Article-Journal

Empowering Software Engineers to Design More Secure Web Applications: Guidelines and Potential of Using LLMs as a Recommender Tool
This paper extends earlier design-science guidelines for building secure web applications by evaluating the potential of using large …
Raffaela Groner, Klara Svensson, Drake Axelrod, Ranim Khojah, Mazen Mohamad, Rebekka Wohlrab
DOI
Large Language Model Company Policies and Policy Implications in Software Organizations
This paper examines how 11 companies create policies related to LLM chatbots and the factors that influence them, aiming to help …
Ranim Khojah, Mazen Mohamad, Linda Erlenhov, Francisco Gomes De Oliveira Neto, Philipp Leitner
DOI
Navigating the Future: Essential Considerations for the Engineering of Software-Defined Vehicles
This paper discusses key technical and organizational considerations for engineering software-defined vehicles, drawing on perspectives …
Rodi Jolak, Vard Antinyan, Alexander Åström, Darko Durisic, Oliver Kopp, Stefan Kriebel, Daniel Krippner, Mazen Mohamad, Jérôme Pfeiffer, Christian Seiler, Pontus Svenson, Andreas Wortmann, Jan Bosch
DOI
The Impact of Prompt Programming on Function-Level Code Generation
This paper investigates the impact of prompt programming strategies on function-level code generation with large language models. It …
Ranim Khojah, Francisco Gomes De Oliveira Neto, Mazen Mohamad, Philipp Leitner
DOI
Beyond Code Generation: An Observational Study of ChatGPT Usage in Software Engineering Practice
An observational study of 24 professional software engineers using ChatGPT for one week. The study finds that practitioners more often …
Ranim Khojah, Mazen Mohamad, Philipp Leitner, Francisco Gomes De Oliveira Neto
DOI
Managing security evidence in safety-critical organizations
With the increasing prevalence of open and connected products, cybersecurity has become a serious issue in safety-critical domains such …
Mazen Mohamad, Jan-Philipp Steghöfer, Eric Knauss, Riccardo Scandariato
Cite
CASCADE: An Asset-driven Approach to Build Security Assurance Cases for Automotive Systems
CASCADE is an asset-driven approach for creating security assurance cases (SACs) with integrated quality assurance, compliant with …
Mazen Mohamad, Rodi Jolak, Orjan Askerdal, Jan-Philipp Steghoefer, Riccardo Scandariato
DOI
Security assurance cases - state of the art of an emerging approach
A systematic literature review of 51 papers on security assurance cases (SACs). Results indicate that while there are numerous papers …
Mazen Mohamad, Jan-Philipp Steghoefer, Riccardo Scandariato
DOI
LoCo CoCo: Automatically constructing coordination and communication networks from model-based systems engineering data
This paper presents LoCo CoCo, an approach to automatically construct coordination and communication networks from model-based systems …
Mazen Mohamad, Grischa Liebel, Eric Knauss
DOI