The seven sins: Security smells in infrastructure as code scripts

A Rahman, C Parnin, L Williams - 2019 IEEE/ACM 41st …, 2019 - ieeexplore.ieee.org
Practitioners use infrastructure as code (IaC) scripts to provision servers and development
environments. While developing IaC scripts, practitioners may inadvertently introduce …

An empirical study of code smells in transformer-based code generation techniques

ML Siddiq, SH Majumder, MR Mim… - 2022 IEEE 22nd …, 2022 - ieeexplore.ieee.org
Prior works have developed transformer-based language learning models to automatically
generate source code for a task without compilation errors. The datasets used to train these …

[PDF][PDF] Generate and pray: Using sallms to evaluate the security of llm generated code

ML Siddiq, JCS Santos - arXiv preprint arXiv:2311.00889, 2023 - lsiddiqsunny.github.io
With the growing popularity of Large Language Models (eg, GitHub Copilot, ChatGPT, etc.)
in software engineers' daily practices, it is important to ensure that the code generated by …

A systematic literature review on Android-specific smells

Z Wu, X Chen, SUJ Lee - Journal of Systems and Software, 2023 - Elsevier
Context: Code smells are well-known concepts in Object-Oriented (OO) programs as
symptoms that negatively impact software quality and cause long-term issues. However, the …

Quality assessment of chatgpt generated code and their use by developers

ML Siddiq, L Roney, J Zhang… - Proceedings of the 21st …, 2024 - dl.acm.org
The release of large language models (LLMs) like ChatGPT has revolutionized software
development. Prior works explored ChatGPT's generated response quality, the effectiveness …

Security misconfigurations in open source kubernetes manifests: An empirical study

A Rahman, SI Shamim, DB Bose… - ACM Transactions on …, 2023 - dl.acm.org
Context: Kubernetes has emerged as the de-facto tool for automated container
orchestration. Business and government organizations are increasingly adopting …

Security risks of porting c programs to WebAssembly

Q Stiévenart, C De Roover, M Ghafari - Proceedings of the 37th ACM …, 2022 - dl.acm.org
WebAssembly is a compilation target for cross-platform applications that is increasingly
being used. In this paper, we investigate whether one can transparently cross-compile C …

SafetyNOT: on the usage of the SafetyNet attestation API in Android

M Ibrahim, A Imran, A Bianchi - Proceedings of the 19th Annual …, 2021 - dl.acm.org
Many apps performing security-sensitive tasks (eg, online banking) attempt to verify the
integrity of the device they are running in and the integrity of their own code. To ease this …

Security code smells in Android ICC

P Gadient, M Ghafari, P Frischknecht… - Empirical software …, 2019 - Springer
Abstract Android Inter-Component Communication (ICC) is complex, largely unconstrained,
and hard for developers to understand. As a consequence, ICC is a common source of …

Security smells in smart contracts

M Demir, M Alalfi, O Turetken… - 2019 IEEE 19th …, 2019 - ieeexplore.ieee.org
The popularity of blockchain technology encourages organizations to use more blockchain
features in mission-critical processes such as trading, access control, and computational …