Demonstration venue · read-only. Every page can be browsed; the buttons that would change it are switched off. Create an account to run TaxoReview on your own data. A simulation from public publication records: the people listed were not invited and did not agree to review.
? Tutorial for this page

Siddharth Muralee

dblp:331/2359 · DBLP profile ↗
← Back
5ranked-venue papers
1as first author
5since 2021 · last 2026
0009-0002-0205-7214ORCID · corroborated

Domains — the database's venue-derived domains; a paper can count in several

Security and privacy · 5 · 1 first-author · 5 since 2021

Expertise — from the expertise taxonomy: the topics of the expert's papers under the CCF categories. A weight counts papers with recency: 1 for a paper about the topic, 0.3 when the topic is its context, halved every five years.

Software engineering, system software, and programming languages
3 papers
Program analysis · 56% Software testing · 29% Operating systems · 9%
Network and information security
3 papers
Systems and software security · 86% Authentication and access control · 14%

Topics — the 6 heaviest of 9, each with the papers that count most for it

TopicWeightPapersLastEvidence papers
Systems and software security
software supply chain security
1.222023
ARGUS: A Framework for Staged Static Taint Analysis of GitHub Workflows and Actions · USENIX Security Symposium 2023
Characterizing the Security of Github CI Workflows · USENIX Security Symposium 2022
Program analysis
static analysis
1.012026
COSSETER: GitHub Actions Permission Reduction Using Demand-Driven Static Analysis · SP 2026
Program analysis › static analysis › taint analysis
static taint analysis
0.712023
ARGUS: A Framework for Staged Static Taint Analysis of GitHub Workflows and Actions · USENIX Security Symposium 2023
Authentication and access control
access control
0.312026
COSSETER: GitHub Actions Permission Reduction Using Demand-Driven Static Analysis · SP 2026
Operating systems › operating system family
linux
0.312025
LEMIX: Enabling Testing of Embedded Applications as Linux Applications · USENIX Security Symposium 2025
Software maintenance and evolution
software ecosystems
0.212023
ARGUS: A Framework for Staged Static Taint Analysis of GitHub Workflows and Actions · USENIX Security Symposium 2023

Methods — techniques the papers use, named apart from their topics

static analysis · 1.3
YearPublicationVenuePosition
2026 COSSETER: GitHub Actions Permission Reduction Using Demand-Driven Static Analysis
Greg Tystahl, Jonah Ghebremichael, Siddharth Muralee, Sourag Cherupattamoolayil, Antonio Bianchi, Aravind Machiry, Alexandros Kapravelos, William Enck
SP3
2025 LEMIX: Enabling Testing of Embedded Applications as Linux Applications
Sai Ritvik Tanksalkar, Siddharth Muralee, Srihari Danduri, Paschal C. Amusuo, Antonio Bianchi, James C. Davis 0001, Aravind Machiry
USENIX Security Symposium2
2024 On the Effectiveness of Large Language Models for GitHub Workflows
abstract
GitHub workflows or GitHub CI is a popular continuous integration platform that enables developers to automate various software engineering tasks by specifying them as workflows, i.e., YAML files with a list of jobs. However, engineering valid workflows is tedious. They are also prone to severe security issues, which can result in supply chain vulnerabilities. Recent advancements in Large Language Models (LLMs) have demonstrated their effectiveness in various software development tasks. However, GitHub workflows differ from regular programs in both structure and semantics. We perform the first comprehensive study to understand the effectiveness of Large Language Models (LLMs) on five workflow-related tasks with different levels of prompts. We curated a set of ∼ 400K workflows and generated prompts with varying detail. We also fine-tuned LLMs on GitHub workflow tasks. Our evaluation of three state-of-the-art LLMs and their fine-tuned variants revealed various interesting findings on the current effectiveness and drawbacks of LLMs.
Siddharth Muralee, Sourag Cherupattamoolayil, Aravind Machiry
ARES2
2023 ARGUS: A Framework for Staged Static Taint Analysis of GitHub Workflows and Actions
Siddharth Muralee, Igibek Koishybayev, Aleksandr Nahapetyan, Greg Tystahl, Bradley Reaves, Antonio Bianchi, William Enck, Alexandros Kapravelos, Aravind Machiry
USENIX Security Symposium1
2022 Characterizing the Security of Github CI Workflows
Igibek Koishybayev, Aleksandr Nahapetyan, Raima Zachariah, Siddharth Muralee, Bradley Reaves, Alexandros Kapravelos, Aravind Machiry
USENIX Security Symposium4