Akond Rahman

2024

76. Using AI Assistants in Software Development: A Qualitative Study on Security Practices and Concerns

Jan H. Klemmer, Stefan Albert Horstmann, Nikhil Patnaik, Cordelia Ludden, Cordell Burton Jr., Carson Powers, Fabio Massacci, Akond Rahman, Daniel Votipka, Heather Richter Lipford, Awais Rashid, Alena Naiakshina, and Sascha Fahl in 2024 ACM SIGSAC Conference on Computer and Communications Security (CCS), 2024 Pre-print

75. State Reconciliation Defects in Infrastructure as Code

Md Mahadi Hassan, John Salavador, Shubhra Kanti Karmaker Santu, and Akond Rahman in ACM International Conference on the Foundations of Software Engineering (FSE), 2024 Pre-print

74. Evaluating the Quality of Open Source Ansible Playbooks: An Executability Perspective

Pemsith Mendis, Wilson Reeves, Muhammad Ali Babar, Yue Zhang, and Akond Rahman in 4th International Workshop on Software Engineering and AI for Data Quality in Cyber-Physical Systems/Internet of Things (SEA4DQ 2024) co-located with the Foundations of Software Engineering (FSE), 2024 Pre-print

73. Students Perceptions of Authentic Learning for Learning Information Flow Analysis

Akond Rahman, Fan Wu, and Hossain Shahriar in Frontiers in Education Conference (FIE) 2024, 2024 Pre-print

72. Challenges and Preferences of Learning Machine Learning: A Student Perspective

Effat Farhana, Fan Wu, Hossain Shahriar, Shubhra Kanti Karmaker Santu, and Akond Rahman in Frontiers in Education Conference (FIE) 2024, 2024 Pre-print

71. Student Perceptions of Authentic Learning to Learn White-box Testing

Akond Rahman, Yue Zhang, Fan Wu, Hossain Shahriar in 55th ACM Technical Symposium on Computer Science Education (SIGCSE) 2024, 2024 Pre-print

70. Defect Categorization in Compilers: A Multi-vocal Literature Review

Akond Rahman, Dibyendu Brinto Bose, Farhat Lamia Barsha, Rahul Pandita in ACM Computing Surveys (CSUR), 2024 Pre-print

69. An Empirical Study of Task Infections in Ansible Scripts

Akond Rahman, Dibyendu Brinto Bose, Yue Zhang, Rahul Pandita in Empirical Software Engineering Journal, 2024 Journal-first at FSE 2024 Pre-print

68. Does Generative AI Generate Smells Related to Container Orchestration?: An Exploratory Study with Kubernetes Manifests

Yue Zhang, Rachel Meredith, Wilson Reeves, Julia Coriolano, Ali Babar, and Akond Rahman in 21st International Conference on Mining Software Repositories, 2024 Pre-print

2023

67. Characterizing Static Analysis Alerts for Terraform Manifests: An Experience Report

Hanyang Hu, Yani Bu, Kristen Wong, Gaurav Sood, Karen Smiley, and Akond Rahman in IEEE 2023 IEEE Secure Development Conference (SecDev), 2023 Pre-print

66. Detecting and Characterizing Propagation of Security Weaknesses in Puppet-based Infrastructure Management

Akond Rahman and Chris Parnin in IEEE Transactions on Software Engineering (TSE), 2023 Journal-first at ICSE 2024 Pre-print

65. Come for Syntax, Stay for Speed, Understand Defects: An Empirical Study of Defects in Julia Programs

Akond Rahman, Dibyendu Brinto Bose, Raunak Shakya, and Rahul Pandita in Journal of Empirical Software Engineering (EMSE), 2023 Journal-first at FSE 2024 Pre-print

64. Security Misconfigurations in Open Source Kubernetes Manifests: An Empirical Study

Akond Rahman, Shazibul Islam Shamim, Dibyendu Brinto Bose, and Rahul Pandita in Journal of ACM Transactions on Software Engineering and Methodology (TOSEM), 2023 Journal-first at ESEC/FSE 2023 Pre-print

63. Practitioner Perceptions of Ansible Test Smells

Yue Zhang, Fan Wu, and Akond Rahman in 2nd International Workshop on the Foundations of Infrastructure Specification and Testing, co-located with the 20th IEEE International Conference on Software Architecture (ICSA 2023), 2023 Pre-print

62. Quality Assurance for Infrastructure Orchestrators: Emerging Results from Ansible

Yue Zhang, Muktadir Rahman, Fan Wu, and Akond Rahman in 2nd International Workshop on the Foundations of Infrastructure Specification and Testing, co-located with the 20th IEEE International Conference on Software Architecture (ICSA 2023), 2023 Pre-print

2022

61. Log-related Coding Patterns to Conduct Postmortems of Attacks in Supervised Learning-based Projects

Farzana Ahamed Bhuiyan and Akond Rahman in Journal of ACM Transactions on Privacy and Security (TOPS), 2022 Pre-print

60. Software Supply Chain Vulnerabilities Detection in Source Code: Performance Comparison between Traditional and Quantum Machine Learning Algorithms

Mst Shapna Akter, Md Jobair Hossain Faruk, Nafisa Anjum, Mohammad Masum, Hossain Shahriar, Akond Rahman, Fan Wu, and Alfredo Cuzzocrea in 2022 IEEE International Conference on Big Data (Big Data), 2022 Pre-print

59. Investigating Novel Approaches to Defend Software Supply Chain Attacks

Md. Jobair Hossain Faruk, M. Tasnim, Hossain Shahriar, Maria Valero, Akond Rahman and Fan Wu in 2022 IEEE International Symposium on Software Reliability Engineering Workshops (ISSREW), 2022 Pre-print

58. Towards Automation for MLOps: An Exploratory Study of Bot Usage in Deep Learning Libraries

Akond Rahman, Farzana Ahamed Bhuiyan, Mohammad Mehedi Hassan, Hossain Shahriar, and Fan Wu in 46th IEEE Computer Society Computers, Software, and Applications Conference (COMPSAC), 2022 Pre-print

57. Can We use Authentic Learning to Educate Students About Secure Infrastructure as Code Development?

Akond Rahman, Shazibul Islam Shamim, Hossain Shahriar, Fan Wu in 27th ACM Conference on Innovation and Technology in Computer Science Education (ITiCSE) 2022, 2022 Pre-print

56. Shifting Left for Machine Learning: An Empirical Study of Security Weaknesses in Supervised Learning-based Projects

Farzana Ahamed Bhuiyan, Stacey Prowell, Hossain Shahriar, Fan Wu, and Akond Rahman in 46th IEEE Computer Society Computers, Software, and Applications Conference (COMPSAC), 2022 Pre-print

55. As Code Testing: Characterizing Test Quality in Open Source Ansible Development

Mohammad Mehedi Hassan and Akond Rahman in International Conference of Software Testing, Validation, and Veriification (ICST), 2022 Pre-print

54. Lessons from Research to Practice on Writing Better Quality Puppet Scripts

Akond Rahman and Tushar Sharma in 29th IEEE International Conference on Software Analysis, Evolution and Reengineering (SANER), 2022 Pre-print

53. Vision for a Secure Elixir Ecosystem: An Empirical Study of Vulnerabilities in Elixir Programs

Dibyendu Brinto Bose, Kaitlyn Cottrell, Akond Rahman in ACM Southeast (ACMSE) 2022, 2022 Pre-print

52. What Questions Do Developers Ask About Julia?

Dibyendu Brinto Bose, Gerald Gannod, Akond Rahman, Kaitlyn Cottrell in ACM Southeast (ACMSE) 2022, 2022 Pre-print

2021

50. Malware Detection and Prevention using Artificial Intelligence Techniques

Md Jobair Hossain Faruk, Hossain Shahriar, Maria Valero, Farhat Lamia Barsha, Shahriar Sobhan, Md Abdullah Khan, Michael Whitman, Alfredo Cuzzocrea, Dan Lo, Akond Rahman, and Fan Wu in IEEE International Conference on Big Data (Big Data), 2021 Pre-print

51. Shhh!: 12 Practices for Secret Management in Infrastructure as Code

Akond Rahman, Farhat Lamia Barsha, Patrick Morrison in IEEE Secure Development Conference (SecDev), 2021 Pre-print

49. How Do Students Feel About Automated Security Static Analysis Exercises?

Akond Rahman, Hossain Shahriar, and Dibyendu Brinto Bose in Frontiers in Education Conference (FIE), 2021 Pre-print

48. Exercise Perceptions: Experience Report From A Secure Software Development Course

Akond Rahman, Hossain Shahriar, and Dibyendu Brinto Bose in 14th International Conference on the Quality of Information and Communications Technology (QUATIC), 2021 Pre-print

47. An Empirical Study of Vulnerabilities in Robotics

Kaitlyn Cottrell, Dibyendu Brinto Bose, Hossain Shahriar, and Akond Rahman in 45th IEEE Computer Society Computers, Software, and Applications Conference (COMPSAC), 2021 Pre-print

46. A Different Kind of Smell: Security Smells in Infrastructure as Code Scripts

Akond Rahman and Laurie Williams in IEEE Security and Privacy (S&P) Magazine, 2021 Pre-print

45. Practitioner Perception of Vulnerability Discovery Strategies

Farzana Ahamed Bhuiyan, Justin Murphy, Patrick Morrison, and Akond Rahman in 2nd International Workshop on Engineering and Cybersecurity of Critical Systems (EnCyCriS), co-located with the 43rd International Conference on Software Engineering (ICSE), 2021 Pre-print

44. ‘Under-reported’ Security Defects in Kubernetes Manifests

Dibyendu Brinto Bose, Akond Rahman, and Shazibul Islam Shamim in 2nd International Workshop on Engineering and Cybersecurity of Critical Systems (EnCyCriS), co-located with the 43rd International Conference on Software Engineering (ICSE), 2021 Pre-print

43. An Empirical Study of Bugs in COVID-19 Software Projects

Akond Rahman and Effat Farhana in Journal of Software Engineering Research and Development (JSERD), 2021 Pre-print

42. Security Bug Report Usage for Software Vulnerability Research: A Systematic Mapping Study

Farzana Ahamed Bhuiyan, Md. Bulbul Sharif, and Akond Rahman in Journal of IEEE Access, 2021 Pre-print

41. Security Smells in Ansible and Chef Scripts: A Replication Study

Akond Rahman, Md. Rayhanur Rahman, Chirs Parnin, and Laurie Williams in Journal of ACM Transactions on Software Engineering and Methodology (TOSEM), 2021 Covered by Hacking Security News Pre-print

2020

40. Testing Practices for Infrastructure as Code

Mohammad Mehedi Hasan, Farzana Ahamed Bhuiyan, and Akond Rahman in Languages and Tools for Next Generation Testing Workshop (LANGETI), co-located with the ACM Joint European Software Engineering Conference and Symposium on the Foundations of Software Engineering (ESEC/FSE), 2020 Pre-print

39. Characterizing Co-located Insecure Coding Patterns in Infrastructure as Code Scripts

Farzana Ahamed Bhuiyan and Akond Rahman in Workshop on Human Centric Software Engineering and Cyber Security, co-located with the 35th IEEE/ACM International Conference on Automated Software Engineering (ASE), 2020 Pre-print

38. Vulnerability Discovery Strategies Used in Software Projects

Farzana Ahamed Bhuiyan, Akond Rahman, and Patrick Morrison in Workshop on Human Centric Software Engineering and Cyber Security, co-located with the 35th IEEE/ACM International Conference on Automated Software Engineering (ASE), 2020 Pre-print

37. A Vision to Mitigate Bioinformatics Software Development Challenges

Akond Rahman and Farzana Ahamed Bhuiyan in Workshop on Human Centric Software Engineering and Cyber Security, co-located with the 35th IEEE/ACM International Conference on Automated Software Engineering (ASE), 2020 Pre-print

36. A Preliminary Taxonomy of Techniques Used in Software Fuzzing

Raunak Shakya and Akond Rahman in 7th Annual Hot Topics in the Science of Security (HoTSoS) Symposium, 2020 Pre-print

35. A Curated Dataset of Security Defects in Scientific Software Projects

Justin Murphy, Elias Brady, Shazibul Islam Shamim, and Akond Rahman in 7th Annual Hot Topics in the Science of Security (HoTSoS) Symposium, 2020 Pre-print

34. Can We Use Software Bug Reports to Identify Software Vulnerability Strategies?

Farzana Ahamed Bhuiyan, Raunak Shakya, and Akond Rahman in 7th Annual Hot Topics in the Science of Security (HoTSoS) Symposium, 2020 Pre-print

33. XI Commandments of Kubernetes Security: A Systematization of Knowledge Related to Kubernetes Security Practices

Shazibul Islam Shamim, Farzana Ahamed Bhuiyan, and Akond Rahman in IEEE Secure Development Conference (SecDev), 2020 Pre-print

32. The ‘as Code’ Activities: Development Anti-patterns for Infrastructure as Code

Akond Rahman, Effat Farhana, and Laurie Williams in Journal of Empirical Software Engineering (EMSE), 2020 Journal-first at ESEC/FSE 2020 Pre-print

31. Gang of Eight: A Defect Taxonomy for Infrastructure as Code Scripts

Akond Rahman, Effat Farhana, Chirs Parnin, and Laurie Williams in International Conference on Software Engineering (ICSE), 2020 Covered by Greg Wilson Pre-print

2019

30. Characterizing Attacker Behavior in a Cybersecurity Penetration Testing Competition

Nuthan Munaiah, Akond Rahman, Justin Pelletier, Laurie Williams, and Andrew Meneely in International Symposium on Empirical Software Engineering and Measurement (ESEM), 2019 Pre-print

29. Share, But Be Aware: Security Smells in Python Gists

Md. Rayhanur Rahman, Akond Rahman, and Laurie Williams in International Conference on Software Maintenance and Evolution (ICSME), 2019 Pre-print

28. Synthesizing Program Execution Time Discrepancies in Julia Used for Scientific Software

Effat Farhana, Nasif Imtiaz, and Akond Rahman in International Conference on Software Maintenance and Evolution (ICSME), 2019 Pre-print

27. Source Code Properties of Defective Infrastructure as Code Scripts

Akond Rahman and Laurie Williams in Journal of Information and Software Technology (IST), 2019 Pre-print

26. Blockchain Enabled AI Marketplace: The Price You Pay For Trust

Kanthi Sarpatwar, Venkata Sitaramagiridharganesh Ganapavarapu, Karthikeyan Shanmugam, Akond Rahman, and Roman Vaculin in International Workshop of Blockchain Meets Computer Vision and Artificial Intelligence, co-located with Conference on Computer Vision and Pattern Recognition (CVPR), 2019 Pre-print

25. Anti-patterns in Infrastructure as Code

Akond Rahman in NC State University, 2019 NC State CSC Distinguished Dissertation Award, NC State College of Engineering Distinguished Dissertation Award Pre-print

24. Snakes in Paradise?: Insecure Python-related Coding Practices in Stack Overflow

Akond Rahman, Effat Farhana, and Nasif Imtiaz in International Conference on Mining Software Repositories (MSR), 2019 Pre-print

23. Challenges with Responding to Static Analysis Tool Alerts

Nasif Imtiaz, Akond Rahman, Effat Farhana, and Laurie Williams in International Conference on Mining Software Repositories (MSR), 2019 Pre-print

22. A Bird’s Eye View of Knowledge Needs Related to Penetration Testing

Akond Rahman and Laurie Williams in 6th Annual Hot Topics in the Science of Security (HoTSoS) Symposium, 2019 Pre-print

21. The Seven Sins: Security Smells in Infrastructure as Code Scripts

Akond Rahman, Chirs Parnin, and Laurie Williams in International Conference on Software Engineering (ICSE), 2019 ACM SIGSOFT Distinguished Paper Award Pre-print

20. A Systematic Mapping Study of Infrastructure as Code Research

Akond Rahman, Rezvan Mahdavi-Hezaveh, and Laurie Williams in Journal of Information and Software Technology (IST), 2019 Pre-print

2018

19. Characterizing The Influence of Continuous Integration: Empirical Results from 250+ Open Source and Proprietary Projects

Akond Rahman, Amritanshu Agrawal, Rahul Krishna, and Alexander Sobran in 4th International Workshop on Software Analytics (SWAN), co-located with European Software Engineering Conference and Symposium on the Foundations of Software Engineering (ESEC/FSE), 2018 Pre-print

18. Defect Prediction Metrics for Infrastructure as Code Scripts in DevOps

Akond Rahman, Jonathan Stallings, and Laurie Williams in International Conference on Software Engineering (ICSE), 2018 Pre-print

17. What Questions Do Programmers Ask About Configuration As Code?

Akond Rahman, Asif Partho, Patrick Morisson, and Laurie Williams in 4th International Workshop on Rapid Continuous Software Engineering (RCoSE), co-located with International Conference for Software Engineering (ICSE), 2018 Pre-print

16. Comprehension Effort and Programming Activities: Related? Or Not Related?

Akond Rahman in International Conference of Mining Software Repositories (MSR), 2018 Pre-print

15. Anti-patterns in Infrastructure as Code

Akond Rahman in International Conference of Software Testing, Validation, and Veriification (ICST) - PhD Symposium, 2018 Pre-print

14. Characteristics of Defective Infrastructure as Code Scripts in DevOps

Akond Rahman in International Conference for Software Engineering (ICSE) - Doctoral Symposium, 2018 ACM SIGSOFT Best Doctoral Symposium Paper Award Pre-print

13. What is the Connection Between Issues, Bugs, and Enhancements? (Lessons Learned from 800+ Software Projects)

Rahul Krishna, Amritanshu Agrawal, Akond Rahman, Alexander Sobran and Tim Menzies in International Conference for Software Engineering (ICSE), 2018 Pre-print

12. We Don’t Need Another Hero? The Impact of ‘Heroes’ on Software Development

Amritanshu Agrawal, Akond Rahman, Rahul Krishna, Alexander Sobran and Tim Menzies in International Conference for Software Engineering (ICSE), 2018 Pre-print

11. Characterizing Defective Configuration Scripts Used For Continuous Deployment

Akond Rahman and Laurie Williams in International Conference of Software Testing, Validation, and Veriification (ICST), 2018 Pre-print

2017

10. Predicting Android Application Security and Privacy Risk with Static Code Metrics

Akond Rahman, Priysha Pradhan, Asif Partho, and Laurie Williams in 4th International Conference on Mobile Software Engineering and Systems (MOBILESoft), co-located with International Conference for Software Engineering (ICSE), 2017 Pre-print

9. Which Factors Influence Usage of Build Automation Tools?

Akond Rahman, Asif Partho, David Meder, and Laurie Williams in 3rd International Workshop on Rapid Continuous Software Engineering (RCoSE), co-located with International Conference for Software Engineering (ICSE), 2017 Pre-print

8. Characterizing Scientific Reporting in Security Literature: An analysis of ACM CCS and IEEE S&P Paper

Morgan Burcham, Mehran Al-Zyoud, Jeffrey Carver, Mohammed Alsaleh, Hongyi Du, F. Gilani, Jin Jiang, Akond Rahman, Ozgur Kafali, Ehab Al-Shaer, and Laurie Williams in 5th Annual Hot Topics in the Science of Security (HoTSoS) Symposium, 2017 Pre-print

2016

7. Software Security in DevOps: Synthesizing Practitioners’ Perceptions and Practices

Akond Rahman and Laurie Williams in 1st International Workshop on Continuous Software Evolution and Delivery (CSED), co-located with International Conference for Software Engineering (ICSE), 2016 Pre-print

6. Security practices in DevOps

Akond Rahman and Laurie Williams in 4th Annual Hot Topics in the Science of Security (HoTSoS) Symposium, 2016 Pre-print

2015

5. Synthesizing Continuous Deployment Practices Used in Software Development

Akond Rahman, Eric Helms, Laurie Williams, and Chris Parnin in 13th Agile Conference, 2015 Pre-print

2011

4. Multiple Targets Tracking Using Kinematics in Wireless Sensor Networks

Akond Rahman, Md. Atiqul Islam Mollah, and Mahmuda Naznin in Journal of Wireless Sensor Networks, 2011 Pre-print