Mohammad Ghafari

137 papers A 30B 6C 10Misc 3Journal 62Unranked 25
YearRankTypeTitle / Venue / Authors
2026 J jnl
Can Developers rely on LLMs for Secure IaC Development?
CoRR
Ehsan Firouzi, Shardul Bhatt, Mohammad Ghafari
2026 J jnl
Can generative AI detect and fix real-world cryptographic misuses?
J. Syst. Softw.
Ehsan Firouzi, Mohammad Ghafari
2026 J jnl
Evaluating Large Language Models for Security Bug Report Prediction.
CoRR
Farnaz Soltaniani, Shoaib Razzaq, Mohammad Ghafari
2026 J jnl
From Data Leak to Secret Misses: The Impact of Data Leakage on Secret Detection Models.
CoRR
Farnaz Soltaniani, Mohammad Ghafari
2026 J jnl
Persistent Human Feedback, LLMs, and Static Analyzers for Secure Code Generation and Vulnerability Detection.
CoRR
Ehsan Firouzi, Mohammad Ghafari
2025 J jnl
Automated Testing of Broken Authentication Vulnerabilities in Web APIs with AuthREST.
CoRR
Davide Corradini, Mariano Ceccato, Mohammad Ghafari
2025 — conf
Benchmarking Prompt Engineering Techniques for Secure Code Generation with GPT Models.
Forge@ICSE
Marc Bruni, Fabio Gabrielli, Mohammad Ghafari, Martin Kropp
2025 J jnl
Benchmarking Prompt Engineering Techniques for Secure Code Generation with GPT Models.
CoRR
Marc Bruni, Fabio Gabrielli, Mohammad Ghafari, Martin Kropp
2025 J jnl
Guest Editorial for the Special Issue on Source Code Analysis and Manipulation, SCAM 2022.
J. Softw. Evol. Process.
Banani Roy, Mohammad Ghafari, Mariano Ceccato
2025 J jnl
Metaverse Security and Privacy Research: A Systematic Review.
CoRR
Argianto Rahartomo, Leonel Merino, Mohammad Ghafari
2025 J jnl
Metaverse security and privacy research: A systematic review.
Comput. Secur.
Argianto Rahartomo, Leonel Merino, Mohammad Ghafari
2025 — conf
Phishing Awareness via Game-Based Learning.
CSEE&T
Argianto Rahartomo, Ahmed Tareq Ali Ghaleb, Mohammad Ghafari
2025 J jnl
Phishing Awareness via Game-Based Learning.
CoRR
Argianto Rahartomo, Ahmed Tareq Ali Ghaleb, Mohammad Ghafari
2025 J jnl
Poisoned Source Code Detection in Code Models.
CoRR
Ehab Ghannoum, Mohammad Ghafari
2025 J jnl
Poisoned source code detection in code models.
J. Syst. Softw.
Ehab Ghannoum, Mohammad Ghafari
2025 — conf
Security Bug Report Prediction Within and Across Projects: A Comparative Study of BERT and Random Forest.
PROMISE
Farnaz Soltaniani, Mohammad Ghafari, Mohammed Sayagh
2025 J jnl
Security Bug Report Prediction Within and Across Projects: A Comparative Study of BERT and Random Forest.
CoRR
Farnaz Soltaniani, Mohammad Ghafari, Mohammed Sayagh
2025 — conf
The Dilemma of Privacy Protection for Developers in the Metaverse.
VR Workshops
Argianto Rahartomo, Leonel Merino, Yoshiki Ohshima, Mohammad Ghafari
2025 J jnl
The Dilemma of Privacy Protection for Developers in the Metaverse.
CoRR
Argianto Rahartomo, Leonel Merino, Mohammad Ghafari, Yoshiki Ohshima
2025 J jnl
Think Broad, Act Narrow: CWE Identification with Multi-Agent Large Language Models.
CoRR
Mohammed Sayagh, Mohammad Ghafari
2024 A conf
ChatGPT's Potential in Cryptography Misuse Detection: A Comparative Analysis with Static Analysis Tools.
ESEM
Ehsan Firouzi, Mohammad Ghafari, Mike Ebrahimi
2024 J jnl
ChatGPT's Potential in Cryptography Misuse Detection: A Comparative Analysis with Static Analysis Tools.
CoRR
Ehsan Firouzi, Mohammad Ghafari, Mike Ebrahimi
2024 A conf
From Struggle to Simplicity with a Usable and Secure API for Encryption in Java.
ESEM
Ehsan Firouzi, Ammar Mansuri, Mohammad Ghafari, Maziar Kaveh
2024 J jnl
From Struggle to Simplicity with a Usable and Secure API for Encryption in Java.
CoRR
Ehsan Firouzi, Ammar Mansuri, Mohammad Ghafari, Maziar Kaveh
2024 — conf
Gameful Introduction to Cryptography for Dyslexic Students.
CSEE&T
Argianto Rahartomo, Harpreet Kaur, Mohammad Ghafari
2024 J jnl
Gameful Introduction to Cryptography for Dyslexic Students.
CoRR
Argianto Rahartomo, Harpreet Kaur, Mohammad Ghafari
2024 A conf
LLM Security Guard for Code.
EASE
Arya Kavian, Mohammad Mehdi Pourhashem Kallehbasti, Sajjad Kazemi, Ehsan Firouzi, Mohammad Ghafari
2024 J jnl
LLM Security Guard for Code.
CoRR
Arya Kavian, Mohammad Mehdi Pourhashem Kallehbasti, Sajjad Kazemi, Ehsan Firouzi, Mohammad Ghafari
2024 A conf
Mining REST APIs for Potential Mass Assignment Vulnerabilities.
EASE
Arash Mazidi, Davide Corradini, Mohammad Ghafari
2024 J jnl
Mining REST APIs for Potential Mass Assignment Vulnerabilities.
CoRR
Arash Mazidi, Davide Corradini, Mohammad Ghafari
2024 J jnl
Time to Separate from StackOverflow and Match with ChatGPT for Encryption.
CoRR
Ehsan Firouzi, Mohammad Ghafari
2024 J jnl
Time to separate from StackOverflow and match with ChatGPT for encryption.
J. Syst. Softw.
Ehsan Firouzi, Mohammad Ghafari
2023 — conf
Insecure by Design in the Backbone of Critical Infrastructure.
CPS-IoT Week Workshops
Jos Wetzels, Daniel Ricardo dos Santos, Mohammad Ghafari
2023 J jnl
Insecure by Design in the Backbone of Critical Infrastructure.
CoRR
Jos Wetzels, Daniel Ricardo dos Santos, Mohammad Ghafari
2023 A conf
Naturalistic Static Program Analysis.
SANER
Mohammad Mehdi Pourhashem Kallehbasti, Mohammad Ghafari
2023 J jnl
Naturalistic Static Program Analysis.
CoRR
Mohammad Mehdi Pourhashem Kallehbasti, Mohammad Ghafari
2023 A conf
Wasmizer: Curating WebAssembly-driven Projects on GitHub.
MSR
Alexander Nicholson, Quentin Stiévenart, Arash Mazidi, Mohammad Ghafari
2023 J jnl
Wasmizer: Curating WebAssembly-driven Projects on GitHub.
CoRR
Alexander Nicholson, Quentin Stiévenart, Arash Mazidi, Mohammad Ghafari
2022 A conf
Developers Struggle with Authentication in Blazor WebAssembly.
ICSME
Pascal Marc André, Quentin Stiévenart, Mohammad Ghafari
2022 J jnl
Developers Struggle with Authentication in Blazor WebAssembly.
CoRR
Pascal Marc André, Quentin Stiévenart, Mohammad Ghafari
2022 A conf
FuzzingDriver: the Missing Dictionary to Increase Code Coverage in Fuzzers.
SANER
Arash Ale Ebrahim, Mohammadreza Hazhirpasand, Oscar Nierstrasz, Mohammad Ghafari
2022 J jnl
FuzzingDriver: the Missing Dictionary to Increase Code Coverage in Fuzzers.
CoRR
Arash Ale Ebrahim, Mohammadreza Hazhirpasand, Oscar Nierstrasz, Mohammad Ghafari
2022 Misc conf
How do developers deal with security issue reports on GitHub?
SAC
Noah Bühlmann, Mohammad Ghafari
2022 C conf
Message from the General Chair and Program Co-Chairs SCAM 2022.
SCAM
Mariano Ceccato, Banani Roy, Mohammad Ghafari
2022 J jnl
Mining unit test cases to synthesize API usage examples.
CoRR
Mohammad Ghafari, Konstantin Rubinov, Mohammad Mehdi Pourhashem Kallehbasti
2022 Misc conf
Security risks of porting C programs to webassembly.
SAC
Quentin Stiévenart, Coen De Roover, Mohammad Ghafari
2021 — conf
Crypto Experts Advise What They Adopt.
ASE Workshops
Mohammadreza Hazhirpasand, Mohammad Ghafari
2021 J jnl
Crypto Experts Advise What They Adopt.
CoRR
Mohammadreza Hazhirpasand, Oscar Nierstrasz, Mohammad Ghafari
2021 C conf
Cryptography Vulnerabilities on HackerOne.
QRS
Mohammadreza Hazhirpasand, Mohammad Ghafari
2021 J jnl
Cryptography Vulnerabilities on HackerOne.
CoRR
Mohammadreza Hazhirpasand, Mohammad Ghafari
2021 C conf
Dazed and Confused: What's Wrong with Crypto Libraries?
PST
Mohammadreza Hazhirpasand, Oscar Nierstrasz, Mohammad Ghafari
2021 J jnl
Dazed and Confused: What's Wrong with Crypto Libraries?
CoRR
Mohammadreza Hazhirpasand, Oscar Nierstrasz, Mohammad Ghafari
2021 A conf
FluentCrypto: Cryptography in Easy Mode.
ICSME
Simon Kafader, Mohammad Ghafari
2021 J jnl
FluentCrypto: Cryptography in Easy Mode.
CoRR
Simon Kafader, Mohammad Ghafari
2021 J jnl
How Do Developers Deal with Security Issue Reports on GitHub?
CoRR
Noah Bühlmann, Mohammad Ghafari
2021 A conf
Hurdles for Developers in Cryptography.
ICSME
Mohammadreza Hazhirpasand, Oscar Nierstrasz, Mohammadhossein Shabani, Mohammad Ghafari
2021 J jnl
Hurdles for Developers in Cryptography.
CoRR
Mohammadreza Hazhirpasand, Oscar Nierstrasz, Mohammadhossein Shabani, Mohammad Ghafari
2021 C conf
Phish What You Wish.
QRS
Pascal Gadient, Pascal Gerig, Oscar Nierstrasz, Mohammad Ghafari
2021 J jnl
Phish What You Wish.
CoRR
Pascal Gadient, Pascal Gerig, Oscar Nierstrasz, Mohammad Ghafari
2021 C conf
Security Header Fields in HTTP Clients.
QRS
Pascal Gadient, Oscar Nierstrasz, Mohammad Ghafari
2021 J jnl
Security Header Fields in HTTP Clients.
CoRR
Pascal Gadient, Oscar Nierstrasz, Mohammad Ghafari
2021 J jnl
Security Risks of Porting C Programs to WebAssembly.
CoRR
Quentin Stiévenart, Coen De Roover, Mohammad Ghafari
2021 A conf
Security Smells Pervade Mobile App Servers.
ESEM
Pascal Gadient, Marc-Andrea Tarnutzer, Oscar Nierstrasz, Mohammad Ghafari
2021 J jnl
Security Smells Pervade Mobile App Servers.
CoRR
Pascal Gadient, Marc-Andrea Tarnutzer, Oscar Nierstrasz, Mohammad Ghafari
2021 C conf
The Security Risk of Lacking Compiler Protection in WebAssembly.
QRS
Quentin Stiévenart, Coen De Roover, Mohammad Ghafari
2021 J jnl
The Security Risk of Lacking Compiler Protection in WebAssembly.
CoRR
Quentin Stiévenart, Coen De Roover, Mohammad Ghafari
2021 C conf
What Do Developers Discuss about Code Comments?
SCAM
Pooja Rani, Mathias Birrer, Sebastiano Panichella, Mohammad Ghafari, Oscar Nierstrasz
2021 J jnl
What Do Developers Discuss about Code Comments?
CoRR
Pooja Rani, Mathias Birrer, Sebastiano Panichella, Mohammad Ghafari, Oscar Nierstrasz
2021 J jnl
What do class comments tell us? An investigation of comment evolution and practices in Pharo Smalltalk.
Empir. Softw. Eng.
Pooja Rani, Sebastiano Panichella, Manuel Leuenberger, Mohammad Ghafari, Oscar Nierstrasz
2021 — conf
Worrisome Patterns in Developers: A Survey in Cryptography.
ASE Workshops
Mohammadreza Hazhirpasand, Mohammad Ghafari
2021 J jnl
Worrisome Patterns in Developers: A Survey in Cryptography.
CoRR
Mohammadreza Hazhirpasand, Oscar Nierstrasz, Mohammad Ghafari
2020 A conf
Caveats in Eliciting Mobile App Requirements.
EASE
Nitish Patkar, Mohammad Ghafari, Oscar Nierstrasz, Sofija Hotomski
2020 J jnl
Caveats in Eliciting Mobile App Requirements.
CoRR
Nitish Patkar, Mohammad Ghafari, Oscar Nierstrasz, Sofija Hotomski
2020 A conf
CryptoExplorer: An Interactive Web Platform Supporting Secure Use of Cryptography APIs.
SANER
Mohammadreza Hazhirpasand, Mohammad Ghafari, Oscar Nierstrasz
2020 J jnl
CryptoExplorer: An Interactive Web Platform Supporting Secure Use of Cryptography APIs.
CoRR
Mohammadreza Hazhirpasand, Mohammad Ghafari, Oscar Nierstrasz
2020 A conf
Java Cryptography Uses in the Wild.
ESEM
Mohammadreza Hazhirpasand, Mohammad Ghafari, Oscar Nierstrasz
2020 J jnl
Java Cryptography Uses in the Wild.
CoRR
Mohammadreza Hazhirpasand, Mohammad Ghafari, Oscar Nierstrasz
2020 J jnl
Security Smells in Android.
CoRR
Mohammad Ghafari, Pascal Gadient, Oscar Nierstrasz
2020 A conf
Tricking Johnny into Granting Web Permissions.
EASE
Mohammadreza Hazhirpasand, Mohammad Ghafari, Oscar Nierstrasz
2020 J jnl
Tricking Johnny into Granting Web Permissions.
CoRR
Mohammadreza Hazhirpasand, Mohammad Ghafari, Oscar Nierstrasz
2020 A conf
Web APIs in Android through the Lens of Security.
SANER
Pascal Gadient, Mohammad Ghafari, Marc-Andrea Tarnutzer, Oscar Nierstrasz
2020 J jnl
Web APIs in Android through the Lens of Security.
CoRR
Pascal Gadient, Mohammad Ghafari, Oscar Nierstrasz
2020 J jnl
What do class comments tell us? An investigation of comment evolution and practices in Pharo.
CoRR
Pooja Rani, Sebastiano Panichella, Manuel Leuenberger, Mohammad Ghafari, Oscar Nierstrasz
2020 A conf
Why Research on Test-Driven Development is Inconclusive?
ESEM
Mohammad Ghafari, Timm Gross, Davide Fucci, Michael Felderer
2020 J jnl
Why Research on Test-Driven Development is Inconclusive?
CoRR
Mohammad Ghafari, Timm Gross, Davide Fucci, Michael Felderer
2019 J jnl
Security code smells in Android ICC.
Empir. Softw. Eng.
Pascal Gadient, Mohammad Ghafari, Patrick Frischknecht, Oscar Nierstrasz
2019 A conf
Testability First!
ESEM
Mohammad Ghafari, Markus Eggiman, Oscar Nierstrasz
2019 J jnl
Testability First!
CoRR
Mohammad Ghafari, Markus Eggiman, Oscar Nierstrasz
2019 A conf
The Impact of Developer Experience in Using Java Cryptography.
ESEM
Mohammadreza Hazhirpasand, Mohammad Ghafari, Stefan Krüger, Eric Bodden, Oscar Nierstrasz
2019 J jnl
The Impact of Developer Experience in Using Java Cryptography.
CoRR
Mohammadreza Hazhirpasand, Mohammad Ghafari, Stefan Krüger, Eric Bodden, Oscar Nierstrasz
2019 B conf
Towards a Catalogue of Mobile Elicitation Techniques - Research Preview.
REFSQ
Nitish Patkar, Pascal Gadient, Mohammad Ghafari, Oscar Nierstrasz
2018 J jnl
A systematic literature review of software visualization evaluation.
J. Syst. Softw.
Leonel Merino, Mohammad Ghafari, Craig Anslow, Oscar Nierstrasz
2018 J jnl
Efficient parsing with parser combinators.
Sci. Comput. Program.
Jan Kurs, Jan Vraný, Mohammad Ghafari, Mircea Lungu, Oscar Nierstrasz
2018 J jnl
Goal-oriented Mutation Testing with Focal Methods.
CoRR
Sten Vercammen, Mohammad Ghafari, Serge Demeyer, Markus Borg
2018 — conf
Goal-oriented mutation testing with focal methods.
A-TEST@ESEC/SIGSOFT FSE
Sten Vercammen, Mohammad Ghafari, Serge Demeyer, Markus Borg
2018 — conf
Idea: Benchmarking Android Data Leak Detection Tools.
ESSoS
Claudio Corrodi, Timo Spring, Mohammad Ghafari, Oscar Nierstrasz
2018 A conf
JIT feedback: what experienced developers like about static analysis.
ICPC
Yuriy Tymchuk, Mohammad Ghafari, Oscar Nierstrasz
2018 J jnl
Mining inline cache data to order inferred types in dynamic languages.
Sci. Comput. Program.
Nevena Milojkovic, Clément Béra, Mohammad Ghafari, Oscar Nierstrasz
2018 — conf
One Leak Is Enough to Expose Them All - From a WebRTC IP Leak to Web-Based Network Scanning.
ESSoS
Mohammadreza Hazhirpasand, Mohammad Ghafari
2018 J jnl
Security Code Smells in Android ICC.
CoRR
Pascal Gadient, Mohammad Ghafari, Patrick Frischknecht, Oscar Nierstrasz
2018 J jnl
The Impact of Feature Selection on Predicting the Number of Bugs.
CoRR
Haidar Osman, Mohammad Ghafari, Oscar Nierstrasz
2018 J jnl
Towards actionable visualization for software developers.
J. Softw. Evol. Process.
Leonel Merino, Mohammad Ghafari, Oscar Nierstrasz
2017 A conf
A framework for classifying and comparing source code recommendation systems.
SANER
Mohammad Ghafari, Hamidreza Moradi
2017 — conf
An Extensive Analysis of Efficient Bug Prediction Configurations.
PROMISE
Haidar Osman, Mohammad Ghafari, Oscar Nierstrasz, Mircea Lungu
2017 — conf
Automatic feature selection by regularization to improve bug prediction accuracy.
MaLTeSQuE
Haidar Osman, Mohammad Ghafari, Oscar Nierstrasz
2017 A conf
CityVR: Gameful Software Visualization.
ICSME
Leonel Merino, Mohammad Ghafari, Craig Anslow, Oscar Nierstrasz
2017 A conf
Exception evolution in long-lived Java systems.
MSR
Haidar Osman, Andrei Chis, Claudio Corrodi, Mohammad Ghafari, Oscar Nierstrasz
2017 A conf
Exploiting type hints in method argument names to improve lightweight type inference.
ICPC
Nevena Milojkovic, Mohammad Ghafari, Oscar Nierstrasz
2017 C conf
Harvesting the Wisdom of the Crowd to Infer Method Nullness in Java.
SCAM
Manuel Leuenberger, Haidar Osman, Mohammad Ghafari, Oscar Nierstrasz
2017 — conf
Hyperparameter optimization to improve bug prediction accuracy.
MaLTeSQuE
Haidar Osman, Mohammad Ghafari, Oscar Nierstrasz
2017 A conf
It's duck (typing) season!
ICPC
Nevena Milojkovic, Mohammad Ghafari, Oscar Nierstrasz
2017 A conf
KOWALSKI: Collecting API Clients in Easy Mode.
ICSME
Manuel Leuenberger, Haidar Osman, Mohammad Ghafari, Oscar Nierstrasz
2017 J jnl
Mining unit test cases to synthesize API usage examples.
J. Softw. Evol. Process.
Mohammad Ghafari, Konstantin Rubinov, Mohammad Mehdi Pourhashem Kallehbasti
2017 B conf
On the Impact of the Medium in the Effectiveness of 3D Software Visualizations.
VISSOFT
Leonel Merino, Johannes Fuchs, Michael Blumenschein, Craig Anslow, Mohammad Ghafari, Oscar Nierstrasz, Michael Behrisch, Daniel A. Keim
2017 A conf
On the evolution of exception usage in Java projects.
SANER
Haidar Osman, Andrei Chis, Jakob Schaerer, Mohammad Ghafari, Oscar Nierstrasz
2017 — conf
Renraku: the One Static Analysis Model to Rule Them All.
IWST
Yuriy Tymchuk, Mohammad Ghafari, Oscar Nierstrasz
2017 C conf
Security Smells in Android.
SCAM
Mohammad Ghafari, Pascal Gadient, Oscar Nierstrasz
2016 — conf
CommunityExplorer: A Framework for Visualizing Collaboration Networks.
IWST
Leonel Merino, Dominik Seliner, Mohammad Ghafari, Oscar Nierstrasz
2016 Misc conf
Improving the quality of code snippets in stack overflow.
SAC
MohammadReza Tavakoli, Abbas Heydarnoori, Mohammad Ghafari
2016 — conf
Inferring Types by Mining Class Usage Frequency from Inline Caches.
IWST
Nevena Milojkovic, Clément Béra, Mohammad Ghafari, Oscar Nierstrasz
2016 B conf
MetaVis: Exploring Actionable Visualization.
VISSOFT
Leonel Merino, Mohammad Ghafari, Oscar Nierstrasz, Alexandre Bergel, Juraj Kubelka
2016 — conf
Optimizing Parser Combinators.
IWST
Jan Kurs, Jan Vraný, Mohammad Ghafari, Mircea Lungu, Oscar Nierstrasz
2016 — conf
The Object Repository: Pulling Objects out of the Ecosystem.
IWST
Boris Spasojevic, Mohammad Ghafari, Oscar Nierstrasz
2016 B conf
Towards Actionable Visualisation in Software Development.
VISSOFT
Leonel Merino, Mohammad Ghafari, Oscar Nierstrasz
2016 B conf
Walls, Pillars and Beams: A 3D Decomposition of Quality Anomalies.
VISSOFT
Yuriy Tymchuk, Leonel Merino, Mohammad Ghafari, Oscar Nierstrasz
2016 — conf
When QualityAssistant Meets Pharo: Enforced Code Critiques Motivate More Valuable Rules.
IWST
Yuriy Tymchuk, Mohammad Ghafari, Oscar Nierstrasz
2015 — conf
A Safe Stopping Protocol to Enable Reliable Reconfiguration for Component-Based Distributed Systems.
FSEN
Mohammad Ghafari, Abbas Heydarnoori, Hassan Haghighi
2015 C conf
Automatically identifying focal methods under test in unit test cases.
SCAM
Mohammad Ghafari, Carlo Ghezzi, Konstantin Rubinov
2015 A conf
ExceptionTracer: a solution recommender for exceptions in an integrated development environment.
ICPC
Vahid Amintabar, Abbas Heydarnoori, Mohammad Ghafari
2015 — —
Mining unit test cases to synthesize API usage examples automatically.
Mohammad Ghafari
2014 A conf
Extracting Code Examples from Unit Test Cases.
ICSME
Mohammad Ghafari
2014 A conf
Mining unit tests for code recommendation.
ICPC
Mohammad Ghafari, Carlo Ghezzi, Andrea Mocci, Giordano Tamburrelli
2014 — conf
Towards a visualized code recommendation for APIs enriched with specification mining.
RSSE@ICSE
Mohammad Ghafari, Abbas Heydarnoori
2013 — conf
A Framework for Classifying and Comparing Architecture-centric Software Evolution Research.
CSMR
Pooyan Jamshidi, Mohammad Ghafari, Aakash Ahmad, Claus Pahl
2013 — conf
Partial Scalability to Ensure Reliable Dynamic Reconfiguration.
SASO Workshops
Mohammad Ghafari, Abbas Heydarnoori
2012 — conf
An architectural approach to ensure globally consistent dynamic reconfiguration of component-based systems.
CBSE
Mohammad Ghafari, Pooyan Jamshidi, Saeed Shahbazi, Hassan Haghighi
2012 B conf
Detection and Prevention of Data Manipulation from Client Side in Web Applications.
TrustCom
Mohammad Ghafari, Hamid Shoja, Mohammad Yosef Amirani