Hi there
I am Imranur (he/him/his), a fourth-year PhD student at North Carolina State University. I am advised by Dr. Laurie Williams. My research in PhD focuses on software security, particularly the attack vectors posed by vulnerable dependencies in the software supply chain. My work involves the quantitative measurement of the costs and benefits of different dependency declaration methods to reduce the risk of n-day attacks through vulnerable dependencies. Before starting my PhD, I was a Senior Software Engineer at Samsung and led a team responsible for media capture and playback features within the Chromium engine of the Samsung Internet browser.
I am currently looking for full time academic and industry research positions. Please let me know if you think I might be a good fit!
Here is a link to my Resume.
Tools
| Tool | Description | Links |
|---|---|---|
| dependency-update-metrics | A tool that analyzes time-to-update (TTU) and time-to-remediate (TTR) metrics for package dependencies across npm, PyPI, and Cargo. | PyPI Website GitHub |
| rate-limit-safe-token-allocator | A least recently used (LRU) token allocator with per-token rate limiting, to avoid rate limit errors when you use multiple API tokens. | PyPI GitHub |
| csrankings-enhance | A Chrome extension for csrankings.org that sorts the authors by the number of publications or adjusted publications. | Chrome Web Store GitHub |
| International Bridge Scoring | A web app to keep the score in International Bridge games. | Website GitHub |