Demonstration venue · read-only. Every page can be browsed; the buttons that would change it are switched off. Create an account to run TaxoReview on your own data. A simulation from public publication records: the people listed were not invited and did not agree to review.
? Tutorial for this page
Demo Data from EDBT 2026 / reviewers in the wild / expert

Gazi Mahmud

dblp:190/1246 · DBLP profile ↗
← Back
1ranked-venue papers
1as first author
0since 2021 · last 2016
0009-0006-4046-889XORCID · reported

Domains — the database's venue-derived domains; a paper can count in several

Software engineering, systems software and programming languages · 1 · 1 first-author

Expertise — from the expertise taxonomy: the topics of the expert's papers under the CCF categories. A weight counts papers with recency: 1 for a paper about the topic, 0.3 when the topic is its context, halved every five years.

Software engineering, system software, and programming languages
1 paper
Software maintenance and evolution · 100%
Network and information security
1 paper
Systems and software security · 100%

Topics — the 4 heaviest of 4, each with the papers that count most for it

TopicWeightPapersLastEvidence papers
Software maintenance and evolution › software supply chain
open source vulnerability tracking		 0.212016
Making invisible things visible: tracking down known vulnerabilities at 3000 companies (showcase) · SIGSOFT FSE 2016
Software maintenance and evolution
software supply chain		 0.212016
Making invisible things visible: tracking down known vulnerabilities at 3000 companies (showcase) · SIGSOFT FSE 2016
Systems and software security
vulnerability management		 0.112016
Making invisible things visible: tracking down known vulnerabilities at 3000 companies (showcase) · SIGSOFT FSE 2016
Software maintenance and evolution
software dependencies		 0.112016
Making invisible things visible: tracking down known vulnerabilities at 3000 companies (showcase) · SIGSOFT FSE 2016

Methods — techniques the papers use, named apart from their topics

software supply chain automation · 0.5
YearPublicationVenuePosition
2016 Making invisible things visible: tracking down known vulnerabilities at 3000 companies (showcase)
abstract
This year, software development teams around the world are consuming BILLIONS of open source and third-party components. The good news: they are accelerating time to market. The bad news: 1 in 17 components they are using include known security vulnerabilities. In this talk, I will describe what Sonatype, the company behind The Central Repository that supports Apache Maven, has learned from analyzing how thousands of applications use open source components. I will also discuss how organizations like Mayo Clinic, Exxon, Capital One, the U.S. FDA and Intuit are utilizing the principles of software supply chain automation to improve application security and how organizations can balance the need for speed with quality and security early in the development cycle.
Gazi Mahmud
 SIGSOFT FSE1