Ivan Pashchenko

According to our database, Ivan Pashchenko authored at least 24 papers between 2017 and 2024.

Collaborative distances:

• Dijkstra number of four.
• Erdős number of four.

2024

Known Vulnerabilities of Open Source Projects: Where Are the Fixes?

Antonino Sabetta, Serena Elisa Ponta, Rocío Cabrera Lozoya, Michele Bezzi, Tommaso Sacchetti, Matteo Greco, Gergö Balogh, Péter Hegedüs, Rudolf Ferenc, Ranindya Paramitha, Ivan Pashchenko, Aurora Papotti, Ákos Milánkovich, Fabio Massacci

IEEE Secur. Priv., 2024

2022

Technical Leverage Dataset for Java Dependencies in Maven.

Fabio Massacci, Ivan Pashchenko

Dataset, March, 2022

Vuln4Real: A Methodology for Counting Actually Vulnerable Dependencies.

Ivan Pashchenko, Henrik Plate, Serena Elisa Ponta, Antonino Sabetta, Fabio Massacci

IEEE Trans. Software Eng., 2022

Machine Learning for Source Code Vulnerability Detection: What Works and What Isn't There Yet.

Tina Marjanov, Ivan Pashchenko, Fabio Massacci

IEEE Secur. Priv., 2022

TaintBench: Automatic real-world malware benchmarking of Android taint analyses.

Linghui Luo, Felix Pauck, Goran Piskachev, Manuel Benz, Ivan Pashchenko, Martin Mory, Eric Bodden, Ben Hermann, Fabio Massacci

Empir. Softw. Eng., 2022

A fine-grained data set and analysis of tangling in bug fixing commits.

Steffen Herbold, Alexander Trautsch, Benjamin Ledel, Alireza Aghamohammadi, Taher Ahmed Ghaleb, Kuljit Kaur Chahal, Tim Bossenmaier, Bhaveet Nagaria, Philip Makedonski, Matin Nili Ahmadabadi, Kristof Szabados, Helge Spieker, Matej Madeja, Nathaniel Hoy, Valentina Lenarduzzi, Shangwen Wang, Gema Rodríguez-Pérez, Ricardo Colomo Palacios, Roberto Verdecchia, Paramvir Singh, Yihao Qin, Debasish Chakroborti, Willard Davis, Vijay Walunj, Hongjun Wu, Diego Marcilio, Omar Alam, Abdullah Aldaeej, Idan Amit, Burak Turhan, Simon Eismann, Anna-Katharina Wickert, Ivano Malavolta, Matús Sulír, Fatemeh H. Fard, Austin Z. Henley, Stratos Kourtzanidis, Eray Tuzun, Christoph Treude, Simin Maleki Shamasbi, Ivan Pashchenko, Marvin Wyrich, James Davis, Alexander Serebrenik, Ella Albrecht, Ethem Utku Aktas, Daniel Strüber, Johannes Erbel

Empir. Softw. Eng., 2022

Lightweight Parsing and Slicing for Bug Identification in C.

Luca Mecenero, Ranindya Paramitha, Ivan Pashchenko, Fabio Massacci

Proceedings of the ARES 2022: The 17th International Conference on Availability, Reliability and Security, Vienna,Austria, August 23, 2022

Security Maturity Self-Assessment Framework for Software Development Lifecycle.

Raluca Brasoveanu, Yusuf Karabulut, Ivan Pashchenko

Proceedings of the ARES 2022: The 17th International Conference on Availability, Reliability and Security, Vienna,Austria, August 23, 2022

2021

Code Analysis Tables for Developers Interviews on Dependencies Paper.

Ivan Pashchenko, Duc-Ly Vu, Fabio Massacci

Dataset, November, 2021

Code Analysis Tables for Developers Interviews on Dependencies Paper.

Ivan Pashchenko, Duc-Ly Vu, Fabio Massacci

Dataset, November, 2021

Technical Leverage: Dependencies Are a Mixed Blessing.

Fabio Massacci, Ivan Pashchenko

IEEE Secur. Priv., 2021

LastPyMile: identifying the discrepancy between sources and packages.

Duc-Ly Vu, Fabio Massacci, Ivan Pashchenko, Henrik Plate, Antonino Sabetta

Proceedings of the ESEC/FSE '21: 29th ACM Joint European Software Engineering Conference and Symposium on the Foundations of Software Engineering, 2021

Secure Software Development in the Era of Fluid Multi-party Open Software and Services.

Ivan Pashchenko, Riccardo Scandariato, Antonino Sabetta, Fabio Massacci

Proceedings of the 43rd IEEE/ACM International Conference on Software Engineering: New Ideas and Emerging Results, 2021

Technical Leverage in a Software Ecosystem: Development Opportunities and Security Risks.

Fabio Massacci, Ivan Pashchenko

Proceedings of the 43rd IEEE/ACM International Conference on Software Engineering, 2021

Please hold on: more time = more patches? Automated program repair as anytime algorithms.

Duc-Ly Vu, Ivan Pashchenko, Fabio Massacci

Proceedings of the 2nd IEEE/ACM International Workshop on Automated Program Repair, 2021

2020

Large-Scale Manual Validation of Bug Fixing Commits: A Fine-grained Analysis of Tangling.

Steffen Herbold, Alexander Trautsch, Benjamin Ledel, Alireza Aghamohammadi, Taher Ahmed Ghaleb, Kuljit Kaur Chahal, Tim Bossenmaier, Bhaveet Nagaria, Philip Makedonski, Matin Nili Ahmadabadi, Kristóf Szabados, Helge Spieker, Matej Madeja, Nathaniel Hoy, Valentina Lenarduzzi, Shangwen Wang, Gema Rodríguez-Pérez, Ricardo Colomo Palacios, Roberto Verdecchia, Paramvir Singh, Yihao Qin, Debasish Chakroborti, Willard Davis, Vijay Walunj, Hongjun Wu, Diego Marcilio, Omar Alam, Abdullah Aldaeej, Idan Amit, Burak Turhan, Simon Eismann, Anna-Katharina Wickert, Ivano Malavolta, Matús Sulír, Fatemeh H. Fard, Austin Z. Henley, Stratos Kourtzanidis, Eray Tuzun, Christoph Treude, Simin Maleki Shamasbi, Ivan Pashchenko, Marvin Wyrich, James Davis, Alexander Serebrenik, Ella Albrecht, Ethem Utku Aktas, Daniel Strüber, Johannes Erbel

CoRR, 2020

Preliminary findings on FOSS dependencies and security: a qualitative study on developers' attitudes and experience.

Ivan Pashchenko, Duc-Ly Vu, Fabio Massacci

Proceedings of the ICSE '20: 42nd International Conference on Software Engineering, Companion Volume, Seoul, South Korea, 27 June, 2020

Typosquatting and Combosquatting Attacks on the Python Ecosystem.

Duc-Ly Vu, Ivan Pashchenko, Fabio Massacci, Henrik Plate, Antonino Sabetta

Proceedings of the IEEE European Symposium on Security and Privacy Workshops, 2020

Towards Using Source Code Repositories to Identify Software Supply Chain Attacks.

Duc-Ly Vu, Ivan Pashchenko, Fabio Massacci, Henrik Plate, Antonino Sabetta

Proceedings of the CCS '20: 2020 ACM SIGSAC Conference on Computer and Communications Security, 2020

A Qualitative Study of Dependency Management and Its Security Implications.

Ivan Pashchenko, Duc-Ly Vu, Fabio Massacci

Proceedings of the CCS '20: 2020 ACM SIGSAC Conference on Computer and Communications Security, 2020

2019

Decision Support of Security Assessment of Software Vulnerabilities in Industrial Practice.

Ivan Pashchenko

PhD thesis, 2019

2018

Vulnerable open source dependencies: counting those that matter.

Ivan Pashchenko, Henrik Plate, Serena Elisa Ponta, Antonino Sabetta, Fabio Massacci

Proceedings of the 12th ACM/IEEE International Symposium on Empirical Software Engineering and Measurement, 2018

2017

FOSS version differentiation as a benchmark for static analysis security testing tools.

Ivan Pashchenko

Proceedings of the 2017 11th Joint Meeting on Foundations of Software Engineering, 2017

Delta-Bench: Differential Benchmark for Static Analysis Security Testing Tools.

Ivan Pashchenko, Stanislav Dashevskyi, Fabio Massacci

Proceedings of the 2017 ACM/IEEE International Symposium on Empirical Software Engineering and Measurement, 2017