Chadni Islam

🚀 Exciting News! Paper Accepted for Publication! Thrilled to announce that our paper, "An Investigation into Misuse of Java Security APIs by Large Language Models" authored by Zahra Mousavi, Chadni Islam @_Chadni_, Kristen Moore, Alsharif Abuadbba, Ali Babar @alibabar has been accepted in AsiaCCS 2024 (Core A)! 🛡️ The surge in using Large Language Models (LLMs) for code generation has sparked crucial discussions about code trustworthiness. Our research delves into this topic by focusing on the integration of security APIs. APIs are fundamental for software security, yet their effective integration poses significant challenges, often resulting in inadvertent misuse and vulnerabilities. 🎯 To address this, we investigated ChatGPT's capabilities in generating secure code for security API use cases in Java. Through a comprehensive evaluation involving 48 programming tasks and 5 widely used security APIs, we employed automated and manual approaches to detect security API misuse in ChatGPT-generated code. 🌐💡 Our findings reveal a concerning trend: Approximately 70% of instances contain security API misuse, a clear indication of the potential for security vulnerabilities in LLM-generated code. #AI #CodeGeneration #SoftwareSecurity #APIs #ChatGPT #Trustworthiness #Java #AsiaCCS2024

New paper accepted! 🎉 Excited to share our paper, "Design and Generation of Declarative API for Security Orchestrations" by @_Chadni_ , @alibabar and Surya Nepal has been accepted in the IEEE Transactions on Services Computing, one of the top journals in the service community. This paper introduces "DecOr" : a Declarative API driven Orchestration approach to alleviate the need for detailed understanding of the libraries and plugins to address changes of Security Orchestration Platforms. Main highlights of this work include: 1. Three sets of Declarative APIs to encapsulate activities of security orchestration. 2. A semantic framework to generate Declarative APIs from task descriptions leveraging natural language processing techniques. #securityorchestration #securityoperationscenter #naturallanguageprocessing #crest

Thrilled to announce that our latest paper, #Empirical analysis of inter-package #dependencies architecture and evolution: A Case Study of #Ubuntu, has been accepted by @ECSACONF 2023! 🌟 #SoftwareArchitecture

CREST members organised a party to bid farewell to 3 of our members, @_Chadni_, Yaser Mansouri, & @smfattah, who will move on to the next stage of their careers. It's our great pleasure to have you as colleagues. Wish you all the best & hope to continue collaborating with you!

Congrats to our #PhD student, @mousavi_sz, on passing the #MajorReview. Her research provides technical & human-centric support for effective use of #security #APIs. Her work also utilises recent #LLM advances like #ChatGPT for automation. @CSCRCoz @UniofAdelaide @GradSchoolUofA