Demonstration venue · read-only. Every page can be browsed; the buttons that would change it are switched off. Create an account to run TaxoReview on your own data. A simulation from public publication records: the people listed were not invited and did not agree to review.
? Tutorial for this page

Jessy Ayala

dblp:348/6631 · DBLP profile ↗
← Back
4ranked-venue papers
2as first author
4since 2021 · last 2025
0000-0002-9349-4753ORCID · corroborated

Domains — the database's venue-derived domains; a paper can count in several

Security and privacy · 3 · 2 first-author · 3 since 2021Human-computer interaction and ubiquitous computing · 1 · 1 since 2021

Expertise — from the expertise taxonomy: the topics of the expert's papers under the CCF categories. A weight counts papers with recency: 1 for a paper about the topic, 0.3 when the topic is its context, halved every five years.

Software engineering, system software, and programming languages
2 papers
Empirical software engineering · 54% Software maintenance and evolution · 46%
Human-computer interaction and pervasive computing
1 paper
Accessibility and assistive technology · 87% Collaborative and social computing · 13%
Network and information security
2 papers
Systems and software security · 100%

Topics — the 7 heaviest of 12, each with the papers that count most for it

TopicWeightPapersLastEvidence papers
Empirical software engineering
developer studies
1.122025
A Deep Dive into How Open-Source Project Maintainers Review and Resolve Bug Bounty Reports · SP 2025
A Mixed-Methods Study of Open-Source Software Maintainers On Vulnerability Management and Platform Security Features · USENIX Security Symposium 2025
Empirical software engineering › open source software
open-source maintainers
0.912025
A Mixed-Methods Study of Open-Source Software Maintainers On Vulnerability Management and Platform Security Features · USENIX Security Symposium 2025
Software maintenance and evolution
vulnerability management
0.912025
A Mixed-Methods Study of Open-Source Software Maintainers On Vulnerability Management and Platform Security Features · USENIX Security Symposium 2025
Accessibility and assistive technology › software accessibility
accessible software development
0.812024
"Do You Want Me to Participate or Not?": Investigating the Accessibility of Software Development Meetings for Blind and Low Vision Professionals · CHI 2024
Systems and software security › vulnerability management
bug bounty programs
0.312025
A Deep Dive into How Open-Source Project Maintainers Review and Resolve Bug Bounty Reports · SP 2025
Systems and software security › vulnerability management
vulnerability disclosure
0.312025
A Deep Dive into How Open-Source Project Maintainers Review and Resolve Bug Bounty Reports · SP 2025
Systems and software security
vulnerability discovery
0.312025
Hercules Droidot and the murder on the JNI Express · USENIX Security Symposium 2025

Methods — techniques the papers use, named apart from their topics

survey · 2.6semi-structured interviews · 2.5likert-scale analysis · 1.7mixed-methods study · 0.9interviews · 0.9qualitative analysis · 0.8
YearPublicationVenuePosition
2025 A Deep Dive into How Open-Source Project Maintainers Review and Resolve Bug Bounty Reports
abstract
Researchers have investigated the bug bounty ecosystem from the lens of platforms, programs, and bug hunters. Understanding the perspectives of bug bounty report reviewers, especially those who historically lack a security background and little to no funding for bug hunters, is currently under-studied. In this paper, we primarily investigate the perspective of open-source software (OSS) maintainers who have used huntr, a bug bounty platform that pays bounties to bug hunters who find security bugs in GitHub projects and have had valid vulnerabilities patched as a result. We address this area by conducting three studies: identifying characteristics through a listing survey$(n_{1}=51)$, their ranked importance with Likert-scale survey data$(n_{2}=90)$, and conducting semi-structured interviews to dive deeper into real-world experiences$(n_{3} =17)$. As a result, we categorize 40 identified characteristics into benefits, challenges, helpful features, and wanted features. We find that private disclosure and project visibility are the most important benefits, while hunters focused on money or CVEs and pressure to review are the most challenging to overcome. Surprisingly, lack of communication with bug hunters is the least challenging, and CVE creation support is the second-least helpful feature for OSS maintainers when reviewing bug bounty reports. We present recommendations to make the bug bounty review process more accommodating to open-source maintainers and identify areas for future work.
Jessy Ayala, Steven Ngo, Joshua Garcia
SP1
2025 A Mixed-Methods Study of Open-Source Software Maintainers On Vulnerability Management and Platform Security Features
Jessy Ayala, Yu-Jye Tung, Joshua Garcia
USENIX Security Symposium1
2025 Hercules Droidot and the murder on the JNI Express
Luca Di Bartolomeo, Philipp Mao, Yu-Jye Tung, Jessy Ayala, Samuele Doria, Paolo Celada, Marcel Busch, Joshua Garcia, Eleonora Losiouk, Mathias Payer
USENIX Security Symposium4
2024 "Do You Want Me to Participate or Not?": Investigating the Accessibility of Software Development Meetings for Blind and Low Vision Professionals
abstract
Scholars have investigated numerous barriers to accessible software development tools and processes for Blind and Low Vision (BLV) developers. However, the research community has yet to study the accessibility of software development meetings, which are known to play a crucial role in software development practice. We conducted semi-structured interviews with 26 BLV software professionals about software development meeting accessibility. We found four key themes related to in-person and remote software development meetings: (1) participants observed that certain meeting activities and software tools used in meetings were inaccessible, (2) participants performed additional labor in order to make meetings accessible, (3) participants avoided disclosing their disability during meetings due to fear of career repercussions, (4) participants suggested technical, social and organizational solutions for accessible meetings, including developing their own solutions. We suggest recommendations and design implications for future accessible software development meetings including technical and policy-driven solutions.
Yoonha Cha, Isabela Figueira, Jessy Ayala, Emory James Edwards, Joshua Garcia, André van der Hoek, Stacy M. Branham
CHI3