Serena Elisa Ponta

Antonino Sabetta

Empir. Softw. Eng., 2020

Code-Based Vulnerability Detection in Node.js Applications: How far are we?

[BibT_eX]

[DOI]

Proceedings of the 35th IEEE/ACM International Conference on Automated Software Engineering, 2020

2019

A manually-curated dataset of fixes to vulnerabilities of open-source software.

[BibT_eX]

[DOI]

Proceedings of the 16th International Conference on Mining Software Repositories, 2019

2018

Beyond Metadata: Code-Centric and Usage-Based Analysis of Known Vulnerabilities in Open-Source Software.

[BibT_eX]

[DOI]

Antonino Sabetta

Proceedings of the 2018 IEEE International Conference on Software Maintenance and Evolution, 2018

Vulnerable open source dependencies: counting those that matter.

[BibT_eX]

[DOI]

Proceedings of the 12th ACM/IEEE International Symposium on Empirical Software Engineering and Measurement, 2018

2017

Automatically finding execution scenarios to deploy security-sensitive workflows.

[BibT_eX]

[DOI]

J. Comput. Secur., 2017

Aegis: Automatic Enforcement of Security Policies in Workflow-driven Web Applications.

[BibT_eX]

[DOI]

Proceedings of the Seventh ACM Conference on Data and Application Security and Privacy, 2017

2016

Cerberus: Automated Synthesis of Enforcement Mechanisms for Security-Sensitive Business Processes.

[BibT_eX]

[DOI]

Proceedings of the Tools and Algorithms for the Construction and Analysis of Systems, 2016

Modular Synthesis of Enforcement Mechanisms for the Workflow Satisfiability Problem: Scalability and Reusability.

[BibT_eX]

[DOI]

Proceedings of the 21st ACM on Symposium on Access Control Models and Technologies, 2016

2015

Modularity for Security-Sensitive Workflows.

[BibT_eX]

[DOI]

CoRR, 2015

Security Threat Identification and Testing.

[BibT_eX]

[DOI]

Proceedings of the 8th IEEE International Conference on Software Testing, 2015

Impact assessment for vulnerabilities in open-source software libraries.

[BibT_eX]

[DOI]

Antonino Sabetta

Proceedings of the 2015 IEEE International Conference on Software Maintenance and Evolution, 2015

Assisting the Deployment of Security-Sensitive Workflows by Finding Execution Scenarios.

[BibT_eX]

[DOI]

Proceedings of the Data and Applications Security and Privacy XXIX, 2015

2014

Model checking authorization requirements in business processes.

[BibT_eX]

[DOI]

Alessandro Armando

Comput. Secur., 2014

Increasing Trust in the Cloud through Configuration Validation.

[BibT_eX]

[DOI]

Matteo Maria Casalino

Proceedings of the On the Move to Meaningful Internet Systems: OTM 2014 Workshops, 2014

2013

Modeling and Reasoning about Business Processes under Authorization Constraints: A Planning-Based Approach.

[BibT_eX]

[DOI]

Proceedings of the Twenty-Third International Conference on Automated Planning and Scheduling, 2013

2012

An action-based approach to the formal specification and automatic analysis of business processes under authorization constraints.

[BibT_eX]

[DOI]

J. Comput. Syst. Sci., 2012

The AVANTSSAR Platform for the Automated Validation of Trust and Security of Service-Oriented Architectures.

[BibT_eX]

[DOI]

Proceedings of the Tools and Algorithms for the Construction and Analysis of Systems, 2012

Detection of Configuration Vulnerabilities in Distributed (Web) Environments.

[BibT_eX]

[DOI]

Matteo Maria Casalino

Michele Mangili

Proceedings of the Security and Privacy in Communication Networks, 2012

Configuration Assessment as a Service.

[BibT_eX]

[DOI]

Matteo Maria Casalino

Proceedings of the Data Privacy Management and Autonomous Spontaneous Security, 2012

2011

Security validation tool for business processes.

[BibT_eX]

[DOI]

Proceedings of the 16th ACM Symposium on Access Control Models and Technologies, 2011

Towards Formal Validation of Trust and Security in the Internet of Services.

[BibT_eX]

[DOI]

Proceedings of the Future Internet, 2011

Security Validation of Business Processes via Model-Checking.

[BibT_eX]

[DOI]

Proceedings of the Engineering Secure Software and Systems - Third International Symposium, 2011

2009

Formal Specification and Automatic Analysis of Business Processes under Authorization Constraints: An Action-Based Approach.

[BibT_eX]

[DOI]

Alessandro Armando

Enrico Giunchiglia

Proceedings of the Trust, 2009

Model Checking of Security-Sensitive Business Processes.

[BibT_eX]

[DOI]

Alessandro Armando