CoRR, 2025)

Do Unit Proofs Work? An Empirical Study of Compositional Bounded Model Checking for Memory Safety Verification. - Paschal C. Amusuo; Owen Cochell; Taylor Le Lievre; Parth V. Patil; Aravind Machiry; James C. Davis 001 (CoRR, 2025)

LEMIX: Enabling Testing of Embedded Applications as Linux Applications. - Sai Ritvik Tanksalkar; Siddharth Muralee; Srihari Danduri; Paschal C. Amusuo; Antonio Bianchi; James C. Davis 001; Aravind Machiry (CoRR, 2025)

Is Reuse All You Need? A Systematic Comparison of Regular Expression Composition Strategies. - Berk Çakar; Charles M. Sale; Sophie Chen; Ethan H. Burmane; Dongyoon Lee; James C. Davis 001 (CoRR, 2025)

Improving the Reproducibility of Deep Learning Software: An Initial Investigation through a Case Study Analysis. - Nikita Ravi; Abhinav Goel; James C. Davis 001; George K. Thiruvathukal (CoRR, 2025)

ARMS: A Vision for Actor Reputation Metric Systems in the Open-Source Software Supply Chain. - Kelechi G. Kalu; Sofia Okorafor; F. Betül Durak; Kim Laine; Radames Cruz Moreno; Santiago Torres-Arias; James C. Davis 001 (CoRR, 2025)

Inference-Time Alignment of Diffusion Models with Evolutionary Algorithms. - Purvish Jajal; Nick John Eliopoulos; Benjamin Shiue-Hal Chou; George K. Thiruvathukal; James C. Davis 001; Yung-Hsiang Lu (CoRR, 2025)

SysLLMatic: Large Language Models are Software System Optimizers. - Huiyun Peng; Arjun Gupte; Ryan Hasler; Nicholas John Eliopoulos; Chien Chou Ho; Rishi Mantri; Leo Deng; Konstantin Läufer; George K. Thiruvathukal; James C. Davis 001 (CoRR, 2025)

Anti-Phishing Training Does Not Work: A Large-Scale Empirical Assessment of Multi-Modal Training Grounded in the NIST Phish Scale. - Andrew T. Rozema; James C. Davis 001 (CoRR, 2025)

Advancing Jailbreak Strategies: A Hybrid Approach to Exploiting LLM Vulnerabilities and Bypassing Modern Defenses. - Mohamed Ahmed; Mohamed Abdelmouty; Mingyu Kim; Gunvanth Kandula; Alex Park 002; James C. Davis 001 (CoRR, 2025)

A Guide to Stakeholder Analysis for Cybersecurity Researchers. - James C. Davis 001; Sophie Chen; Huiyun Peng; Paschal C. Amusuo; Kelechi G. Kalu (CoRR, 2025)

"I see models being a whole other thing": an empirical study of pre-trained model naming conventions and a tool for enhancing naming consistency. - Wenxin Jiang 001; Mingyu Kim; Chingwo Cheung; Heesoo Kim; George K. Thiruvathukal; James C. Davis 001 (Empir. Softw. Eng., 2025)