A CNN-Based Classification Model for Recognizing Visual Bengali Font. - Md. Zahid Hasan; Kh. Tanzila Rahman; Rokeya Islam Riya; K. M. Zubair Hasan; Nusrat Zahan (IJCCI, 2018)

A Multi-attribute Decision Making Approach for Trauma Center Site Selection. - Kaniz Fatema; Md. Awlad Hossen Rony; Nusrat Zahan; Md. Zahid Hasan (ICCCNT, 2021)

Breast Cancer Prediction with Gaussian Process Using Anthropometric Parameters. - Sheikh Tonmoy; Habiba Khan Hiya; Md. Zahid Hasan; K. M. Zubair Hasan; Nusrat Zahan (ICCCNT, 2021)

Structuring a Comprehensive Software Security Course Around the OWASP Application Security Verification Standard. - Sarah Elder; Nusrat Zahan; Valeri Kozarev; Rui Shu; Tim Menzies; Laurie A. Williams (ICSE (SEET), 2021)

What are Weak Links in the npm Supply Chain? - Nusrat Zahan; Thomas Zimmermann 001; Patrice Godefroid; Brendan Murphy; Chandra Shekhar Maddila; Laurie A. Williams (ICSE (SEIP), 2022)

Do I really need all this work to find vulnerabilities? An empirical case study comparing vulnerability detection techniques on a Java application. - Sarah Elder; Nusrat Zahan; Rui Shu; Monica Metro; Valeri Kozarev; Tim Menzies; Laurie A. Williams (CoRR, 2022)

PREPRINT: Can the OpenSSF Scorecard be used to measure the security posture of npm and PyPI? - Nusrat Zahan; Parth Kanakiya; Brian Hambleton; Shohanuzzaman Shohan; Laurie A. Williams (CoRR, 2022)

PREPRINT: Do OpenSSF Scorecard Practices Contribute to Fewer Vulnerabilities? - Nusrat Zahan; Shohanuzzaman Shohan; Dan Harris; Laurie A. Williams (CoRR, 2022)

Do I really need all this work to find vulnerabilities? - Sarah Elder; Nusrat Zahan; Rui Shu; Monica Metro; Valeri Kozarev; Tim Menzies; Laurie A. Williams (Empir. Softw. Eng., 2022)

Advancing Safety Through IoT: Gas Detection and Automation Systems. - Tasmina Akter Rupina; Pusmita Barua; Israt Binteh Habib; Tanjim Mahmud; Lutfun Nahar; Nusrat Zahan; Mohammad Shahadat Hossain; Karl Andersson 001 (ICO (2), 2023)

Software Supply Chain Risk Assessment Framework. - Nusrat Zahan (ICSE Companion, 2023)

Do Software Security Practices Yield Fewer Vulnerabilities? - Nusrat Zahan; Shohanuzzaman Shohan; Dan Harris; Laurie A. Williams (ICSE-SEIP, 2023)

OpenSSF Scorecard: On the Path Toward Ecosystem-Wide Automated Security Metrics. - Nusrat Zahan; Parth Kanakiya; Brian Hambleton; Shohanuzzaman Shohan; Laurie A. Williams (IEEE Secur. Priv., 2023)

Software Bills of Materials Are Required. Are We There Yet? - Nusrat Zahan; Elizabeth Lin; Mahzabin Tamanna; William Enck; Laurie A. Williams (IEEE Secur. Priv., 2023)

MalwareBench: Malware samples are not enough. - Nusrat Zahan; Philipp Burckhardt; Mikola Lysenko; Feross Aboukhadijeh; Laurie A. Williams (MSR, 2024)

Shifting the Lens: Detecting Malware in npm Ecosystem with Large Language Models. - Nusrat Zahan; Philipp Burckhardt; Mikola Lysenko; Feross Aboukhadijeh; Laurie A. Williams (CoRR, 2024)

Characterizing Dependency Update Practice of NPM, PyPI and Cargo Packages. - Imranur Rahman; Nusrat Zahan; Stephen Magill; William Enck; Laurie A. Williams (CoRR, 2024)

S3C2 Summit 2023-11: Industry Secure Supply Chain Summit. - Nusrat Zahan; Yasemin Acar; Michel Cukier; William Enck; Christian Kästner; Alexandros Kapravelos; Dominik Wermke; Laurie A. Williams (CoRR, 2024)

Leveraging Large Language Models to Detect NPM Malicious Packages. - Nusrat Zahan; Philipp Burckhardt; Mikola Lysenko; Feross Aboukhadijeh; Laurie A. Williams (ICSE, 2025)

Can the Rising Tide of Software Supply Chain Attacks Raise All Software Engineering Boats? - Laurie A. Williams; Sivana Hamer; Nusrat Zahan (SIGSOFT FSE Companion, 2025)

Prioritizing Security Practice Adoption: Empirical Insights on Software Security Outcomes in the npm Ecosystem. - Nusrat Zahan; Laurie A. Williams (CoRR, 2025)

Comparing effectiveness and efficiency of Interactive Application Security Testing (IAST) and Runtime Application Self-Protection (RASP) tools in a large java-based system. - Aishwarya Seth; Saikath Bhattacharya; Sarah Elder; Nusrat Zahan; Laurie A. Williams (Empir. Softw. Eng., 2025)

Research Directions in Software Supply Chain Security. - Laurie A. Williams; Giacomo Benedetti; Sivana Hamer; Ranindya Paramitha; Imranur Rahman; Mahzabin Tamanna; Greg Tystahl; Nusrat Zahan; Patrick Morrison; Yasemin Acar; Michel Cukier; Christian Kästner; et al. (ACM Trans. Softw. Eng. Methodol., 2025)