Laurie A. Williams

371 papers A* 19A 56B 3C 3Misc 1Journal 153Unranked 121

Year	Rank	Type	Title / Venue / Authors
2025	A*	`conf`	AssetHarvester: A Static Analysis Tool for Detecting Secret-Asset Pairs in Software Artifacts. ICSE Setu Kumar Basak, K. Virgil English, Ken Ogura, Vitesh Kambara, Bradley Reaves, Laurie A. Williams
2025	J	`jnl`	Build It Clean: Large-Scale Detection of Code Smells in Build Scripts. CoRR Mahzabin Tamanna, Yash Chandrani, Matthew Burrows, Brandon Wroblewski, Laurie A. Williams, Dominik Wermke
2025	—	`conf`	Can the Rising Tide of Software Supply Chain Attacks Raise All Software Engineering Boats? SIGSOFT FSE Companion Laurie A. Williams, Sivana Hamer, Nusrat Zahan
2025	J	`jnl`	Closing the Chain: How to reduce your risk of being SolarWinds, Log4j, or XZ Utils. CoRR Sivana Hamer, Jacob Bowen, Md. Nazmul Haque, Robert Hines, Chris Madden, Laurie A. Williams
2025	J	`jnl`	Comparing effectiveness and efficiency of Interactive Application Security Testing (IAST) and Runtime Application Self-Protection (RASP) tools in a large java-based system. Empir. Softw. Eng. Aishwarya Seth, Saikath Bhattacharya, Sarah Elder, Nusrat Zahan, Laurie A. Williams
2025	J	`jnl`	Establishing a Baseline of Software Supply Chain Security Task Adoption by Software Organizations. CoRR Laurie A. Williams, Sammy Migues
2025	J	`jnl`	Extended Version: It Should Be Easy but... New Users Experiences and Challenges with Secret Management Tools. CoRR Lorenzo Neil, Deepthi Mungara, Laurie A. Williams, Yasemin Acar, Bradley Reaves
2025	J	`jnl`	If you cannot Measure it, you cannot Secure it. A Case Study on Metrics for Informed Choice of Security Controls. J. Inf. Secur. Appl. Md. Rayhanur Rahman, Imranur Rahman, Laurie A. Williams
2025	A*	`conf`	It Should Be Easy but... New Users' Experiences and Challenges with Secret Management Tools. CCS Lorenzo Neil, Deepthi Mungara, Laurie A. Williams, Yasemin Acar, Bradley Reaves
2025	A*	`conf`	Leveraging Large Language Models to Detect NPM Malicious Packages. ICSE Nusrat Zahan, Philipp Burckhardt, Mikola Lysenko, Feross Aboukhadijeh, Laurie A. Williams
2025	J	`jnl`	Mining temporal attack patterns from cyberthreat intelligence reports. Knowl. Inf. Syst. Md. Rayhanur Rahman, Brandon Wroblewski, Quinn Matthews, Brantley Morgan, Timothy Menzies, Laurie A. Williams
2025	J	`jnl`	Prioritizing Security Practice Adoption: Empirical Insights on Software Security Outcomes in the npm Ecosystem. CoRR Nusrat Zahan, Laurie A. Williams
2025	J	`jnl`	Research Directions in Software Supply Chain Security. ACM Trans. Softw. Eng. Methodol. Laurie A. Williams, Giacomo Benedetti, Sivana Hamer, Ranindya Paramitha, Imranur Rahman, Mahzabin Tamanna, Greg Tystahl, Nusrat Zahan, Patrick Morrison, Yasemin Acar, Michel Cukier, Christian Kästner, Alexandros Kapravelos, Dominik Wermke, William Enck
2025	J	`jnl`	RiskHarvester: A Risk-based Tool to Prioritize Secret Removal Efforts in Software Artifacts. CoRR Setu Kumar Basak, Tanmay Pardeshi, Bradley Reaves, Laurie A. Williams
2025	J	`jnl`	S3C2 SICP Summit 2025-06: Vulnerability Response Summit. CoRR Anna Lena Rotthaler, Simon Oberthür, Juraj Somorovsky, Kirsten Thommes, Simon Trang, Yasemin Acar, Michel Cukier, William Enck, Alexandros Kapravelos, Christian Kästner, Dominik Wermke, Laurie A. Williams
2025	J	`jnl`	S3C2 Summit 2024-08: Government Secure Supply Chain Summit. CoRR Courtney Miller, William Enck, Yasemin Acar, Michel Cukier, Alexandros Kapravelos, Christian Kästner, Dominik Wermke, Laurie A. Williams
2025	J	`jnl`	S3C2 Summit 2024-09: Industry Secure Software Supply Chain Summit. CoRR Imranur Rahman, Yasemin Acar, Michel Cukier, William Enck, Christian Kästner, Alexandros Kapravelos, Dominik Wermke, Laurie A. Williams
2025	J	`jnl`	S3C2 Summit 2025-03: Industry Secure Supply Chain Summit. CoRR Elizabeth Lin, Jonah Ghebremichael, William Enck, Yasemin Acar, Michel Cukier, Alexandros Kapravelos, Christian Kästner, Laurie A. Williams
2025	J	`jnl`	SoK: An empirical investigation of malware techniques in advanced persistent threat attacks. Comput. Secur. Md. Rayhanur Rahman, Setu Kumar Basak, Rezvan Mahdavi-Hezaveh, Laurie A. Williams
2025	J	`jnl`	Trusting Code in the Wild: Exploring Contributor Reputation Measures to Review Dependencies in the Rust Ecosystem. IEEE Trans. Software Eng. Sivana Hamer, Nasif Imtiaz, Mahzabin Tamanna, Preya Shabrina, Laurie A. Williams
2025	J	`jnl`	Which Is Better For Reducing Outdated and Vulnerable Dependencies: Pinning or Floating? CoRR Imranur Rahman, Jill Marley, William Enck, Laurie A. Williams
2025	A*	`conf`	Which Is Better For Reducing Outdated and Vulnerable Dependencies: Pinning or Floatingƒ. ASE Imranur Rahman, Jill Marley, William Enck, Laurie A. Williams
2025	J	`jnl`	Your ATs to Ts: MITRE ATT&CK Attack Technique to P-SSCRM Task Mapping. CoRR Sivana Hamer, Jacob Bowen, Md. Nazmul Haque, Chris Madden, Laurie A. Williams
2025	A*	`conf`	Your Build Scripts Stink: The State of Code Smells in Build Scripts. ASE Mahzabin Tamanna, Yash Chandrani, Matthew Burrows, Brandon Wroblewski, Laurie A. Williams, Dominik Wermke
2024	J	`jnl`	A Survey on Software Vulnerability Exploitability Assessment. ACM Comput. Surv. Sarah Elder, Md. Rayhanur Rahman, Gage Fringer, Kunal Kapoor, Laurie A. Williams
2024	J	`jnl`	AssetHarvester: A Static Analysis Tool for Detecting Assets Protected by Secrets in Software Artifacts. CoRR Setu Kumar Basak, K. Virgil English, Ken Ogura, Vitesh Kambara, Bradley Reaves, Laurie A. Williams
2024	J	`jnl`	Attackers reveal their arsenal: An investigation of adversarial techniques in CTI reports. CoRR Md. Rayhanur Rahman, Setu Kumar Basak, Rezvan Mahdavi-Hezaveh, Laurie A. Williams
2024	J	`jnl`	Characterizing Dependency Update Practice of NPM, PyPI and Cargo Packages. CoRR Imranur Rahman, Nusrat Zahan, Stephen Magill, William Enck, Laurie A. Williams
2024	A*	`conf`	ChronoCTI: Mining Knowledge Graph of Temporal Relations Among Cyberattack Actions. ICDM Rayhanur Rahman, Brandon Wroblewski, Quinn Matthews, Brantley Morgan, Timothy Menzies, Laurie A. Williams
2024	—	`conf`	Just another copy and paste? Comparing the security vulnerabilities of ChatGPT generated code and StackOverflow answers. SP (Workshops) Sivana Hamer, Marcelo d'Amorim, Laurie A. Williams
2024	J	`jnl`	Just another copy and paste? Comparing the security vulnerabilities of ChatGPT generated code and StackOverflow answers. CoRR Sivana Hamer, Marcelo d'Amorim, Laurie A. Williams
2024	J	`jnl`	Less Is More: A Mixed-Methods Study on Security-Sensitive API Calls in Java for Better Dependency Selection. CoRR Imranur Rahman, Ranidya Paramitha, Henrik Plate, Dominik Wermke, Laurie A. Williams
2024	A	`conf`	MalwareBench: Malware samples are not enough. MSR Nusrat Zahan, Philipp Burckhardt, Mikola Lysenko, Feross Aboukhadijeh, Laurie A. Williams
2024	J	`jnl`	Mining Temporal Attack Patterns from Cyberthreat Intelligence Reports. CoRR Md. Rayhanur Rahman, Brandon Wroblewski, Quinn Matthews, Brantley Morgan, Tim Menzies, Laurie A. Williams
2024	J	`jnl`	Narrowing the Software Supply Chain Attack Vectors: The SSDF Is Wonderful but not Enough. IEEE Secur. Priv. Laurie A. Williams
2024	J	`jnl`	Paving a Path for a Combined Family of Feature Toggle and Configuration Option Research. ACM Trans. Softw. Eng. Methodol. Rezvan Mahdavi-Hezaveh, Sameeha Fatima, Laurie A. Williams
2024	J	`jnl`	Proactive Software Supply Chain Risk Management Framework (P-SSCRM) Version 1. CoRR Laurie A. Williams, Sammy Migues, Jamie Boote, Ben Hutchison
2024	J	`jnl`	S3C2 Summit 2023-11: Industry Secure Supply Chain Summit. CoRR Nusrat Zahan, Yasemin Acar, Michel Cukier, William Enck, Christian Kästner, Alexandros Kapravelos, Dominik Wermke, Laurie A. Williams
2024	J	`jnl`	S3C2 Summit 2024-03: Industry Secure Supply Chain Summit. CoRR Greg Tystahl, Yasemin Acar, Michel Cukier, William Enck, Christian Kästner, Alexandros Kapravelos, Dominik Wermke, Laurie A. Williams
2024	J	`jnl`	Shifting the Lens: Detecting Malware in npm Ecosystem with Large Language Models. CoRR Nusrat Zahan, Philipp Burckhardt, Mikola Lysenko, Feross Aboukhadijeh, Laurie A. Williams
2024	A	`conf`	Towards a Taxonomy of Challenges in Security Control Implementation. ACSAC Md. Rayhanur Rahman, Brandon Wroblewski, Mahzabin Tamanna, Imranur Rahman, Andrew Anufryienak, Laurie A. Williams
2024	J	`jnl`	Trusting code in the wild: Exploring contributor reputation measures to review dependencies in the Rust ecosystem. CoRR Sivana Hamer, Nasif Imtiaz, Mahzabin Tamanna, Preya Shabrina, Laurie A. Williams
2024	J	`jnl`	Unraveling Challenges with Supply-Chain Levels for Software Artifacts (SLSA) for Securing the Software Supply Chain. CoRR Mahzabin Tamanna, Sivana Hamer, Mindy Tran, Sascha Fahl, Yasemin Acar, Laurie A. Williams
2023	A	`conf`	A Comparative Study of Software Secrets Reporting by Secret Detection Tools. ESEM Setu Kumar Basak, Jamison Cox, Bradley Reaves, Laurie A. Williams
2023	J	`jnl`	A Comparative Study of Software Secrets Reporting by Secret Detection Tools. CoRR Setu Kumar Basak, Jamison Cox, Bradley Reaves, Laurie A. Williams
2023	J	`jnl`	Are Your Dependencies Code Reviewed?: Measuring Code Review Coverage in Dependency Updates. IEEE Trans. Software Eng. Nasif Imtiaz, Laurie A. Williams
2023	J	`jnl`	Comparing Effectiveness and Efficiency of Interactive Application Security Testing (IAST) and Runtime Application Self-Protection (RASP) Tools in a Large Java-based System. CoRR Aishwarya Seth, Saikath Bhattacharya, Sarah Elder, Nusrat Zahan, Laurie A. Williams
2023	—	`conf`	Do Software Security Practices Yield Fewer Vulnerabilities? ICSE-SEIP Nusrat Zahan, Shohanuzzaman Shohan, Dan Harris, Laurie A. Williams
2023	J	`jnl`	Empirical Evaluation of Secure Development Processes (Dagstuhl Seminar 23181). Dagstuhl Reports Eric Bodden, Sam Weber, Laurie A. Williams
2023	J	`jnl`	Looking Backwards (and Forwards): NSF Secure and Trustworthy Computing 20-Year Retrospective Panel Transcription. IEEE Secur. Priv. Carl E. Landwehr, Michael K. Reiter, Laurie A. Williams, Gene Tsudik, Trent Jaeger, Tadayoshi Kohno, Apu Kapadia
2023	J	`jnl`	Open or Sneaky? Fast or Slow? Light or Heavy?: Investigating Security Releases of Open Source Packages. IEEE Trans. Software Eng. Nasif Imtiaz, Aniqa Khanom, Laurie A. Williams
2023	J	`jnl`	OpenSSF Scorecard: On the Path Toward Ecosystem-Wide Automated Security Metrics. IEEE Secur. Priv. Nusrat Zahan, Parth Kanakiya, Brian Hambleton, Shohanuzzaman Shohan, Laurie A. Williams
2023	J	`jnl`	S3C2 Summit 2023-02: Industry Secure Supply Chain Summit. CoRR Trevor Dunlap, Yasemin Acar, Michel Cucker, William Enck, Alexandros Kapravelos, Christian Kästner, Laurie A. Williams
2023	J	`jnl`	S3C2 Summit 2023-06: Government Secure Supply Chain Summit. CoRR William Enck, Yasemin Acar, Michel Cukier, Alexandros Kapravelos, Christian Kästner, Laurie A. Williams
2023	J	`jnl`	S3C2 Summit 2202-09: Industry Secure Suppy Chain Summit. CoRR Mindy Tran, Yasemin Acar, Michel Cucker, William Enck, Alexandros Kapravelos, Christian Kästner, Laurie A. Williams
2023	A	`conf`	SecretBench: A Dataset of Software Secrets. MSR Setu Kumar Basak, Lorenzo Neil, Bradley Reaves, Laurie A. Williams
2023	J	`jnl`	SecretBench: A Dataset of Software Secrets. CoRR Setu Kumar Basak, Lorenzo Neil, Bradley Reaves, Laurie A. Williams
2023	J	`jnl`	Software Bills of Materials Are Required. Are We There Yet? IEEE Secur. Priv. Nusrat Zahan, Elizabeth Lin, Mahzabin Tamanna, William Enck, Laurie A. Williams
2023	J	`jnl`	Software Supply Chain Security [Guest Editors' Introduction]. IEEE Secur. Priv. Fabio Massacci, Laurie A. Williams
2023	J	`jnl`	Trusting code in the wild: A social network-based centrality rating for developers in the Rust ecosystem. CoRR Nasif Imtiaz, Preya Shabrina, Laurie A. Williams
2023	J	`jnl`	What Are the Attackers Doing Now? Automating Cyberthreat Intelligence Extraction from Text on Pace with the Changing Threat Landscape: A Survey. ACM Comput. Surv. Md. Rayhanur Rahman, Rezvan Mahdavi-Hezaveh, Laurie A. Williams
2023	A*	`conf`	What Challenges Do Developers Face About Checked-in Secrets in Software Artifacts? ICSE Setu Kumar Basak, Lorenzo Neil, Bradley Reaves, Laurie A. Williams
2023	J	`jnl`	What Challenges Do Developers Face About Checked-in Secrets in Software Artifacts? CoRR Setu Kumar Basak, Lorenzo Neil, Bradley Reaves, Laurie A. Williams
2022	J	`jnl`	An Extended Model of Software Configuration. CoRR Rezvan Mahdavi-Hezaveh, Sameeha Fatima, Laurie A. Williams
2022	J	`jnl`	An investigation of security controls and MITRE ATT&CK techniques. CoRR Md. Rayhanur Rahman, Laurie A. Williams
2022	A	`conf`	Dazzle: Using Optimized Generative Adversarial Networks to Address Security Data Class Imbalance Issue. MSR Rui Shu, Tianpei Xia, Laurie A. Williams, Tim Menzies
2022	J	`jnl`	Dazzle: Using Optimized Generative Adversarial Networks to Address Security Data Class Imbalance Issue. CoRR Rui Shu, Tianpei Xia, Laurie A. Williams, Tim Menzies
2022	J	`jnl`	Do I really need all this work to find vulnerabilities? Empir. Softw. Eng. Sarah Elder, Nusrat Zahan, Rui Shu, Monica Metro, Valeri Kozarev, Tim Menzies, Laurie A. Williams
2022	J	`jnl`	Do I really need all this work to find vulnerabilities? An empirical case study comparing vulnerability detection techniques on a Java application. CoRR Sarah Elder, Nusrat Zahan, Rui Shu, Monica Metro, Valeri Kozarev, Tim Menzies, Laurie A. Williams
2022	J	`jnl`	Exploring the Shift in Security Responsibility. IEEE Secur. Priv. Charles Weir, Sammy Migues, Laurie A. Williams
2022	J	`jnl`	Feature toggles as code: Heuristics and metrics for structuring feature toggles. Inf. Softw. Technol. Rezvan Mahdavi-Hezaveh, Nirav Ajmeri, Laurie A. Williams
2022	J	`jnl`	From Threat Reports to Continuous Threat Intelligence: A Comparison of Attack Technique Extraction Methods from Textual Artifacts. CoRR Md. Rayhanur Rahman, Laurie A. Williams
2022	J	`jnl`	Investigating co-occurrences of MITRE ATT\&CK Techniques. CoRR Md. Rayhanur Rahman, Laurie A. Williams
2022	J	`jnl`	Omni: automated ensemble with unexpected models against adversarial evasion attack. Empir. Softw. Eng. Rui Shu, Tianpei Xia, Laurie A. Williams, Tim Menzies
2022	J	`jnl`	PREPRINT: Can the OpenSSF Scorecard be used to measure the security posture of npm and PyPI? CoRR Nusrat Zahan, Parth Kanakiya, Brian Hambleton, Shohanuzzaman Shohan, Laurie A. Williams
2022	J	`jnl`	PREPRINT: Do OpenSSF Scorecard Practices Contribute to Fewer Vulnerabilities? CoRR Nusrat Zahan, Shohanuzzaman Shohan, Dan Harris, Laurie A. Williams
2022	J	`jnl`	Phantom Artifacts & Code Review Coverage in Dependency Updates. CoRR Nasif Imtiaz, Laurie A. Williams
2022	J	`jnl`	Reducing the Cost of Training Security Classifier (via Optimized Semi-Supervised Learning). CoRR Rui Shu, Tianpei Xia, Huy Tu, Laurie A. Williams, Tim Menzies
2022	J	`jnl`	Top Five Challenges in Software Supply Chain Security: Observations From 30 Industry and Government Organizations. IEEE Secur. Priv. William Enck, Laurie A. Williams
2022	J	`jnl`	Trusting Trust: Humans in the Software Supply Chain Loop. IEEE Secur. Priv. Laurie A. Williams
2022	—	`conf`	What are Weak Links in the npm Supply Chain? ICSE (SEIP) Nusrat Zahan, Thomas Zimmermann, Patrice Godefroid, Brendan Murphy, Chandra Shekhar Maddila, Laurie A. Williams
2022	—	`conf`	What are the Practices for Secret Management in Software Artifacts? SecDev Setu Kumar Basak, Lorenzo Neil, Bradley Reaves, Laurie A. Williams
2022	J	`jnl`	What are the Practices for Secret Management in Software Artifacts? CoRR Setu Kumar Basak, Lorenzo Neil, Bradley Reaves, Laurie A. Williams
2022	J	`jnl`	Why secret detection tools are not enough: It's not just about false positives - An industrial case study. Empir. Softw. Eng. Md. Rayhanur Rahman, Nasif Imtiaz, Margaret-Anne D. Storey, Laurie A. Williams
2021	J	`jnl`	A Comparative Study of Vulnerability Reporting by Software Composition Analysis Tools. CoRR Nasif Imtiaz, Seaver Thorn, Laurie A. Williams
2021	A	`conf`	A comparative study of vulnerability reporting by software composition analysis tools. ESEM Nasif Imtiaz, Seaver Thorn, Laurie A. Williams
2021	J	`jnl`	Different Kind of Smells: Security Smells in Infrastructure as Code Scripts. IEEE Secur. Priv. Akond Rahman, Laurie A. Williams
2021	J	`jnl`	How to Better Distinguish Security Bug Reports (Using Dual Hyperparameter Optimization). Empir. Softw. Eng. Rui Shu, Tianpei Xia, Jianfeng Chen, Laurie A. Williams, Tim Menzies
2021	J	`jnl`	Improving Vulnerability Inspection Efficiency Using Active Learning. IEEE Trans. Software Eng. Zhe Yu, Christopher Theisen, Laurie A. Williams, Tim Menzies
2021	—	`conf`	Infiltrating security into development: exploring the world's largest software security study. ESEC/SIGSOFT FSE Charles Weir, Sammy Migues, Mike Ware, Laurie A. Williams
2021	J	`jnl`	Memory Error Detection in Security Testing. CoRR Nasif Imtiaz, Laurie A. Williams
2021	J	`jnl`	Open or Sneaky? Fast or Slow? Light or Heavy?: Investigating Security Releases of Open Source Packages. CoRR Nasif Imtiaz, Aniqa Khanom, Laurie A. Williams
2021	J	`jnl`	Security Smells in Ansible and Chef Scripts: A Replication Study. ACM Trans. Softw. Eng. Methodol. Akond Rahman, Md. Rayhanur Rahman, Chris Parnin, Laurie A. Williams
2021	—	`conf`	Software Security Readiness and Deployment. ISSRE Workshops Saikath Bhattacharya, Munindar P. Singh, Laurie A. Williams
2021	J	`jnl`	Software development with feature toggles: practices used by practitioners. Empir. Softw. Eng. Rezvan Mahdavi-Hezaveh, Jacob Dremann, Laurie A. Williams
2021	—	`conf`	Structuring a Comprehensive Software Security Course Around the OWASP Application Security Verification Standard. ICSE (SEET) Sarah Elder, Nusrat Zahan, Valeri Kozarev, Rui Shu, Tim Menzies, Laurie A. Williams
2021	J	`jnl`	Structuring a Comprehensive Software Security Course Around the OWASP Application Security Verification Standard. CoRR Sarah Elder, Nusrat Zahan, Val Kozarev, Rui Shu, Tim Menzies, Laurie A. Williams
2021	J	`jnl`	The People Who Live in Glass Houses Are Happy the Stones Weren't Thrown at Them [From the Editors]. IEEE Secur. Priv. Laurie A. Williams
2021	J	`jnl`	What are Weak Links in the npm Supply Chain? CoRR Nusrat Zahan, Laurie A. Williams, Thomas Zimmermann, Patrice Godefroid, Brendan Murphy, Chandra Shekhar Maddila
2021	J	`jnl`	What are the attackers doing now? Automating cyber threat intelligence extraction from text on pace with the changing threat landscape: A survey. CoRR Md. Rayhanur Rahman, Rezvan Mahdavi-Hezaveh, Laurie A. Williams
2020	—	`conf`	A Literature Review on Mining Cyberthreat Intelligence from Unstructured Texts. ICDM (Workshops) Md. Rayhanur Rahman, Rezvan Mahdavi-Hezaveh, Laurie A. Williams
2020	J	`jnl`	Better together: Comparing vulnerability prediction models. Inf. Softw. Technol. Christopher Theisen, Laurie A. Williams
2020	—	`conf`	Do configuration management tools make systems more secure?: an empirical research plan. HotSoS Md. Rayhanur Rahman, William Enck, Laurie A. Williams
2020	A*	`conf`	Gang of eight: a defect taxonomy for infrastructure as code scripts. ICSE Akond Rahman, Effat Farhana, Chris Parnin, Laurie A. Williams
2020	J	`jnl`	Omni: Automated Ensemble with Unexpected Models against Adversarial Evasion Attack. CoRR Rui Shu, Tianpei Xia, Laurie A. Williams, Tim Menzies
2020	J	`jnl`	The 'as Code' Activities: Development Anti-patterns for Infrastructure as Code. CoRR Akond Rahman, Effat Farhana, Laurie A. Williams
2020	J	`jnl`	The 'as code' activities: development anti-patterns for infrastructure as code. Empir. Softw. Eng. Akond Rahman, Effat Farhana, Laurie A. Williams
2020	J	`jnl`	Understanding Software Security from Design to Deployment. ACM SIGSOFT Softw. Eng. Notes Mehdi Mirakhorli, Matthias Galster, Laurie A. Williams
2020	J	`jnl`	Çorba: crowdsourcing to obtain requirements from regulations and breaches. Empir. Softw. Eng. Hui Guo, Özgür Kafali, Anne-Liz Jeukeng, Laurie A. Williams, Munindar P. Singh
2019	—	`conf`	A bird's eye view of knowledge needs related to penetration testing. HotSoS Akond Rahman, Laurie A. Williams
2019	—	`conf`	A synopsis of static analysis alerts on open source software. HotSoS Nasif Imtiaz, Laurie A. Williams
2019	J	`jnl`	A systematic mapping study of infrastructure as code research. Inf. Softw. Technol. Akond Rahman, Rezvan Mahdavi-Hezaveh, Laurie A. Williams
2019	J	`jnl`	Better Security Bug Report Classification via Hyperparameter Optimization. CoRR Rui Shu, Tianpei Xia, Laurie A. Williams, Tim Menzies
2019	A	`conf`	Challenges with responding to static analysis tool alerts. MSR Nasif Imtiaz, Akond Rahman, Effat Farhana, Laurie A. Williams
2019	A	`conf`	Characterizing Attacker Behavior in a Cybersecurity Penetration Testing Competition. ESEM Nuthan Munaiah, Akond Rahman, Justin Pelletier, Laurie A. Williams, Andrew Meneely
2019	J	`jnl`	Collaborative security risk estimation in agile software development. Inf. Comput. Secur. Inger Anne Tøndel, Martin Gilje Jaatun, Daniela Soares Cruzes, Laurie A. Williams
2019	J	`jnl`	Feature Toggle Driven Development: Practices usedby Practitioners. CoRR Rezvan Mahdavi-Hezaveh, Jacob Dremann, Laurie A. Williams
2019	A	`conf`	How Do Developers Act on Static Analysis Alerts? An Empirical Study of Coverity Usage. ISSRE Nasif Imtiaz, Brendan Murphy, Laurie A. Williams
2019	J	`jnl`	Improved Recognition of Security Bugs via Dual Hyperparameter Optimization. CoRR Rui Shu, Tianpei Xia, Jianfeng Chen, Laurie A. Williams, Tim Menzies
2019	J	`jnl`	Science Leaves Clues. IEEE Secur. Priv. Laurie A. Williams
2019	J	`jnl`	Security Smells in Infrastructure as Code Scripts. CoRR Akond Rahman, Md. Rayhanur Rahman, Chris Parnin, Laurie A. Williams
2019	A	`conf`	Share, But be Aware: Security Smells in Python Gists. ICSME Md. Rayhanur Rahman, Akond Rahman, Laurie A. Williams
2019	J	`jnl`	Source code properties of defective infrastructure as code scripts. Inf. Softw. Technol. Akond Rahman, Laurie A. Williams
2019	A*	`conf`	The seven sins: security smells in infrastructure as code scripts. ICSE Akond Rahman, Chris Parnin, Laurie A. Williams
2018	—	`conf`	A comparative analysis of manual methods for analyzing security requirements in regulatory documents: POSTER. HotSoS Sarah Elder, Anna Mattapallil, Laurie A. Williams
2018	A*	`conf`	Are vulnerabilities discovered and resolved like other defects? ICSE Patrick J. Morrison, Rahul Pandita, Xusheng Xiao, Ram Chillarege, Laurie A. Williams
2018	J	`jnl`	Are vulnerabilities discovered and resolved like other defects? Empir. Softw. Eng. Patrick Morrison, Rahul Pandita, Xusheng Xiao, Ram Chillarege, Laurie A. Williams
2018	J	`jnl`	Attack surface definitions: A systematic literature review. Inf. Softw. Technol. Christopher Theisen, Nuthan Munaiah, Mahran Al-Zyoud, Jeffrey C. Carver, Andrew Meneely, Laurie A. Williams
2018	—	`conf`	BP: Profiling Vulnerabilities on the Attack Surface. SecDev Christopher Theisen, Hyunwoo Sohn, Dawson Tripp, Laurie A. Williams
2018	J	`jnl`	Categorizing Defects in Infrastructure as Code. CoRR Akond Rahman, Sarah Elder, Faysal Hossain Shezan, Vanessa Frost, Jonathan Stallings, Laurie A. Williams
2018	A	`conf`	Characterizing Defective Configuration Scripts Used for Continuous Deployment. ICST Akond Rahman, Laurie A. Williams
2018	—	`conf`	Continuously integrating security. SEAD@ICSE Laurie A. Williams
2018	J	`jnl`	Cost-aware Vulnerability Prediction: the HARMLESS Approach. CoRR Zhe Yu, Christopher Theisen, Hyunwoo Sohn, Laurie A. Williams, Tim Menzies
2018	—	`conf`	Defect prediction metrics for infrastructure as code scripts in DevOps. ICSE (Companion Volume) Akond Rahman, Jonathan Stallings, Laurie A. Williams
2018	J	`jnl`	Engineering Security Vulnerability Prevention, Detection, and Response. IEEE Softw. Laurie A. Williams, Gary McGraw, Sammy Migues
2018	—	`conf`	How bad is it, really? an analysis of severity scores for vulnerabilities: poster. HotSoS Christopher Theisen, Laurie A. Williams
2018	—	`conf`	Identifying security issues in software development: are keywords enough? ICSE (Companion Volume) Patrick Morrison, Tosin Daniel Oyetoyan, Laurie A. Williams
2018	J	`jnl`	Mapping the field of software life cycle security metrics. Inf. Softw. Technol. Patrick Morrison, David Moye, Rahul Pandita, Laurie A. Williams
2018	—	`ed.`	Proceedings of the 5th Annual Symposium and Bootcamp on Hot Topics in the Science of Security, HoTSoS 2018, Raleigh, North Carolina, USA, April 10-11, 2018. HoTSoS Munindar P. Singh, Laurie A. Williams, Rick Kuhn, Tao Xie
2018	J	`jnl`	Source Code Properties of Defective Infrastructure as Code Scripts. CoRR Akond Rahman, Laurie A. Williams
2018	—	`conf`	Toward extraction of security requirements from text: poster. HotSoS Hui Guo, Özgür Kafali, Anne-Liz Jeukeng, Laurie A. Williams, Munindar P. Singh
2018	—	`conf`	What questions do programmers ask about configuration as code? RCoSE@ICSE Akond Rahman, Asif Partho, Patrick Morrison, Laurie A. Williams
2018	J	`jnl`	Where Are The Gaps? A Systematic Mapping Study of Infrastructure as Code Research. CoRR Akond Rahman, Rezvan Mahdavi-Hezaveh, Laurie A. Williams
2017	—	`conf`	Building forensics in: supporting the investigation of digital criminal activities (invited talk). SERF@ESEC/SIGSOFT FSE Laurie A. Williams
2017	—	`conf`	Characterizing Experimentation in Continuous Deployment: A Case Study on Bing. ICSE-SEIP Katja Kevic, Brendan Murphy, Laurie A. Williams, Jennifer Beckmann
2017	—	`conf`	Characterizing Scientific Reporting in Security Literature: An analysis of ACM CCS and IEEE S&P Papers. HotSoS Morgan Burcham, Mahran Al-Zyoud, Jeffrey C. Carver, Mohammed Noraden Alsaleh, Hongying Du, Fida Gillani, Jun Jiang, Akond Rahman, Özgür Kafali, Ehab Al-Shaer, Laurie A. Williams
2017	J	`jnl`	Highlights of the ACM student research competition. Commun. ACM Laurie A. Williams, Doug Baldwin
2017	A*	`conf`	How good is a security policy against real breaches?: a HIPAA case study. ICSE Özgür Kafali, Jasmine Jones, Megan Petruso, Laurie A. Williams, Munindar P. Singh
2017	J	`jnl`	Identifying the implied: Findings from three differentiated replications on the use of security requirements templates. Empir. Softw. Eng. Maria Riaz, Jason Tyler King, John Slankas, Laurie A. Williams, Fabio Massacci, Christian Quesada-López, Marcelo Jenkins
2017	—	`conf`	Measuring Security Practice Use: A Case Study at IBM. CESI@ICSE Patrick Morrison, Benjamin H. Smith, Laurie A. Williams
2017	—	`conf`	Predicting Android Application Security and Privacy Risk with Static Code Metrics. MOBILESoft@ICSE Akond Rahman, Priysha Pradhan, Asif Partho, Laurie A. Williams
2017	—	`conf`	Risk-Based Attack Surface Approximation: How Much Data Is Enough? ICSE-SEIP Christopher Theisen, Kim Herzig, Brendan Murphy, Laurie A. Williams
2017	J	`jnl`	Software Engineering Research at the International Conference on Software Engineering in 2016. ACM SIGSOFT Softw. Eng. Notes Christopher Theisen, Marcel Dunaiski, Laurie A. Williams, Willem Visser
2017	—	`ed.`	Software Engineering in Health Care - 4th International Symposium, FHIES 2014, and 6th International Workshop, SEHC 2014, Washington, DC, USA, July 17-18, 2014, Revised Selected Papers FHIES/SEHC Michaela Huhn, Laurie A. Williams
2017	—	`conf`	Step One Towards Science of Security. SafeConfig@CCS Mahran Al-Zyoud, Laurie A. Williams, Jeffrey C. Carver
2017	—	`conf`	Surveying Security Practice Adherence in Software Development. HotSoS Patrick Morrison, Benjamin H. Smith, Laurie A. Williams
2017	J	`jnl`	TMAP: Discovering relevant API methods through text mining of API documentation. J. Softw. Evol. Process. Rahul Pandita, Raoul Jetley, Sithu D. Sudarsan, Tim Menzies, Laurie A. Williams
2017	—	`conf`	Teaching Secure Software Development Through an Online Course. SecSE@ESORICS Christopher Theisen, Ted Zhu, Kevin M. Oliver, Laurie A. Williams
2017	J	`jnl`	The Top 10 Adages in Continuous Deployment. IEEE Softw. Chris Parnin, Eric Helms, Chris Atlee, Harley Boughton, Mark Ghattas, Andy Glover, James Holman, John Micco, Brendan Murphy, Tony Savor, Michael Stumm, Shari Whitaker, Laurie A. Williams
2017	—	`conf`	The rising tide lifts all boats: the advancement of science in cyber security (invited talk). ESEC/SIGSOFT FSE Laurie A. Williams
2017	J	`jnl`	To log, or not to log: using heuristics to identify mandatory log events - a controlled experiment. Empir. Softw. Eng. Jason Tyler King, Jonathan Stallings, Maria Riaz, Laurie A. Williams
2017	—	`conf`	Which Factors Influence Practitioners' Usage of Build Automation Tools? RCoSE@ICSE Akond Rahman, Asif Partho, David Meder, Laurie A. Williams
2017	—	`conf`	Writing good software engineering research papers: revisited. ICSE (Companion Volume) Christopher Theisen, Marcel Dunaiski, Laurie A. Williams, Willem Visser
2016	J	`jnl`	A grounded analysis of experts' decision-making during security assessments. J. Cybersecur. Hanan Hibshi, Travis D. Breaux, Maria Riaz, Laurie A. Williams
2016	—	`conf`	Continuous deployment at Facebook and OANDA. ICSE (Companion Volume) Tony Savor, Mitchell Douglas, Michael Gentili, Laurie A. Williams, Kent L. Beck, Michael Stumm
2016	A	`conf`	DIGS: A Framework for Discovering Goals for Security Requirements Engineering. ESEM Maria Riaz, Jonathan Stallings, Munindar P. Singh, John Slankas, Laurie A. Williams
2016	—	`conf`	Establishing a baseline for measuring advancement in the science of security: an analysis of the 2015 IEEE security & privacy proceedings. HotSoS Jeffrey C. Carver, Morgan Burcham, Sedef Akinli Koçak, Ayse Bener, Michael Felderer, Matthias Gander, Jason King, Jouni Markkula, Markku Oivo, Clemens Sauerwein, Laurie A. Williams
2016	A	`conf`	ICON: Inferring Temporal Constraints from Natural Language API Descriptions. ICSME Rahul Pandita, Kunal Taneja, Laurie A. Williams, Teresa Tung
2016	A	`conf`	NANE: Identifying Misuse Cases Using Temporal Norm Enactments. RE Özgür Kafali, Munindar P. Singh, Laurie A. Williams
2016	—	`book`	Perspectives on Data Science for Software Engineering Perspectives on Data Science for Software Engineering Tim Menzies, Laurie A. Williams, Thomas Zimmermann
2016	A*	`ed.`	Proceedings of the 38th International Conference on Software Engineering, ICSE 2016, Austin, TX, USA, May 14-22, 2016 ICSE Laura K. Dillon, Willem Visser, Laurie A. Williams
2016	—	`ed.`	Proceedings of the 38th International Conference on Software Engineering, ICSE 2016, Austin, TX, USA, May 14-22, 2016 - Companion Volume ICSE (Companion Volume) Laura K. Dillon, Willem Visser, Laurie A. Williams
2016	—	`conf`	Risk-based attack surface approximation: poster. HotSoS Christopher Theisen, Laurie A. Williams
2016	—	`conf`	Security practices in DevOps. HotSoS Akond Ashfaque Ur Rahman, Laurie A. Williams
2016	—	`conf`	Software security education at scale. ICSE (Companion Volume) Christopher Theisen, Laurie A. Williams, Kevin M. Oliver, Emerson R. Murphy-Hill
2016	—	`conf`	Software security in DevOps: synthesizing practitioners' perceptions and practices. CSED@ICSE Akond Ashfaque Ur Rahman, Laurie A. Williams
2016	—	`ch.`	Stack traces reveal attack surfaces. Perspectives on Data Science for Software Engineering Christopher Theisen, Laurie A. Williams
2016	—	`conf`	Systematically Developing Prevention, Detection, and Response Patterns for Security Requirements. RE Workshops Maria Riaz, Sarah Elder, Laurie A. Williams
2016	—	`conf`	Toward a normative approach for forensicability. HotSoS Özgür Kafali, Munindar P. Singh, Laurie A. Williams
2015	—	`conf`	Approximating Attack Surfaces with Stack Traces. ICSE (2) Christopher Theisen, Kim Herzig, Patrick Morrison, Brendan Murphy, Laurie A. Williams
2015	—	`conf`	Challenges with applying vulnerability prediction models. HotSoS Patrick Morrison, Kim Herzig, Brendan Murphy, Laurie A. Williams
2015	C	`conf`	Discovering likely mappings between APIs using text mining. SCAM Rahul Pandita, Raoul Praful Jetley, Sithu D. Sudarsan, Laurie A. Williams
2015	—	`conf`	Enabling forensics by proposing heuristics to identify mandatory log events. HotSoS Jason King, Rahul Pandita, Laurie A. Williams
2015	J	`jnl`	How have we evaluated software pattern application? A systematic mapping study of research design practices. Inf. Softw. Technol. Maria Riaz, Travis D. Breaux, Laurie A. Williams
2015	—	`conf`	Synthesizing Continuous Deployment Practices Used in Software Development. AGILE Akond Ashfaque Ur Rahman, Eric Helms, Laurie A. Williams, Chris Parnin
2015	—	`ch.`	Using Data to Make Decisions in Software Engineering. The Art and Science of Analyzing Software Data Brendan Murphy, Jacek Czerwonka, Laurie A. Williams
2014	A	`conf`	Access Control Policy Evolution: An Empirical Study. ISSRE Jeehyun Hwang, Da Young Lee, Laurie A. Williams, Mladen A. Vouk
2014	—	`conf`	Access control policy evolution: an empirical study. HotSoS Jeehyun Hwang, Laurie A. Williams, Mladen A. Vouk
2014	B	`conf`	Agile Software Development in Practice. XP Maureen Doyle, Laurie A. Williams, Mike Cohn, Kenneth S. Rubin
2014	—	`conf`	An analysis of Fedora security profile. HotSoS Shweta Subramani, Mladen A. Vouk, Laurie A. Williams
2014	A	`conf`	Hidden in plain sight: Automatically identifying security requirements from natural language artifacts. RE Maria Riaz, Jason Tyler King, John Slankas, Laurie A. Williams
2014	—	`conf`	Log your CRUD: design principles for software logging mechanisms. HotSoS Jason Tyler King, Laurie A. Williams
2014	—	`conf`	On Coverage-Based Attack Profiles. SERE (Companion) Anthony Thyron Rivers, Mladen A. Vouk, Laurie A. Williams
2014	—	`ed.`	Proceedings of the 2014 Symposium and Bootcamp on the Science of Security, HotSoS 2014, Raleigh, NC, USA, April 08 - 09, 2014 HotSoS Laurie A. Williams, David M. Nicol, Munindar P. Singh
2014	A	`conf`	Relation extraction for inferring access control rules from natural language artifacts. ACSAC John Slankas, Xusheng Xiao, Laurie A. Williams, Tao Xie
2014	J	`jnl`	Software Development Analytics (Dagstuhl Seminar 14261). Dagstuhl Reports Harald C. Gall, Tim Menzies, Laurie A. Williams, Thomas Zimmermann
2014	—	`conf`	Towards a framework to measure security expertise in requirements analysis. ESPRE Hanan Hibshi, Travis D. Breaux, Maria Riaz, Laurie A. Williams
2014	J	`jnl`	Towards the prioritization of system test cases. Softw. Test. Verification Reliab. Hema Srikanth, Sean Banerjee, Laurie A. Williams, Jason A. Osborne
2014	A	`conf`	Using templates to elicit implied security requirements from functional requirements - a controlled experiment. ESEM Maria Riaz, John Slankas, Jason Tyler King, Laurie A. Williams
2013	—	`conf`	A comparative evaluation of static analysis actionable alert identification techniques. PROMISE Sarah Smith Heckman, Laurie A. Williams
2013	J	`jnl`	A comparison of the efficiency and effectiveness of vulnerability discovery techniques. Inf. Softw. Technol. Andrew Austin, Casper Holmgreen, Laurie A. Williams
2013	—	`conf`	Access Control Policy Extraction from Unconstrained Natural Language Text. SocialCom John Slankas, Laurie A. Williams
2013	A	`conf`	An experience report for software quality evaluation in highly iterative development methodology using traditional metrics. ISSRE Kumi Jinzenji, Takashi Hoshino, Laurie A. Williams, Kenji Takahashi
2013	J	`jnl`	Can traditional fault prediction models be used for vulnerability prediction? Empir. Softw. Eng. Yonghee Shin, Laurie A. Williams
2013	—	`conf`	Cataloging and Comparing Logging Mechanism Specifications for Electronic Health Record Systems. HealthTech Jason Tyler King, Laurie A. Williams
2013	—	`conf`	Determining "Grim Reaper" Policies to Prevent Languishing Bugs. ICSM Patrick Francis, Laurie A. Williams
2013	A	`conf`	Have Agile Techniques been the Silver Bullet for Software Development at Microsoft? ESEM Brendan Murphy, Christian Bird, Thomas Zimmermann, Laurie A. Williams, Nachiappan Nagappan, Andrew Begel
2013	—	`conf`	Non-operational testing of software for security issues. ISSRE (Supplemental Proceedings) Shweta Subramani, Mladen A. Vouk, Laurie A. Williams
2013	—	`conf`	Proposing Regulatory-Driven Automated Test Suites. AGILE Patrick Morrison, Casper Holmgreen, Aaron Massey, Laurie A. Williams
2013	—	`conf`	Proposing regulatory-driven automated test suites for electronic health record systems. SEHC@ICSE Patrick Morrison, Casper Holmgreen, Aaron Massey, Laurie A. Williams
2013	—	`conf`	To branch or not to branch that is the question. ISSRE (Supplemental Proceedings) Brendan Murphy, Laurie A. Williams
2013	—	`conf`	Using software reliability models for security assessment - Verification of assumptions. ISSRE (Supplemental Proceedings) Da Young Lee, Mladen A. Vouk, Laurie A. Williams
2012	—	`conf`	An Analysis of HIPAA Breach Data. HealthSec Patrick Morrison, Laurie A. Williams
2012	J	`jnl`	Audit Mechanisms in Electronic Health Record Systems: Protected Health Information May Remain Vulnerable to Undetected Misuse. Int. J. Comput. Model. Algorithms Medicine Jason Tyler King, Ben H. Smith, Laurie A. Williams
2012	—	`conf`	Classifying Natural Language Sentences for Policy. POLICY John Slankas, Laurie A. Williams
2012	—	`conf`	Metric-Based Quality Evaluations for Iterative Software Development Approaches Like Agile. ISSRE Workshops Kumi Jinzenji, Takashi Hoshino, Laurie A. Williams, Kenji Takahashi
2012	—	`conf`	Modifying without a trace: general audit guidelines are inadequate for open-source electronic health record audit mechanisms. IHI Jason Tyler King, Ben H. Smith, Laurie A. Williams
2012	—	`conf`	On the Effective Use of Security Test Patterns. SERE Ben H. Smith, Laurie A. Williams
2012	—	`conf`	Secure Logging and Auditing in Electronic Health Records Systems: What Can We Learn from the Payment Card Industry. HealthSec Jason Tyler King, Laurie A. Williams
2012	—	`conf`	Security requirements patterns: understanding the science behind the art of pattern writing. RePa Maria Riaz, Laurie A. Williams
2012	J	`jnl`	Validating software metrics: A spectrum of philosophies. ACM Trans. Softw. Eng. Methodol. Andrew Meneely, Ben H. Smith, Laurie A. Williams
2012	J	`jnl`	What agile teams think of agile principles. Commun. ACM Laurie A. Williams
2011	J	`jnl`	A systematic literature review of actionable alert identification techniques for automated static code analysis. Inf. Softw. Technol. Sarah Smith Heckman, Laurie A. Williams
2011	A	`conf`	An Empirical Study on the Relation between Dependency Neighborhoods and Failures. ICST Thomas Zimmermann, Nachiappan Nagappan, Kim Herzig, Rahul Premraj, Laurie A. Williams
2011	—	`conf`	An initial study on the use of execution complexity metrics as indicators of software vulnerabilities. SESS@ICSE Yonghee Shin, Laurie A. Williams
2011	—	`conf`	Does adding manpower also affect quality?: an empirical, longitudinal analysis. SIGSOFT FSE Andrew Meneely, Pete Rotella, Laurie A. Williams
2011	J	`jnl`	Evaluating Complexity, Code Churn, and Developer Activity Metrics as Indicators of Software Vulnerabilities. IEEE Trans. Software Eng. Yonghee Shin, Andrew Meneely, Laurie A. Williams, Jason A. Osborne
2011	—	`conf`	Evaluating access control of open source electronic health record systems. SEHC@ICSE Eric Helms, Laurie A. Williams
2011	A	`conf`	One Technique is Not Enough: A Comparison of Vulnerability Discovery Techniques. ESEM Andrew Austin, Laurie A. Williams
2011	—	`ch.`	Pair Programming. Making Software Laurie A. Williams
2011	A	`conf`	Scrum + Engineering Practices: Experiences of Three Microsoft Teams. ESEM Laurie A. Williams, Gabe Brown, Adam Meltzer, Nachiappan Nagappan
2011	—	`conf`	Seven habits of highly impactful empirical software engineers. PROMISE Laurie A. Williams
2011	A*	`conf`	Socio-technical developer networks: should we trust our measurements? ICSE Andrew Meneely, Laurie A. Williams
2011	—	`conf`	The role of data use agreements in specifying legally compliant software requirements. RELAW Jessica Young Schmidt, Annie I. Antón, Laurie A. Williams, Paul N. Otto
2011	—	`ed.`	Third International Workshop on Security Measurements and Metrics, Metrisec@ESEM 2011, Banff, Alberta, Canada, September 21, 2011 Metrisec@ESEM James Walden, Laurie A. Williams
2011	A	`conf`	Using SQL Hotspots in a Prioritization Heuristic for Detecting All Types of Web Application Vulnerabilities. ICST Ben H. Smith, Laurie A. Williams
2010	J	`jnl`	Agile Software Development Methodologies and Practices. Adv. Comput. Laurie A. Williams
2010	A	`conf`	Does Hardware Configuration and Processor Load Impact Software Fault Observability? ICST Raza Abbas Syed, Brian Robinson, Laurie A. Williams
2010	—	`conf`	Driving Process Improvement via Comparative Agility Assessment. AGILE Laurie A. Williams, Kenny Rubin, Mike Cohn
2010	J	`jnl`	Guest editorial: Special issue on software reliability engineering. Empir. Softw. Eng. Laurie A. Williams
2010	—	`conf`	Idea: Using System Level Testing for Revealing SQL Injection-Related Error Message Information Leaks. ESSoS Ben H. Smith, Laurie A. Williams, Andrew Austin
2010	—	`conf`	Improving developer activity metrics with issue tracking annotations. WETSoM Andrew Meneely, Mackenzie Corcoran, Laurie A. Williams
2010	J	`jnl`	On the Use of Issue Tracking Annotations for Improving Developer Activity Metrics. Adv. Softw. Eng. Andrew Meneely, Laurie A. Williams
2010	—	`ch.`	Pair Programming. Encyclopedia of Software Engineering Laurie A. Williams
2010	J	`jnl`	Protection Poker: The New Software Security "Game";. IEEE Secur. Priv. Laurie A. Williams, Andrew Meneely, Grant Shipley
2010	A	`conf`	Searching for a Needle in a Haystack: Predicting Security Vulnerabilities for Windows Vista. ICST Thomas Zimmermann, Nachiappan Nagappan, Laurie A. Williams
2010	A	`conf`	Strengthening the empirical analysis of the relationship between Linus' Law and software security. ESEM Andrew Meneely, Laurie A. Williams
2010	—	`conf`	Towards improved security criteria for certification of electronic health record systems. SEHC@ICSE Andrew Austin, Ben H. Smith, Laurie A. Williams
2009	A	`conf`	A Model Building Process for Identifying Actionable Static Analysis Alerts. ICST Sarah Smith Heckman, Laurie A. Williams
2009	J	`jnl`	John D. Musa. IEEE Softw. William Everett, James J. Cusick, Laurie A. Williams
2009	J	`jnl`	On automated prepared statement generation to remove SQL injection vulnerabilities. Inf. Softw. Technol. Stephen Thomas, Laurie A. Williams, Tao Xie
2009	J	`jnl`	On guiding the augmentation of an automated test suite via mutation analysis. Empir. Softw. Eng. Ben H. Smith, Laurie A. Williams
2009	A	`conf`	On preparing students for distributed software development with a synchronous, collaborative development platform. SIGCSE Andrew Meneely, Laurie A. Williams
2009	A	`conf`	On the Effectiveness of Unit Test Automation at Microsoft. ISSRE Laurie A. Williams, Gunnar Kudrjavets, Nachiappan Nagappan
2009	A	`conf`	Predicting Attack-prone Components. ICST Michael Gegick, Pete Rotella, Laurie A. Williams
2009	—	`conf`	Protection Poker: Structuring Software Security Risk Assessment and Knowledge Transfer. ESSoS Laurie A. Williams, Michael Gegick, Andrew Meneely
2009	A*	`conf`	Secure open source collaboration: an empirical study of linus' law. CCS Andrew Meneely, Laurie A. Williams
2009	J	`jnl`	Should software testers use mutation analysis to augment a test set? J. Syst. Softw. Ben H. Smith, Laurie A. Williams
2009	—	`conf`	Toward Non-security Failures as a Predictor of Security Faults and Failures. ESSoS Michael Gegick, Pete Rotella, Laurie A. Williams
2008	—	`ch.`	Agile Software Development. Wiley Encyclopedia of Computer Science and Engineering Laurie A. Williams, Mladen A. Vouk
2008	A	`conf`	An empirical model to predict security vulnerabilities using code complexity metrics. ESEM Yonghee Shin, Laurie A. Williams
2008	—	`conf`	Eleven Guidelines for Implementing Pair Programming in the Classroom. AGILE Laurie A. Williams, D. Scott McCrickard, Lucas Layman, Khaled Hussein
2008	A	`conf`	Empirical Software Change Impact Analysis using Singular Value Decomposition. ICST Mark Sherriff, Laurie A. Williams
2008	A	`conf`	Examining the Relationships between Performance Requirements and "Not a Problem" Defect Reports. RE Chih-Wei Ho, Laurie A. Williams, Brian Robinson
2008	—	`conf`	Is complexity really the enemy of software security? QoP Yonghee Shin, Laurie A. Williams
2008	B	`conf`	MimEc: intelligent user notification of faults in the eclipse IDE. CHASE Lucas Layman, Laurie A. Williams, Robert St. Amant
2008	A	`conf`	On establishing a benchmark for evaluating static analysis alert prioritization and classification techniques. ESEM Sarah Smith Heckman, Laurie A. Williams
2008	—	`conf`	Predicting failures with developer networks and social network analysis. SIGSOFT FSE Andrew Meneely, Laurie A. Williams, Will Snipes, Jason A. Osborne
2008	—	`conf`	Prioritizing software security fortification throughcode-level metrics. QoP Michael Gegick, Laurie A. Williams, Jason A. Osborne, Mladen A. Vouk
2008	—	`conf`	Privacy and security: what are you doing to keep the community safe? OOPSLA Companion Steven Fraser, Djenana Campara, Robert Gleichauf, Harriet Pearson, Peter P. Swire, Laurie A. Williams
2008	—	`ed.`	Proceedings 21st Conference on Software Engineering Education and Training, CSEET 2008, 14-17 April 2008, Charleston, South Carolina, USA CSEE&T Hossein Saiedian, Laurie A. Williams
2008	—	`conf`	Proposing SQL statement coverage metrics. SESS Ben H. Smith, Yonghee Shin, Laurie A. Williams
2008	B	`conf`	ROSE: a repository of education-friendly open-source projects. ITiCSE Andrew Meneely, Laurie A. Williams, Edward F. Gehringer
2008	A	`conf`	Ranking Attack-Prone Components with a Predictive Model. ISSRE Michael Gegick, Laurie A. Williams
2008	J	`jnl`	Realizing quality improvement through test driven development: results and experiences of four industrial teams. Empir. Softw. Eng. Nachiappan Nagappan, E. Michael Maximilien, Thirumalesh Bhat, Laurie A. Williams
2007	—	`conf`	Developing software performance with the performance refinement and evolution model. WOSP Chih-Wei Ho, Laurie A. Williams
2007	—	`conf`	Identifying fault-prone files using static analysis alerts through singular value decomposition. CASCON Mark Sherriff, Sarah Smith Heckman, Mike Lake, Laurie A. Williams
2007	A	`conf`	Improving Performance Requirements Specifications from Field Failure Reports. RE Chih-Wei Ho, Laurie A. Williams, Annie I. Antón
2007	J	`jnl`	Incorporating Performance Testing in Test-Driven Development. IEEE Softw. Michael J. Johnson, Chih-Wei Ho, E. Michael Maximilien, Laurie A. Williams
2007	—	`conf`	Lab Partners: If They're Good Enough for the Natural Sciences, Why Aren't They Good Enough for Us? CSEE&T Laurie A. Williams, Lucas Layman
2007	J	`jnl`	Lessons learned from seven years of pair programming at North Carolina State University. ACM SIGCSE Bull. Laurie A. Williams
2007	A	`conf`	Note to self: make assignments meaningful. SIGCSE Lucas Layman, Laurie A. Williams, Kelli M. Slaten
2007	A*	`conf`	On the Impact of a Collaborative Pedagogy on African American Millennial Students in Software Engineering. ICSE Laurie A. Williams, Lucas Layman, Kelli M. Slaten, Sarah B. Berenson, Carolyn B. Seaman
2007	—	`conf`	On the Sustained Use of a Test-Driven Development Practice at IBM. AGILE Julio Cesar Sanchez, Laurie A. Williams, E. Michael Maximilien
2007	J	`jnl`	On the design of more secure software-intensive systems by use of attack patterns. Inf. Softw. Technol. Michael Gegick, Laurie A. Williams
2007	A*	`conf`	Pallino: automation to support regression test selection for cots-based applications. ASE Jiang Zheng, Laurie A. Williams, Brian Robinson
2007	A	`conf`	Prioritization of Regression Tests using Singular Value Decomposition with Empirical Change Records. ISSRE Mark Sherriff, Mike Lake, Laurie A. Williams
2007	A	`conf`	Toward Reducing Fault Fix Time: Understanding Developer Behavior for the Design of Automated Fault Detection Tools. ESEM Lucas Layman, Laurie A. Williams, Robert St. Amant
2007	—	`conf`	Using Automated Fix Generation to Secure SQL Statements. SESS@ICSE Stephen Thomas, Laurie A. Williams
2007	A	`conf`	Using In-Process Testing Metrics to Estimate Post-Release Field Quality. ISSRE Nachiappan Nagappan, Laurie A. Williams, Mladen A. Vouk, Jason A. Osborne
2007	—	`conf`	Using groupings of static analysis alerts to identify files likely to contain field failures. ESEC/SIGSOFT FSE Mark Sherriff, Sarah Smith Heckman, J. Michael Lake, Laurie A. Williams
2006	—	`conf`	A Lightweight Process for Change Identification and Regression Test Selection in Using COTS Components. ICCBSS Jiang Zheng, Brian Robinson, Laurie A. Williams, Karen Smiley
2006	A*	`conf`	Applying regression test selection for COTS-based applications. ICSE Jiang Zheng, Brian Robinson, Laurie A. Williams, Karen Smiley
2006	J	`jnl`	Debunking the Nerd Stereotype with Pair Programming. Computer Laurie A. Williams
2006	A	`conf`	DevCOP: A Software Certificate Management System for Eclipse. ISSRE Mark Sherriff, Laurie A. Williams
2006	J	`jnl`	Essential communication practices for Extreme Programming in a global software development team. Inf. Softw. Technol. Lucas Layman, Laurie A. Williams, Daniela E. Damian, Hynek Bures
2006	—	`conf`	Examining the Compatibility of Student Pair Programmers. AGILE Laurie A. Williams, Lucas Layman, Jason A. Osborne, Neha Katira
2006	J	`jnl`	How should software reliability engineering (SRE) be taught? ACM SIGSOFT Softw. Eng. Notes Mario Garzia, John P. Hudepohl, Will Snipes, Michael R. Lyu, John D. Musa, Carol S. Smidts, Laurie A. Williams
2006	—	`conf`	Industry-Research Collaboration Empirical Software Engineering Issues Lutz Prechelt, Laurie A. Williams
2006	J	`jnl`	Motivations and measurements in an agile case study. J. Syst. Archit. Lucas Layman, Laurie A. Williams, Lynn Cunningham
2006	—	`conf`	On Agile Performance Requirements Specification and Testing. AGILE Chih-Wei Ho, Michael J. Johnson, Laurie A. Williams, E. Michael Maximilien
2006	J	`jnl`	On the Value of Static Analysis for Fault Detection in Software. IEEE Trans. Software Eng. Jiang Zheng, Laurie A. Williams, Nachiappan Nagappan, Will Snipes, John P. Hudepohl, Mladen A. Vouk
2006	A	`conf`	Personality types, learning styles, and an agile approach to software engineering education. SIGCSE Lucas Layman, Travis Cornwell, Laurie A. Williams
2006	—	`conf`	Roadmapping Empirical Software Engineering Issues Laurie A. Williams, Hakan Erdogmus, Richard W. Selby
2006	—	`conf`	Structuring Families of Industrial Case Studies. Empirical Software Engineering Issues Laurie A. Williams
2005	J	`jnl`	A process for identifying changes when source code is not available. ACM SIGSOFT Softw. Eng. Notes Jiang Zheng, Brian Robinson, Laurie A. Williams, Karen Smiley
2005	—	`conf`	Agile Software Development Methods: When and Why Do They Work? Business Agility and Information Technology Diffusion Balasubramaniam Ramesh, Pekka Abrahamsson, Alistair Cockburn, Kalle Lyytinen, Laurie A. Williams
2005	A	`conf`	An Initial Study of a Lightweight Process for Change Identification and Regression Test Selection When Source Code Is Not Available. ISSRE Jiang Zheng, Brian Robinson, Laurie A. Williams, Karen Smiley
2005	—	`conf`	Debunking the Geek Stereotype with Software Engineering Education. CSEE&T Laurie A. Williams
2005	—	`conf`	Early estimation of defect density using an in-process Haskell metrics model. A-MOST Mark Sherriff, Nachiappan Nagappan, Laurie A. Williams, Mladen A. Vouk
2005	J	`jnl`	Early estimation of defect density using an in-process Haskell metrics model. ACM SIGSOFT Softw. Eng. Notes Mark Sherriff, Nachiappan Nagappan, Laurie A. Williams, Mladen A. Vouk
2005	—	`conf`	Early estimation of software quality using in-process testing metrics: a controlled case study. WoSQ@ICSE Nachiappan Nagappan, Laurie A. Williams, Mladen A. Vouk, Jason A. Osborne
2005	J	`jnl`	Early estimation of software quality using in-process testing metrics: a controlled case study. ACM SIGSOFT Softw. Eng. Notes Nachiappan Nagappan, Laurie A. Williams, Mladen A. Vouk, Jason A. Osborne
2005	A	`conf`	How Should Software Reliability Engineering Be Taught? ISSRE John D. Musa, Laurie A. Williams
2005	—	`conf`	Matching attack patterns to security vulnerabilities in software-intensive system designs. SESS@ICSE Michael Gegick, Laurie A. Williams
2005	J	`jnl`	Matching attack patterns to security vulnerabilities in software-intensive system designs. ACM SIGSOFT Softw. Eng. Notes Michael Gegick, Laurie A. Williams
2005	J	`jnl`	On establishing the essential components of a technology-dependent framework: a strawman framework for industrial case study-based research. ACM SIGSOFT Softw. Eng. Notes Laurie A. Williams, Lucas Layman, Pekka Abrahamsson
2005	J	`jnl`	On the economics of requirements-based test case prioritization. ACM SIGSOFT Softw. Eng. Notes Hema Srikanth, Laurie A. Williams
2005	C	`conf`	OpenSeminar: Web-based Collaboration Tool for Open Educational Resources. CollaborateCom Michael Rappa, Sarah E. Smith, Alex Yacoub, Laurie A. Williams
2005	A	`conf`	Providing Test Quality Feedback Using Static Source Code and Automatic Test Suite Metrics. ISSRE Nachiappan Nagappan, Laurie A. Williams, Jason A. Osborne, Mladen A. Vouk, Pekka Abrahamsson
2005	—	`conf`	Resources for Agile Software Development in the Software Engineering Course. CSEE&T Laurie A. Williams, Sarah E. Smith, Michael Rappa
2005	—	`conf`	System test case prioritization of new and regression test cases. ISESE Hema Srikanth, Laurie A. Williams, Jason A. Osborne
2005	A	`conf`	Teaching an Active-Participation University Course in Software Reliability and Testing. ISSRE Laurie A. Williams
2005	A*	`conf`	Towards increasing the compatibility of student pair programmers. ICSE Neha Katira, Laurie A. Williams, Jason A. Osborne
2005	—	`conf`	Undergraduate Student Perceptions of Pair Programming and Agile Software Methodologies: Verifying a Model of Social Interaction. AGILE Kelli M. Slaten, Sarah B. Berenson, Laurie A. Williams, Lucas Layman, Maria A. Droujkova
2004	J	`jnl`	A structured experiment of test-driven development. Inf. Softw. Technol. Boby George, Laurie A. Williams
2004	—	`conf`	An Initial Exploration of the Relationship Between Pair Programming and Brooks' Law. Agile Development Conference Laurie A. Williams, Anuja Shukla, Annie I. Antón
2004	—	`conf`	Experiences in applying agile software development practices in new product development. IASTED Conf. on Software Engineering and Applications Aldo Dagnino, Karen Smiley, Hema Srikanth, Annie I. Antón, Laurie A. Williams
2004	—	`conf`	Exploring Extreme Programming in Context: An Industrial Case Study. Agile Development Conference Lucas Layman, Laurie A. Williams, Lynn Cunningham
2004	A	`conf`	GERT: An Empirical Reliability Estimation and Testing Feedback Tool. ISSRE Martin Davidsson, Jiang Zheng, Nachiappan Nagappan, Laurie A. Williams, Mladen A. Vouk
2004	—	`conf`	On Pair Rotation in the Computer Science Course. CSEE&T Hema Srikanth, Laurie A. Williams, Eric N. Wiebe, Carol Miller, Suzanne Balik
2004	J	`jnl`	On the need for a process for making reliable quality comparisons with industrial data. ACM SIGSOFT Softw. Eng. Notes Laurie A. Williams
2004	A	`conf`	On understanding compatibility of student pair programmers. SIGCSE Neha Katira, Laurie A. Williams, Eric N. Wiebe, Carol Miller, Suzanne Balik, Edward F. Gehringer
2004	A	`conf`	Preliminary Results On Using Static Analysis Tools For Software Inspection. ISSRE Nachiappan Nagappan, Laurie A. Williams, John P. Hudepohl, Will Snipes, Mladen A. Vouk
2004	—	`conf`	Sangam: a distributed pair programming plug-in for Eclipse. eTX Chih-Wei Ho, Somik Raha, Edward F. Gehringer, Laurie A. Williams
2004	—	`ch.`	Software Engineering for Internet Applications. The Practical Handbook of Internet Computing Laurie A. Williams
2004	A	`conf`	Teaching software development methods: the case of extreme programming. SIGCSE Joe Bergin, James Caristi, Yael Dubinsky, Orit Hazzan, Laurie A. Williams
2004	J	`jnl`	Voices of women in a software engineering course: reflections on collaboration. ACM J. Educ. Resour. Comput. Sarah B. Berenson, Kelli M. Slaten, Laurie A. Williams, Chih-Wei Ho
2003	—	`conf`	"Good enough" software reliability estimation plug-in for Eclipse. eTX Nachiappan Nagappan, Laurie A. Williams, Mladen A. Vouk
2003	Misc	`conf`	An Initial Investigation of Test Driven Development in Industry. SAC Boby George, Laurie A. Williams
2003	A*	`conf`	Assessing Test-Driven Development at IBM. ICSE E. Michael Maximilien, Laurie A. Williams
2003	—	`conf`	Building Pair Programming Knowledge through a Family of Experiments. ISESE Laurie A. Williams, Charlie McDowell, Nachiappan Nagappan, Julian Fernald, Linda L. Werner
2003	J	`jnl`	Guest Editor's Introduction: The XP Programmer-The Few-Minutes Programmer. IEEE Softw. Laurie A. Williams
2003	J	`jnl`	Guest Editors' Introduction: Agile Software Development: It's about Feedback and Change. Computer Laurie A. Williams, Alistair Cockburn
2003	A	`conf`	Improving the CS1 experience with pair programming. SIGCSE Nachiappan Nagappan, Laurie A. Williams, Miriam Ferzli, Eric N. Wiebe, Kai Yang, Carol Miller, Suzanne Balik
2003	—	`conf`	International Workshop on Empirical Evaluation of Agile Methods ("The Data Workshop"). XP/Agile Universe Grigori Melnik, Laurie A. Williams, Adam Geras
2003	C	`conf`	On Identifying Deficiencies in a Knowledge Management System. SEKE Prashant Baheti, Laurie A. Williams, Aldo Dagnino, Andrew Cordes
2003	—	`conf`	Pair Learning: With an Eye Toward Future Success. XP/Agile Universe Nachiappan Nagappan, Laurie A. Williams, Eric N. Wiebe, Carol Miller, Suzanne Balik, Miriam Ferzli, Julie Petlick
2003	—	`book`	Pair Programming Illuminated. Laurie A. Williams, Robert R. Kessler
2003	A	`conf`	Test-Driven Development as a Defect-Reduction Practice. ISSRE Laurie A. Williams, E. Michael Maximilien, Mladen A. Vouk
2003	—	`conf`	Virtual Teaming: Experiments and Experiences with Distributed Pair Programming. XP/Agile Universe P. David Stotts, Laurie A. Williams, Nachiappan Nagappan, Prashant Baheti, Dennis Jen, Anne Jackson
2002	—	`conf`	Adapting Extreme Programming for a Core Software Engineering Course. CSEE&T Anuja Shukla, Laurie A. Williams
2002	J	`jnl`	Agile Software Development. Comput. Sci. Educ. Laurie A. Williams, James E. Tomayko
2002	—	`conf`	Distributed Pair Programming. XP/Agile Universe P. David Stotts, Laurie A. Williams
2002	—	`conf`	Empirical Evaluation of Agile Processes. XP/Agile Universe Grigori Melnik, Laurie A. Williams, Adam Geras
2002	—	`conf`	Empirical Findings in Agile Methods. XP/Agile Universe Mikael Lindvall, Victor R. Basili, Barry W. Boehm, Patricia Costa, Kathleen Coleman Dangle, Forrest Shull, Roseanne Tesoriero Tvedt, Laurie A. Williams, Marvin V. Zelkowitz
2002	—	`ed.`	Extreme Programming and Agile Methods - XP/Agile Universe 2002, Second XP Universe and First Agile Universe Conference Chicago, IL, USA, August 4-7, 2002, Proceedings XP/Agile Universe Don Wells, Laurie A. Williams
2002	J	`jnl`	In Support of Pair Programming in the Introductory Computer Science Course. Comput. Sci. Educ. Laurie A. Williams, Eric N. Wiebe, Kai Yang, Miriam Ferzli, Carol Miller
2002	J	`jnl`	Integrating Agile Practices into Software Engineering Courses. Comput. Sci. Educ. Gregory W. Hislop, Michael J. Lutz, J. Fernando Naveda, W. Michael McCracken, Nancy R. Mead, Laurie A. Williams
2002	—	`conf`	Pair Programming: Experience the Difference. XP/Agile Universe Laurie A. Williams, Robert R. Kessler
2002	J	`jnl`	Teaching the PSP: Challenges and Lessons Learned. IEEE Softw. Jürgen Börstler, David A. Carrington, Gregory W. Hislop, Susan K. Lisack, Keith Olson, Laurie A. Williams
2002	—	`conf`	Workshop 3: Integrating Agile Practices into Software Engineering Courses. CSEE&T Laurie A. Williams, Michael J. Lutz, Gregory W. Hislop, Michael McCracken, Nancy R. Mead, J. Fernando Naveda
2001	A	`conf`	Collaboration vs plagiarism in computer science programming courses. SIGCSE Carolee Stewart-Gardiner, David G. Kay, Joyce Currie Little, Joseph D. Chase, John Fendrich, Laurie A. Williams, Ursula Wolz
2001	A	`conf`	Evolving Beyond Requirements Creep: A Risk-Based Evolutionary Prototyping Model. RE Ryan A. Carter, Annie I. Antón, Laurie A. Williams, Aldo Dagnino
2001	J	`jnl`	Experiments with Industry's "Pair-Programming" Model in the Computer Science Classroom. Comput. Sci. Educ. Laurie A. Williams, Robert R. Kessler
2001	A	`conf`	In support of student pair-programming. SIGCSE Laurie A. Williams, Richard L. Upchurch
2001	—	`conf`	Integrating Pair Programming into a Software Development Process. CSEE&T Laurie A. Williams
2000	J	`jnl`	All I Really Need to Know About Pair Programming I Learned in Kindergarten. Commun. ACM Laurie A. Williams, Robert R. Kessler
2000	—	`conf`	Hacker or hero? - extreme programming today (panel session). OOPSLA Addendum Steven Fraser, Kent L. Beck, Ward Cunningham, Ron Crocker, Martin Fowler, Linda Rising, Laurie A. Williams
2000	J	`jnl`	Strengthening the Case for Pair Programming. IEEE Softw. Laurie A. Williams, Robert R. Kessler, Ward Cunningham, Ron Jeffries
2000	—	`conf`	The Effects of "Pair-Pressure" and "Pair-Learning" on Software Engineering Education. CSEE&T Laurie A. Williams, Robert R. Kessler