CV
Education
- Ph.D in Computer Science, North Carolina State University, 2026 (expected)
- M.S. in Computer Science, North Carolina State University, 2024
- B.Sc. in Computer Science and Engineering, Bangladesh University of Engineering and Technology, 2018
Work experience
- August 2022 - Present: Graduate Research Assistant, North Carolina State University
- Designed two metrics to characterize dependency update practice of open-source packages
- Measured security-sensitive API usage by open-source packages and compared similar functioning packages with their respective security-sensitive API usage
Tech: Program Analysis, Data Analysis, Statistical Methods, Measurement, Qualitative Methods
- Dec 2018 - July 2022: Sr. Software Engineer, Samsung Research Bangladesh
- Led a team to implement and maintain the Media Capture and Playback functionalities of Chromium Engine for Samsung smartwatches
- Added W3C API support that facilitate Samsung’s 50% web apps in the Galaxy Store
- Implemented two new features for audio/video playback in Samsung’s smartwatches, controlling volume by swiping up/down from the UI and buffering beforehand to handle network failure
- Developed a new approach (using NLP) to optimize the Recommendation Engine of Samsung
- Proposed a federated learning approach in the recommendation engine to maintain user’s privacy
Tech: Chromium, C++, NLP, Federated Learning, Java
- Conributor: Chromium Open Source Project
- Contributed to issues from diverse modules (e.g., Multimedia, Autofill etc) and gave others support
Skills
- Code: C/C++, Python, Java, Javascript, Node.js, React, Django, Tensorflow, Keras
- Tools: Git, Latex, Android, Oracle, Postgresql, Docker
Publications
Less Is More: A Mixed-Methods Study on Security-Sensitive API Calls in Java for Better Dependency Selection
@misc{rahman2024moremixedmethodsstudysecuritysensitive, title={Less Is More: A Mixed-Methods Study on Security-Sensitive API Calls in Java for Better Dependency Selection}, author={Imranur Rahman and Ranidya Paramitha and Henrik Plate and Dominik Wermke and Laurie Williams}, year={2024}, eprint={2408.02846}, archivePrefix={arXiv}, primaryClass={cs.CR}, url={https://arxiv.org/abs/2408.02846}, }
Characterizing Dependency Update Practice of NPM, PyPI, and Cargo Packages
@article{rahman2024characterizing, title={Characterizing Dependency Update Practice of NPM, PyPI and Cargo Packages}, author={Rahman, Imranur and Zahan, Nusrat and Magill, Stephen and Enck, William and Williams, Laurie}, journal={arXiv preprint arXiv:2403.17382}, year={2024} }
SecureImgStego: A Keyed Shuffling-based Deep Learning Model for Secure Image Steganography
@inproceedings{chakraborty2023secureimgstego, title={SecureImgStego: A Keyed Shuffling-based Deep Learning Model for Secure Image Steganography}, author={Chakraborty, Trishna and Rahman, Imranur and Murad, Hasan and Hossain, Md Shohrab and Mehnaz, Shagufta}, booktitle={2023 IEEE Conference on Communications and Network Security (CNS)}, pages={1--9}, year={2023}, organization={IEEE} }
Talks
Conference Proceeding talk 3 on Relevant Topic in Your Field
Conference proceedings talk at Testing Institute of America 2014 Annual Conference, Los Angeles, CA
Talk 2 on Relevant Topic in Your Field
Talk at London School of Testing, London, UK
Tutorial 1 on Relevant Topic in Your Field
Tutorial at UC-Berkeley Institute for Testing Science, Berkeley CA, USA
Talk 1 on Relevant Topic in Your Field
Talk at UC San Francisco, Department of Testing, San Francisco, California
Teaching
Service and leadership
- Artifact Evaluation Committee Member: Wisec ‘22, ‘23, CCS ‘23, ‘24, USENIX Security ‘22, ‘23, ‘24, PETS ‘23, ‘25, OSDI ‘23, USENIX ATC ‘23
- PC Member: MSR4PS ‘25
- Junior PC Member: MSR ‘24
- External Reviewer: ICNP ‘21, NDSS ‘22, USENIX Security ‘22, FSE ‘25
- CTF Problem Setter: HackPack CTF ‘24, ‘25