Session Chair: Davide Fucci
Presentations:
A comparative study of vulnerability reporting by software composition analysis tools
Nasif Imtiaz, Seaver Thorn, Laurie Williams
An Empirical Study of Rule-Based and Learning-Based Approaches for Static Application Security Testing
Roland Croft, Dominic Newlands, Ziyu Chen, Muhammad Ali Babar
An Empirical Analysis of Practitioners' Perspectives on Security Tool Integration into DevOps
Roshan Namal Rajapakse, Mansooreh Zahedi, Muhammad Ali Babar
Why Some Bug-bounty Vulnerability Reports are Invalid?
Saman Shafigh, Boualem Benatallah, Carlos Rodriguez, Mortada Al-Banna