Nusrat Zahan

26 papers A* 1A 1C 1Journal 15Unranked 8
YearRankTypeTitle / Venue / Authors
2025 — conf
Can the Rising Tide of Software Supply Chain Attacks Raise All Software Engineering Boats?
SIGSOFT FSE Companion
Laurie A. Williams, Sivana Hamer, Nusrat Zahan
2025 J jnl
Comparing effectiveness and efficiency of Interactive Application Security Testing (IAST) and Runtime Application Self-Protection (RASP) tools in a large java-based system.
Empir. Softw. Eng.
Aishwarya Seth, Saikath Bhattacharya, Sarah Elder, Nusrat Zahan, Laurie A. Williams
2025 A* conf
Leveraging Large Language Models to Detect NPM Malicious Packages.
ICSE
Nusrat Zahan, Philipp Burckhardt, Mikola Lysenko, Feross Aboukhadijeh, Laurie A. Williams
2025 J jnl
Prioritizing Security Practice Adoption: Empirical Insights on Software Security Outcomes in the npm Ecosystem.
CoRR
Nusrat Zahan, Laurie A. Williams
2025 J jnl
Research Directions in Software Supply Chain Security.
ACM Trans. Softw. Eng. Methodol.
Laurie A. Williams, Giacomo Benedetti, Sivana Hamer, Ranindya Paramitha, Imranur Rahman, Mahzabin Tamanna, Greg Tystahl, Nusrat Zahan, Patrick Morrison, Yasemin Acar, Michel Cukier, Christian Kästner, Alexandros Kapravelos, Dominik Wermke, William Enck
2024 J jnl
Characterizing Dependency Update Practice of NPM, PyPI and Cargo Packages.
CoRR
Imranur Rahman, Nusrat Zahan, Stephen Magill, William Enck, Laurie A. Williams
2024 A conf
MalwareBench: Malware samples are not enough.
MSR
Nusrat Zahan, Philipp Burckhardt, Mikola Lysenko, Feross Aboukhadijeh, Laurie A. Williams
2024 J jnl
S3C2 Summit 2023-11: Industry Secure Supply Chain Summit.
CoRR
Nusrat Zahan, Yasemin Acar, Michel Cukier, William Enck, Christian Kästner, Alexandros Kapravelos, Dominik Wermke, Laurie A. Williams
2024 J jnl
Shifting the Lens: Detecting Malware in npm Ecosystem with Large Language Models.
CoRR
Nusrat Zahan, Philipp Burckhardt, Mikola Lysenko, Feross Aboukhadijeh, Laurie A. Williams
2023 — conf
Advancing Safety Through IoT: Gas Detection and Automation Systems.
ICO (2)
Tasmina Akter Rupina, Pusmita Barua, Israt Binteh Habib, Tanjim Mahmud, Lutfun Nahar, Nusrat Zahan, Mohammad Shahadat Hossain, Karl Andersson
2023 J jnl
Comparing Effectiveness and Efficiency of Interactive Application Security Testing (IAST) and Runtime Application Self-Protection (RASP) Tools in a Large Java-based System.
CoRR
Aishwarya Seth, Saikath Bhattacharya, Sarah Elder, Nusrat Zahan, Laurie A. Williams
2023 — conf
Do Software Security Practices Yield Fewer Vulnerabilities?
ICSE-SEIP
Nusrat Zahan, Shohanuzzaman Shohan, Dan Harris, Laurie A. Williams
2023 J jnl
OpenSSF Scorecard: On the Path Toward Ecosystem-Wide Automated Security Metrics.
IEEE Secur. Priv.
Nusrat Zahan, Parth Kanakiya, Brian Hambleton, Shohanuzzaman Shohan, Laurie A. Williams
2023 J jnl
Software Bills of Materials Are Required. Are We There Yet?
IEEE Secur. Priv.
Nusrat Zahan, Elizabeth Lin, Mahzabin Tamanna, William Enck, Laurie A. Williams
2023 — conf
Software Supply Chain Risk Assessment Framework.
ICSE Companion
Nusrat Zahan
2022 J jnl
Do I really need all this work to find vulnerabilities?
Empir. Softw. Eng.
Sarah Elder, Nusrat Zahan, Rui Shu, Monica Metro, Valeri Kozarev, Tim Menzies, Laurie A. Williams
2022 J jnl
Do I really need all this work to find vulnerabilities? An empirical case study comparing vulnerability detection techniques on a Java application.
CoRR
Sarah Elder, Nusrat Zahan, Rui Shu, Monica Metro, Valeri Kozarev, Tim Menzies, Laurie A. Williams
2022 J jnl
PREPRINT: Can the OpenSSF Scorecard be used to measure the security posture of npm and PyPI?
CoRR
Nusrat Zahan, Parth Kanakiya, Brian Hambleton, Shohanuzzaman Shohan, Laurie A. Williams
2022 J jnl
PREPRINT: Do OpenSSF Scorecard Practices Contribute to Fewer Vulnerabilities?
CoRR
Nusrat Zahan, Shohanuzzaman Shohan, Dan Harris, Laurie A. Williams
2022 — conf
What are Weak Links in the npm Supply Chain?
ICSE (SEIP)
Nusrat Zahan, Thomas Zimmermann, Patrice Godefroid, Brendan Murphy, Chandra Shekhar Maddila, Laurie A. Williams
2021 — conf
A Multi-attribute Decision Making Approach for Trauma Center Site Selection.
ICCCNT
Kaniz Fatema, Md. Awlad Hossen Rony, Nusrat Zahan, Md. Zahid Hasan
2021 — conf
Breast Cancer Prediction with Gaussian Process Using Anthropometric Parameters.
ICCCNT
Sheikh Tonmoy, Habiba Khan Hiya, Md. Zahid Hasan, K. M. Zubair Hasan, Nusrat Zahan
2021 — conf
Structuring a Comprehensive Software Security Course Around the OWASP Application Security Verification Standard.
ICSE (SEET)
Sarah Elder, Nusrat Zahan, Valeri Kozarev, Rui Shu, Tim Menzies, Laurie A. Williams
2021 J jnl
Structuring a Comprehensive Software Security Course Around the OWASP Application Security Verification Standard.
CoRR
Sarah Elder, Nusrat Zahan, Val Kozarev, Rui Shu, Tim Menzies, Laurie A. Williams
2021 J jnl
What are Weak Links in the npm Supply Chain?
CoRR
Nusrat Zahan, Laurie A. Williams, Thomas Zimmermann, Patrice Godefroid, Brendan Murphy, Chandra Shekhar Maddila
2018 C conf
A CNN-Based Classification Model for Recognizing Visual Bengali Font.
IJCCI
Md. Zahid Hasan, Kh. Tanzila Rahman, Rokeya Islam Riya, K. M. Zubair Hasan, Nusrat Zahan