Area(s) of Expertise

Cybersecurity

Publications

• Research Directions in Software Supply Chain Security , ACM Transactions on Software Engineering and Methodology (2025)
• An improved text classification modelling approach to identify security messages in heterogeneous projects , Software Quality Journal (2021)
• Are vulnerabilities discovered and resolved like other defects? , (2018)
• Identifying security issues in software development , (2018)
• Mapping the field of software life cycle security metrics , Information and Software Technology (2018)
• What questions do programmers ask about configuration as code? , (2018)
• Veteran developers' contributions and motivations: An open source perspective , 2016 IEEE Symposium on Visual Languages and Human-Centric Computing (VL/HCC) (2016)
• A Security Practices Evaluation Framework , (2015)
• Proposing Regulatory-Driven Automated Test Suites , (2013)
• Proposing regulatory-driven automated test suites for electronic health record systems , (2013)

View all publications