Nusrat Zahan

According to our database, Nusrat Zahan authored at least 16 papers between 2018 and 2024.

Collaborative distances:

• Dijkstra number of four.
• Erdős number of four.

2024

Characterizing Dependency Update Practice of NPM, PyPI and Cargo Packages.

Imranur Rahman, Nusrat Zahan, Stephen Magill, William Enck, Laurie Williams

CoRR, 2024

Shifting the Lens: Detecting Malware in npm Ecosystem with Large Language Models.

Nusrat Zahan, Philipp Burckhardt, Mikola Lysenko, Feross Aboukhadijeh, Laurie A. Williams

CoRR, 2024

2023

Software Bills of Materials Are Required. Are We There Yet?

Nusrat Zahan, Elizabeth Lin, Mahzabin Tamanna, William Enck, Laurie A. Williams

IEEE Secur. Priv., 2023

OpenSSF Scorecard: On the Path Toward Ecosystem-Wide Automated Security Metrics.

Nusrat Zahan, Parth Kanakiya, Brian Hambleton, Shohanuzzaman Shohan, Laurie A. Williams

IEEE Secur. Priv., 2023

Comparing Effectiveness and Efficiency of Interactive Application Security Testing (IAST) and Runtime Application Self-Protection (RASP) Tools in a Large Java-based System.

Aishwarya Seth, Saikath Bhattacharya, Sarah Elder, Nusrat Zahan, Laurie A. Williams

CoRR, 2023

Do Software Security Practices Yield Fewer Vulnerabilities?

Nusrat Zahan, Shohanuzzaman Shohan, Dan Harris, Laurie A. Williams

Proceedings of the 45th IEEE/ACM International Conference on Software Engineering: Software Engineering in Practice, 2023

Software Supply Chain Risk Assessment Framework.

Nusrat Zahan

Proceedings of the 45th IEEE/ACM International Conference on Software Engineering: ICSE 2023 Companion Proceedings, 2023

2022

Do I really need all this work to find vulnerabilities?

Sarah Elder, Nusrat Zahan, Rui Shu, Monica Metro, Valeri Kozarev, Tim Menzies, Laurie A. Williams

Empir. Softw. Eng., 2022

PREPRINT: Do OpenSSF Scorecard Practices Contribute to Fewer Vulnerabilities?

Nusrat Zahan, Shohanuzzaman Shohan, Dan Harris, Laurie A. Williams

CoRR, 2022

PREPRINT: Can the OpenSSF Scorecard be used to measure the security posture of npm and PyPI?

Nusrat Zahan, Parth Kanakiya, Brian Hambleton, Shohanuzzaman Shohan, Laurie A. Williams

CoRR, 2022

Do I really need all this work to find vulnerabilities? An empirical case study comparing vulnerability detection techniques on a Java application.

Sarah Elder, Nusrat Zahan, Rui Shu, Monica Metro, Valeri Kozarev, Tim Menzies, Laurie A. Williams

CoRR, 2022

What are Weak Links in the npm Supply Chain?

Nusrat Zahan, Thomas Zimmermann, Patrice Godefroid, Brendan Murphy, Chandra Shekhar Maddila, Laurie A. Williams

Proceedings of the 44th IEEE/ACM International Conference on Software Engineering: Software Engineering in Practice, 2022

2021

Structuring a Comprehensive Software Security Course Around the OWASP Application Security Verification Standard.

Sarah Elder, Nusrat Zahan, Valeri Kozarev, Rui Shu, Tim Menzies, Laurie A. Williams

Proceedings of the 43rd IEEE/ACM International Conference on Software Engineering: Software Engineering Education and Training, 2021

Breast Cancer Prediction with Gaussian Process Using Anthropometric Parameters.

Sheikh Tonmoy, Habiba Khan Hiya, Md. Zahid Hasan, K. M. Zubair Hasan, Nusrat Zahan

Proceedings of the 12th International Conference on Computing Communication and Networking Technologies, 2021

A Multi-attribute Decision Making Approach for Trauma Center Site Selection.

Kaniz Fatema, Md. Awlad Hossen Rony, Nusrat Zahan, Md. Zahid Hasan

Proceedings of the 12th International Conference on Computing Communication and Networking Technologies, 2021

2018

A CNN-Based Classification Model for Recognizing Visual Bengali Font.

Md. Zahid Hasan, Kh. Tanzila Rahman, Rokeya Islam Riya, K. M. Zubair Hasan, Nusrat Zahan

Proceedings of International Joint Conference on Computational Intelligence, 2018