Ronald E. Thompson

Latest

• (Don’t) Trust, but (Don’t) Verify: Developers’ Attention to Security in AI-Generated Code
• 'Threat modeling is very formal, it’s very technical, and also very hard to do correctly': Investigating Threat Modeling Practices in Open-Source Software Projects