Many engineering organizations are reimplementing and extending deep neural networks
from the research community. We describe this process as deep learning model …

Many software applications incorporate open-source third-party packages distributed by
third-party package registries. Guaranteeing authorship along this supply chain is a …

Many software engineers develop, fine-tune, and deploy deep learning (DL) models. They
use DL models in a variety of development frameworks and deploy to a range of runtime …

Embedded Network Stacks (ENS) enable low-resource devices to communicate with the
outside world, facilitating the development of Internet of Things and Cyber-Physical Systems …

As we increasingly depend on software systems, the consequences of breaches in the
software supply chain become more severe. High-profile cyber attacks like SolarWinds and …

The primary theory of software engineering is that an organization's Policies and Processes
influence the quality of its Products. We call this the PPP Theory. Although empirical …

Dynamic analysis of embedded firmware is a necessary capability for many security tasks,
eg, vulnerability detection. Rehosting is a technique that enables dynamic analysis by …

Internet of Things (IoT) systems allow software to directly interact with the physical world.
Recent IoT failures can be attributed to recurring software design flaws, suggesting IoT …

Software failures inform engineering work, standards, regulations. For example, the Log4J
vulnerability brought government and industry attention to evaluating and securing software …

Cybersecurity concerns about Internet of Things (IoT) devices and infrastructure are growing
each year. In response, organizations worldwide have published IoT cybersecurity …