ERLab: a middleware for remote access electronic laboratories. - Admilson R. L. Ribeiro; Marco Túlio Chella; Luiz Marcus M. A. Santos; Joanna C. S. Santos; Wedla R. Melo (EATIS, 2012)

BUDGET: A Tool for Supporting Software Architecture Traceability Research. - Joanna C. S. Santos; Mehdi Mirakhorli; Ibrahim Mujhid; Waleed Zogaan (WICSA, 2016)

Understanding Software Vulnerabilities Related to Architectural Security Tactics: An Empirical Investigation of Chromium, PHP and Thunderbird. - Joanna C. S. Santos; Anthony Peruma; Mehdi Mirakhorli; Matthias Galster; Jairo Veloz Vidal; Adriana Sejfia (ICSA, 2017)

A Catalog of Security Architecture Weaknesses. - Joanna C. S. Santos; Katy Tarrit; Mehdi Mirakhorli (ICSA Workshops, 2017)

A large-scale study on the usage of testing patterns that address maintainability attributes: patterns for ease of modification, diagnoses, and comprehension. - Danielle Gonzalez; Joanna C. S. Santos; Andrew Popovich; Mehdi Mirakhorli; Meiyappan Nagappan (MSR, 2017)

Automated training-set creation for software architecture traceability problem. - Waleed Zogaan; Ibrahim Mujhid; Joanna C. S. Santos; Danielle Gonzalez; Mehdi Mirakhorli (Empir. Softw. Eng., 2017)

A search engine for finding and reusing architecturally significant code. - Ibrahim Mujhid; Joanna C. S. Santos; Raghuram Gopalakrishnan; Mehdi Mirakhorli (J. Syst. Softw., 2017)

Achilles' heel of plug-and-Play software architectures: a grounded theory based approach. - Joanna C. S. Santos; Adriana Sejfia; Taylor Corrello; Smruthi Gadenkanahalli; Mehdi Mirakhorli (ESEC/SIGSOFT FSE, 2019)

An empirical study of tactical vulnerabilities. - Joanna C. S. Santos; Katy Tarrit; Adriana Sejfia; Mehdi Mirakhorli; Matthias Galster (J. Syst. Softw., 2019)

Salsa: static analysis of serialization features. - Joanna C. S. Santos; Reese A. Jones; Mehdi Mirakhorli (FTfJP@ECOOP, 2020)

An Automated Approach to Recover the Use-case View of an Architecture. - Joanna C. S. Santos; Sara Moshtari; Mehdi Mirakhorli (ICSA Companion, 2020)

Towards an Automated Approach for Detecting Architectural Weaknesses in Critical Systems. - Joanna C. S. Santos; Selma Suloglu; Joanna Ye; Mehdi Mirakhorli (ICSE (Workshops), 2020)

Towards Automated Evidence Generation for Rapid and Continuous Software Certification. - Joanna C. S. Santos; Ali Shokri 003; Mehdi Mirakhorli (ISSRE Workshops, 2020)

Looking for Software Defects? First Find the Nonconformists. - Sara Moshtari; Joanna C. S. Santos; Mehdi Mirakhorli; Ahmet Okutan (SCAM, 2020)

ArCode: Facilitating the Use of Application Frameworks to Implement Tactics and Patterns. - Ali Shokri 003; Joanna C. S. Santos; Mehdi Mirakhorli (ICSA, 2021)

Serialization-aware call graph construction. - Joanna C. S. Santos; Reese A. Jones; Chinomso Ashiogwu; Mehdi Mirakhorli (SOAP@PLDI, 2021)

A Methodological Approach to Verify Architecture Resiliency. - Joanna C. S. Santos; Selma Suloglu; Néstor Cataño; Mehdi Mirakhorli (ECSA (Tracks and Workshops), 2022)

BERT-Based GitHub Issue Report Classification. - Mohammed Latif Siddiq; Joanna C. S. Santos (NLBSE, 2022)

An Empirical Study of Code Smells in Transformer-based Code Generation Techniques. - Mohammed Latif Siddiq; Shafayat H. Majumder; Maisha R. Mim; Sourov Jajodia; Joanna C. S. Santos (SCAM, 2022)

Program analysis using WALA (tutorial). - Joanna C. S. Santos; Julian Dolby (ESEC/SIGSOFT FSE, 2022)

Zero-shot Prompting for Code Complexity Prediction Using GitHub Copilot. - Mohammed Latif Siddiq; Abdus Samee; Sk Ruhul Azgor; Md. Asif Haider; Shehabul Islam Sawraz; Joanna C. S. Santos (NLBSE@ICSE, 2023)

Exploring the Effectiveness of Large Language Models in Generating Unit Tests. - Mohammed Latif Siddiq; Joanna C. S. Santos; Ridwanul Hasan Tanvir; Noshin Ulfat; Fahmid Al Rifat; Vinicius Carvalho Lopes (CoRR, 2023)

A Lightweight Framework for High-Quality Code Generation. - Mohammed Latif Siddiq; Beatrice Casey; Joanna C. S. Santos (CoRR, 2023)

Generate and Pray: Using SALLMS to Evaluate the Security of LLM Generated Code. - Mohammed Latif Siddiq; Joanna C. S. Santos (CoRR, 2023)

Sound Call Graph Construction for Java Object Deserialization. - Joanna C. S. Santos; Mehdi Mirakhorli; Ali Shokri 003 (CoRR, 2023)

Empirical Validation of Automated Vulnerability Curation and Characterization. - Ahmet Okutan; Peter Mell; Mehdi Mirakhorli; Igor Khokhlov; Joanna C. S. Santos; Danielle Gonzalez; Steven Simmons (IEEE Trans. Software Eng., 2023)

Using Large Language Models to Generate JUnit Tests: An Empirical Study. - Mohammed Latif Siddiq; Joanna Cecilia da Silva Santos; Ridwanul Hasan Tanvir; Noshin Ulfat; Fahmid Al Rifat; Vinicius Carvalho Lopes (EASE, 2024)

Re(gEx|DoS)Eval: Evaluating Generated Regular Expressions and their Proneness to DoS Attacks. - Mohammed Latif Siddiq; Jiahao Zhang; Lindsay Roney; Joanna C. S. Santos (NIER@ICSE, 2024)

Understanding Regular Expression Denial of Service (ReDoS): Insights from LLM-Generated Regexes and Developer Forums. - Mohammed Latif Siddiq; Jiahao Zhang; Joanna Cecilia da Silva Santos (ICPC, 2024)

SALLM: Security Assessment of Generated Code. - Mohammed Latif Siddiq; Joanna Cecilia da Silva Santos; Sajith Devareddy; Anna Muller (ASE Workshops, 2024)

Quality Assessment of ChatGPT Generated Code and their Use by Developers. - Mohammed Latif Siddiq; Lindsay Roney; Jiahao Zhang; Joanna C. S. Santos (MSR, 2024)

Franc: A Lightweight Framework for High-Quality Code Generation. - Mohammed Latif Siddiq; Beatrice Casey; Joanna C. S. Santos (SCAM, 2024)

The Fault in our Stars: Quality Assessment of Code Generation Benchmarks. - Mohammed Latif Siddiq; Simantika Dristi; Joy Saha; Joanna C. S. Santos (SCAM, 2024)

Quality Assessment of Prompts Used in Code Generation. - Mohammed Latif Siddiq; Simantika Dristi; Joy Saha; Joanna C. S. Santos (CoRR, 2024)

A Large-Scale Exploit Instrumentation Study of AI/ML Supply Chain Attacks in Hugging Face Models. - Beatrice Casey; Joanna C. S. Santos; Mehdi Mirakhorli (CoRR, 2024)

Seneca: Taint-Based Call Graph Construction for Java Object Deserialization. - Joanna C. S. Santos; Mehdi Mirakhorli; Ali Shokri 003 (Proc. ACM Program. Lang., 2024)

Re(gEx|DoS)Eval: Evaluating Generated Regular Expressions and their Proneness to DoS Attacks. - Mohammed Latif Siddiq; Jiahao Zhang; Lindsay Roney; Joanna C. S. Santos (Zenodo, 2024)

MojoBench: Language Modeling and Benchmarks for Mojo. - Nishat Raihan; Joanna C. S. Santos; Marcos Zampieri (NAACL (Findings), 2025)

Large Language Models in Computer Science Education: A Systematic Literature Review. - Nishat Raihan; Mohammed Latif Siddiq; Joanna C. S. Santos; Marcos Zampieri (SIGCSE (1), 2025)

Challenges to Using Large Language Models in Code Generation and Repair. - Liliana Pasquale; Antonino Sabetta; Marcelo d'Amorim; Péter Hegedüs; Mehdi Tarrit Mirakhorli; Hamed Okhravi; Mathias Payer; Awais Rashid; Joanna C. S. Santos; Jonathan M. Spring; Lin Tan 001; Katja Tuma (IEEE Secur. Priv., 2025)

An Empirical Study of Safetensors' Usage Trends and Developers' Perceptions. - Beatrice Casey; Kaia Damian; Andrew Cotaj; Joanna C. S. Santos (CoRR, 2025)

Attacking interpretable NLP systems. - Eldor Abdukhamidov; Tamer Abuhmed; Joanna C. S. Santos; Mohammed Abuhamad (CoRR, 2025)

A Survey of Source Code Representations for Machine Learning-Based Cybersecurity Tasks. - Beatrice Casey; Joanna C. S. Santos; George Perry (ACM Comput. Surv., 2025)