Jump to content

Draft:Mehdi Mirakhorli

From Wikipedia, the free encyclopedia

Mehdi Mirakhorli
CitizenshipAmerican
Known forSecure by Design, Common Architectural Weakness Enumeration (CAWE)
Scientific career
FieldsComputer Science, Software Engineering, Cybersecurity
InstitutionsUniversity of Hawaiʻi at Mānoa

Mehdi Mirakhorli is an American research scientist and professor at the University of Hawaiʻi at Mānoa, known for his contributions to software and system security, particularly in the development of Secure by Design principles and the creation of the Common Architectural Weakness Enumeration (CAWE) framework.

Mirakhorli's research spans several critical areas in computer science, including software assurance[1][2], cybersecurity[3], resiliency[4], and software analysis. His work focuses on developing innovative techniques based on program analysis, software verification, and custom machine learning algorithms to address challenges in software architecture analysis, requirements engineering, software security, software compliance and verification, and source code comprehension.

Mirakhorli's pioneering research in Secure by design has been instrumental in identifying and mitigating security vulnerabilities at the architectural level. This work led to the creation of the Common Architectural Weakness Enumeration (CAWE), which systematically categorizes design and implementation flaws that could result in severe security breaches.

In addition to his work on software security, Mirakhorli has contributed to the field of browser security, particularly in the area of plugins and extensions. His research has identified 16 common vulnerability types and proposed 19 potential mitigations.[5]

References

[edit]
  1. ^ Joanna C. S. Santos, Ali Shokri, Mehdi Mirakhorli: "Towards Automated Evidence Generation for Rapid and Continuous Software Certification." ISSRE Workshops 2020: 287-294
  2. ^ Mehdi Mirakhorli, Jane Cleland-Huang: "Tracing Architectural Concerns in High Assurance Systems." ICSE 2011: 908-911
  3. ^ J. C. S. Santos, K. Tarrit and M. Mirakhorli, "A Catalog of Security Architecture Weaknesses," 2017 IEEE International Conference on Software Architecture Workshops (ICSAW), Gothenburg, 2017, pp. 220-223, doi: 10.1109/ICSAW.2017.25.
  4. ^ Joanna C. S. Santos, Selma Suloglu, Joanna Ye, and Mehdi Mirakhorli. 2020. "Towards an Automated Approach for Detecting Architectural Weaknesses in Critical Systems." In Proceedings of the IEEE/ACM 42nd International Conference on Software Engineering Workshops (ICSEW'20). Association for Computing Machinery, New York, NY, USA, 250–253. DOI:https://doi.org/10.1145/3387940.3392222
  5. ^ Santos, Joanna C. S.; Sejfia, Adriana; Corrello, Taylor; Gadenkanahalli, Smruthi; Mirakhorli, Mehdi (2019). "Achilles' heel of plug-and-Play software architectures: A grounded theory based approach". Proceedings of the 2019 27th ACM Joint Meeting on European Software Engineering Conference and Symposium on the Foundations of Software Engineering. ESEC/FSE 2019. New York, NY, USA: ACM. pp. 671–682. doi:10.1145/3338906.3338969. ISBN 978-1-4503-5572-8. S2CID 199501995.


{{DEFAULTSORT , Mehdi}} [[Category people]] [[Category computer scientists]] [[Category of Hawaii at Manoa faculty]] [[Category methods people]] [[Category engineering researchers]]

Retrieved from "https://en.wikipedia.org/w/index.php?title=Draft:Mehdi_Mirakhorli&oldid=1240886397"