Fabio Massacci

335 papers A* 15A 23B 26C 8Misc 4Journal 134Unranked 111
YearRankTypeTitle / Venue / Authors
2026 J jnl
Automated Analysis of Security Policy Violations in Helm Charts.
IEEE Trans. Dependable Secur. Comput.
Francesco Minna, Agathe Blaise, Katja Tuma, Fabio Massacci
2026 J jnl
Function Recovery Attacks in Gate-Hiding Garbled Circuits using SAT Solving.
CoRR
Chao Yin, Zunchen Huang, Chenglu Jin, Marten van Dijk, Fabio Massacci
2026 J jnl
On the Abolition of the "ICSE Paper" and the Adoption of the "Registered Proposal" and the "Results Report".
CoRR
Fabio Massacci, Winnie Mbaka
2026 A* conf
Tool-Assisted CVSS Vulnerability Scoring: A Controlled Quantitative Study of Human Assessment.
CHI
Siqi Zhang, Minjie Cai, Lianying Zhao, Xavier de Carné de Carnavalet, Fabio Massacci, Mengyuan Zhang
2025 J jnl
A Systematic Literature Review on Automated Exploit and Security Test Generation.
CoRR
Quang-Cuong Bui, Emanuele Iannone, Maria Camporese, Torge Hinrichs, Catherine Tony, László Tóth, Fabio Palomba, Péter Hegedüs, Fabio Massacci, Riccardo Scandariato
2025 C conf
An AI Security Testbed for the 5G Core.
CloudCom
Clément Legrand-Duchesne, Johannes Härtel, Fabio Massacci, Mengyuan Zhang, Agathe Blaise
2025 J jnl
Analyzing and mitigating (with LLMs) the security misconfigurations of Helm charts from Artifact Hub.
Empir. Softw. Eng.
Francesco Minna, Fabio Massacci, Katja Tuma
2025 J jnl
Assessing the usefulness of Data Flow Diagrams for validating security threats.
Comput. Secur.
Winnie Bahati Mbaka, Xinran Zhang, Yunduo Wang, Tong Li, Fabio Massacci, Katja Tuma
2025 J jnl
Exploding Pagers and the Birth of State Cyberterrorism.
IEEE Secur. Priv.
Fabio Massacci
2025 A* conf
GDPR in the Small: A Field Study of Privacy and Security Challenges in Schools.
SP
Francesco Ciclosi, Giovanna Varni, Fabio Massacci
2025 — conf
Large Language Models Are Unreliable for Cyber Threat Intelligence.
ARES (2)
Emanuele Mezzi, Fabio Massacci, Katja Tuma
2025 J jnl
Large Language Models are Unreliable for Cyber Threat Intelligence.
CoRR
Emanuele Mezzi, Fabio Massacci, Katja Tuma
2025 J jnl
On the effects of program slicing for vulnerability detection during code inspection.
Empir. Softw. Eng.
Aurora Papotti, Katja Tuma, Fabio Massacci
2025 J jnl
Optimisation of cyber insurance coverage with selection of cost effective security controls.
CoRR
Ganbayar Uuganbayar, Artsiom Yautsiukhin, Fabio Martinelli, Fabio Massacci
2025 J jnl
Repairing vulnerabilities without invisible hands. A differentiated replication study on LLMs.
CoRR
Maria Camporese, Fabio Massacci
2025 B conf
TIDO: The Threat Intelligence Decision Ontology.
K-CAP
Ritten Roothaert, Stefan Schlobach, Fabio Massacci, Lise Stork
2025 J jnl
Today's Cat Is Tomorrow's Dog: Accounting for Time-Based Changes in the Labels of ML Vulnerability Detection Approaches.
CoRR
Ranindya Paramitha, Yuan Feng, Fabio Massacci
2025 J jnl
Today's Cat Is Tomorrow's Dog: Accounting for Time-Based Changes in the Labels of ML Vulnerability Detection Approaches.
Proc. ACM Softw. Eng.
Ranindya Paramitha, Yuan Feng, Fabio Massacci
2025 — conf
Using ML filters to help automated vulnerability repairs: when it helps and when it doesn't.
NIER@ICSE
Maria Camporese, Fabio Massacci
2025 J jnl
Using ML filters to help automated vulnerability repairs: when it helps and when it doesn't.
CoRR
Maria Camporese, Fabio Massacci
2025 — conf
When in Doubt Throw It Out: Building on Confident Learning for Vulnerability Detection.
NIER@ICSE
Yuanjun Gong, Fabio Massacci
2024 J jnl
A Case-Control Study to Measure Behavioral Risks of Malware Encounters in Organizations.
IEEE Trans. Inf. Forensics Secur.
Marcello Meschini, Giorgio Di Tizio, Marco Balduzzi, Fabio Massacci
2024 J jnl
APR4Vul: an empirical study of automatic program repair techniques on real-world Java vulnerabilities.
Empir. Softw. Eng.
Quang-Cuong Bui, Ranindya Paramitha, Duc-Ly Vu, Fabio Massacci, Riccardo Scandariato
2024 J jnl
Addressing combinatorial experiments and scarcity of subjects by provably orthogonal and crossover experimental designs.
J. Syst. Softw.
Fabio Massacci, Aurora Papotti, Ranindya Paramitha
2024 J jnl
Analyzing and Mitigating (with LLMs) the Security Misconfigurations of Helm Charts from Artifact Hub.
CoRR
Francesco Minna, Fabio Massacci, Katja Tuma
2024 — conf
Automated Security Repair for Helm Charts.
ICSE Companion
Francesco Minna, Agathe Blaise, Fabio Massacci, Katja Tuma
2024 J jnl
Cross-ecosystem categorization: A manual-curation protocol for the categorization of Java Maven libraries along Python PyPI Topics.
CoRR
Ranindya Paramitha, Yuan Feng, Fabio Massacci, Carlos E. Budde
2024 J jnl
Forecasting the risk of software choices: A model to foretell security vulnerabilities from library dependencies and source code evolution.
CoRR
Carlos E. Budde, Ranindya Paramitha, Fabio Massacci
2024 J jnl
How hard can it be? Quantifying MITRE attack campaigns with attack trees and cATM logic.
CoRR
Stefano M. Nicoletti, Milan Lopuhaä-Zwakenberg, Mariëlle Stoelinga, Fabio Massacci, Carlos E. Budde
2024 J jnl
Known Vulnerabilities of Open Source Projects: Where Are the Fixes?
IEEE Secur. Priv.
Antonino Sabetta, Serena Elisa Ponta, Rocío Cabrera Lozoya, Michele Bezzi, Tommaso Sacchetti, Matteo Greco, Gergö Balogh, Péter Hegedüs, Rudolf Ferenc, Ranindya Paramitha, Ivan Pashchenko, Aurora Papotti, Ákos Milánkovich, Fabio Massacci
2024 — conf
On the Effects of Program Slicing for Vulnerability Detection during Code Inspection: Extended Abstract.
ICSE Companion
Aurora Papotti, Fabio Massacci, Katja Tuma
2024 J jnl
On the acceptance by code reviewers of candidate security patches suggested by Automated Program Repair tools.
Empir. Softw. Eng.
Aurora Papotti, Ranindya Paramitha, Fabio Massacci
2024 A* conf
PG: Byzantine Fault-Tolerant and Privacy-Preserving Sensor Fusion with Guaranteed Output Delivery.
CCS
Chenglu Jin, Chao Yin, Marten van Dijk, Sisi Duan, Fabio Massacci, Michael K. Reiter, Haibin Zhang
2024 J jnl
Risks of uncertainty propagation in Al-augmented security pipelines.
CoRR
Emanuele Mezzi, Aurora Papotti, Fabio Massacci, Katja Tuma
2024 J jnl
The Holy Grail of Vulnerability Predictions.
IEEE Secur. Priv.
Fabio Massacci
2024 A* conf
Using AI Assistants in Software Development: A Qualitative Study on Security Practices and Concerns.
CCS
Jan H. Klemmer, Stefan Albert Horstmann, Nikhil Patnaik, Cordelia Ludden, Cordell Burton Jr., Carson Powers, Fabio Massacci, Akond Rahman, Daniel Votipka, Heather Richter Lipford, Awais Rashid, Alena Naiakshina, Sascha Fahl
2024 J jnl
Using AI Assistants in Software Development: A Qualitative Study on Security Practices and Concerns.
CoRR
Jan H. Klemmer, Stefan Albert Horstmann, Nikhil Patnaik, Cordelia Ludden, Cordell Burton Jr., Carson Powers, Fabio Massacci, Akond Rahman, Daniel Votipka, Heather Richter Lipford, Awais Rashid, Alena Naiakshina, Sascha Fahl
2023 J jnl
A Graph-Based Stratified Sampling Methodology for the Analysis of (Underground) Forums.
IEEE Trans. Inf. Forensics Secur.
Giorgio Di Tizio, Gilberto Atondo Siu, Alice Hutchings, Fabio Massacci
2023 J jnl
A Graph-based Stratified Sampling Methodology for the Analysis of (Underground) Forums.
CoRR
Giorgio Di Tizio, Gilberto Atondo Siu, Alice Hutchings, Fabio Massacci
2023 J jnl
A new, evidence-based, theory for knowledge reuse in security risk analysis.
Empir. Softw. Eng.
Katsiaryna Labunets, Fabio Massacci, Federica Paci, Katja Tuma
2023 J jnl
Are Software Updates Useless Against Advanced Persistent Threats?
CoRR
Fabio Massacci, Giorgio Di Tizio
2023 J jnl
Are Software Updates Useless against Advanced Persistent Threats?
Commun. ACM
Fabio Massacci, Giorgio Di Tizio
2023 J jnl
Building cross-language corpora for human understanding of privacy policies.
CoRR
Francesco Ciclosi, Silvia Vidor, Fabio Massacci
2023 J jnl
Consolidating cybersecurity in Europe: A case study on job profiles assessment.
Comput. Secur.
Carlos E. Budde, Anni Karinsalo, Silvia Vidor, Jarno Salonen, Fabio Massacci
2023 J jnl
SoK: Run-time security for cloud microservices. Are we there yet?
Comput. Secur.
Francesco Minna, Fabio Massacci
2023 J jnl
Software Supply Chain Security [Guest Editors' Introduction].
IEEE Secur. Priv.
Fabio Massacci, Laurie A. Williams
2023 J jnl
Software Updates Strategies: A Quantitative Evaluation Against Advanced Persistent Threats.
IEEE Trans. Software Eng.
Giorgio Di Tizio, Michele Armellini, Fabio Massacci
2023 J jnl
Technical leverage analysis in the Python ecosystem.
Empir. Softw. Eng.
Ranindya Paramitha, Fabio Massacci
2023 J jnl
The Data Protection Officer: A Ubiquitous Role That No One Really Knows.
IEEE Secur. Priv.
Francesco Ciclosi, Fabio Massacci
2022 J jnl
"Free" as in Freedom to Protest?
IEEE Secur. Priv.
Fabio Massacci, Antonino Sabetta, Jelena Mirkovic, Toby Murray, Hamed Okhravi, Mohammad Mannan, Anderson Rocha, Eric Bodden, Daniel E. Geer
2022 J jnl
25 Years in Application Security: Looking Back, Looking Forward.
IEEE Secur. Priv.
Adam Shostack, Fabio Massacci, Eric Bodden, Antonino Sabetta
2022 B conf
An Open-Source Cloud Testbed for Security Experimentation.
CCGRID
Francesco Minna, Fabio Massacci
2022 — conf
Building Cross-language Corpora for Human Understanding of Privacy Policies.
CyberSec4Europe
Francesco Ciclosi, Silvia Vidor, Fabio Massacci
2022 J jnl
Building Principles for Lawful Cyber Lethal Autonomous Weapons.
IEEE Secur. Priv.
Fabio Massacci, Silvia Vidor
2022 J jnl
Cryptographic and Financial Fairness.
CoRR
Daniele Friolo, Fabio Massacci, Chan Nam Ngo, Daniele Venturi
2022 J jnl
Cryptographic and Financial Fairness.
IEEE Trans. Inf. Forensics Secur.
Daniele Friolo, Fabio Massacci, Chan Nam Ngo, Daniele Venturi
2022 J jnl
Introduction to the Special Issue on Security and Privacy for COVID-19.
DTRAP
Gabriel Kaptchuk, Fabio Massacci, Sara Nieves Matheu-García, Elissa M. Redmiles
2022 J jnl
Introduction to the Special Issue on Vulnerabilities.
DTRAP
Fabio Massacci, Nick Nikiforakis, Ivan Pashchenko, Antonino Sabetta, Victoria Wang
2022 B conf
Lightweight Parsing and Slicing for Bug Identification in C.
ARES
Luca Mecenero, Ranindya Paramitha, Ivan Pashchenko, Fabio Massacci
2022 J jnl
Machine Learning for Source Code Vulnerability Detection: What Works and What Isn't There Yet.
IEEE Secur. Priv.
Tina Marjanov, Ivan Pashchenko, Fabio Massacci
2022 J jnl
On the acceptance by code reviewers of candidate security patches suggested by Automated Program Repair tools.
CoRR
Aurora Papotti, Ranindya Paramitha, Fabio Massacci
2022 B conf
On the feasibility of detecting injections in malicious npm packages.
ARES
Simone Scalco, Ranindya Paramitha, Duc-Ly Vu, Fabio Massacci
2022 J jnl
Pseudo Ground-Truth Generators and Large-Scale Studies.
IEEE Secur. Priv.
Fabio Massacci
2022 J jnl
Software Updates Strategies: a Quantitative Evaluation against Advanced Persistent Threats.
CoRR
Giorgio Di Tizio, Michele Armellini, Fabio Massacci
2022 J jnl
S×C4IoT: A Security-by-contract Framework for Dynamic Evolving IoT Devices.
ACM Trans. Sens. Networks
Alberto Giaretta, Nicola Dragoni, Fabio Massacci
2022 C conf
TaintBench: Automatic Real-World Malware Benchmarking of Android Taint Analyses.
Software Engineering
Linghui Luo, Felix Pauck, Goran Piskachev, Manuel Benz, Ivan Pashchenko, Martin Mory, Eric Bodden, Ben Hermann, Fabio Massacci
2022 J jnl
TaintBench: Automatic real-world malware benchmarking of Android taint analyses.
Empir. Softw. Eng.
Linghui Luo, Felix Pauck, Goran Piskachev, Manuel Benz, Ivan Pashchenko, Martin Mory, Eric Bodden, Ben Hermann, Fabio Massacci
2022 J jnl
The Data Protection Officer, an ubiquitous role nobody really knows.
CoRR
Francesco Ciclosi, Fabio Massacci
2022 B conf
Towards a Security Stress-Test for Cloud Configurations.
CLOUD
Francesco Minna, Fabio Massacci, Katja Tuma
2022 J jnl
Towards a Security Stress-Test for Cloud Configurations.
CoRR
Francesco Minna, Fabio Massacci, Katja Tuma
2022 J jnl
Vuln4Real: A Methodology for Counting Actually Vulnerable Dependencies.
IEEE Trans. Software Eng.
Ivan Pashchenko, Henrik Plate, Serena Elisa Ponta, Antonino Sabetta, Fabio Massacci
2021 J jnl
A Calculus of Tracking: Theory and Practice.
Proc. Priv. Enhancing Technol.
Giorgio Di Tizio, Fabio Massacci
2021 J jnl
Are We Preparing Students to Build Security In? A Survey of European Cybersecurity in Higher Education Programs [Education].
IEEE Secur. Priv.
Nicola Dragoni, Alberto Lluch-Lafuente, Fabio Massacci, Anders Schlichtkrull
2021 J jnl
Distributed Financial Exchanges: Security Challenges and Design Principles.
IEEE Secur. Priv.
Fabio Massacci, Chan Nam Ngo
2021 — ch.
Information Security and Privacy - Challenges and Outlook.
IFIP's Exciting First 60+ Years
Steven Furnell, Paul S. Haskell-Dowland, Manish Agrawal, Richard L. Baskerville, Anirban Basu, Matt Bishop, Jorge Cuéllar, Sara Foresti, Lynn Futcher, Nurit Gal-Oz, Tejaswini (Teju) Herath, Christian Damsgaard Jensen, Allen C. Johnston, Wouter Joosen, Giovanni Livraga, Javier López, Stephen Marsh, Fabio Martinelli, Fabio Massacci, Aljosa Pasic, Stef Schinagl, Abbas Shahim, Kerry-Lynn Thomson, Jaideep Vaidya, Tony Vance, Merrill Warkentin
2021 — conf
LastPyMile: identifying the discrepancy between sources and packages.
ESEC/SIGSOFT FSE
Duc-Ly Vu, Fabio Massacci, Ivan Pashchenko, Henrik Plate, Antonino Sabetta
2021 J jnl
Optimisation of cyber insurance coverage with selection of cost effective security controls.
Comput. Secur.
Ganbayar Uuganbayar, Artsiom Yautsiukhin, Fabio Martinelli, Fabio Massacci
2021 J jnl
Perspectives on the SolarWinds Incident.
IEEE Secur. Priv.
Sean Peisert, Bruce Schneier, Hamed Okhravi, Fabio Massacci, Terry Benzel, Carl E. Landwehr, Mohammad Mannan, Jelena Mirkovic, Atul Prakash, James Bret Michael
2021 — conf
Please hold on: more time = more patches? Automated program repair as anytime algorithms.
APR@ICSE
Duc-Ly Vu, Ivan Pashchenko, Fabio Massacci
2021 — conf
Practical Witness-Key-Agreement for Blockchain-Based Dark Pools Financial Trading.
Financial Cryptography (2)
Chan Nam Ngo, Fabio Massacci, Florian Kerschbaum, Julian Williams
2021 — conf
Secure Software Development in the Era of Fluid Multi-party Open Software and Services.
ICSE (NIER)
Ivan Pashchenko, Riccardo Scandariato, Antonino Sabetta, Fabio Massacci
2021 J jnl
Secure Software Development in the Era of Fluid Multi-party Open Software and Services.
CoRR
Ivan Pashchenko, Riccardo Scandariato, Antonino Sabetta, Fabio Massacci
2021 J jnl
SolarWinds and the Challenges of Patching: Can We Ever Stop Dancing With the Devil?
IEEE Secur. Priv.
Fabio Massacci, Trent Jaeger, Sean Peisert
2021 A* conf
Technical Leverage in a Software Ecosystem: Development Opportunities and Security Risks.
ICSE
Fabio Massacci, Ivan Pashchenko
2021 J jnl
Technical Leverage in a Software Ecosystem: Development Opportunities and Security Risks.
CoRR
Fabio Massacci, Ivan Pashchenko
2021 J jnl
Technical Leverage: Dependencies Are a Mixed Blessing.
IEEE Secur. Priv.
Fabio Massacci, Ivan Pashchenko
2021 J jnl
Understanding the Security Implications of Kubernetes Networking.
IEEE Secur. Priv.
Francesco Minna, Agathe Blaise, Filippo Rebecchi, Balakrishnan Chandrasekaran, Fabio Massacci
2020 A* conf
A Qualitative Study of Dependency Management and Its Security Implications.
CCS
Ivan Pashchenko, Duc-Ly Vu, Fabio Massacci
2020 — conf
An Experimental Approach for Estimating Cyber Risk: a Proposal Building upon Cyber Ranges and Capture the Flags.
EuroS&P Workshops
Giorgio Di Tizio, Fabio Massacci, Luca Allodi, Stanislav Dashevskyi, Jelena Mirkovic
2020 J jnl
Governance Challenges for European Cybersecurity Policies: Stakeholder Views.
IEEE Secur. Priv.
Pierantonia Sterlini, Fabio Massacci, Natalia Kadenko, Tobias Fiebig, Michel van Eeten
2020 J jnl
HIT4Mal: Hybrid image transformation for malware classification.
Trans. Emerg. Telecommun. Technol.
Duc-Ly Vu, Trong-Kha Nguyen, Tam V. Nguyen, Tu N. Nguyen, Fabio Massacci, Phu H. Phung
2020 J jnl
Measuring the accuracy of software vulnerability assessments: experiments with students and professionals.
Empir. Softw. Eng.
Luca Allodi, Marco Cremonini, Fabio Massacci, Woohyun Shim
2020 — conf
Preliminary findings on FOSS dependencies and security: a qualitative study on developers' attitudes and experience.
ICSE (Companion Volume)
Ivan Pashchenko, Duc-Ly Vu, Fabio Massacci
2020 J jnl
Selecting a Secure Cloud Provider - An Empirical Study and Multi Criteria Approach.
Inf.
Sebastian Pape, Federica Paci, Jan Jürjens, Fabio Massacci
2020 A* conf
Towards Using Source Code Repositories to Identify Software Supply Chain Attacks.
CCS
Duc-Ly Vu, Ivan Pashchenko, Fabio Massacci, Henrik Plate, Antonino Sabetta
2020 — conf
Typosquatting and Combosquatting Attacks on the Python Ecosystem.
EuroS&P Workshops
Duc-Ly Vu, Ivan Pashchenko, Fabio Massacci, Henrik Plate, Antonino Sabetta
2020 — conf
Vision: What If They All Die? Crypto Requirements For Key People.
EuroS&P Workshops
Chan Nam Ngo, Daniele Friolo, Fabio Massacci, Daniele Venturi, Ettore Battaiola
2020 — conf
WACCO 2020: the 2nd Workshop on Attackers and Cybercrime Operations Co-held with IEEE European Symposium on Security and Privacy 2020.
EuroS&P Workshops
Luca Allodi, Alice Hutchings, Fabio Massacci, Sergio Pastrana, Marie Vasek
2019 J jnl
A Convolutional Transformation Network for Malware Classification.
CoRR
Duc-Ly Vu, Trong-Kha Nguyen, Tam V. Nguyen, Tu N. Nguyen, Fabio Massacci, Phu H. Phung
2019 — conf
A QBDI-based Fuzzer Taming Magic Bytes.
ITASEC
Elia Geretto, Cédric Tessier, Fabio Massacci
2019 J jnl
A Screening Test for Disclosed Vulnerabilities in FOSS Components.
IEEE Trans. Software Eng.
Stanislav Dashevskyi, Achim D. Brucker, Fabio Massacci
2019 J jnl
A Server-Side JavaScript Security Architecture for Secure Integration of Third-Party Libraries.
Secur. Commun. Networks
Neline van Ginkel, Willem De Groef, Fabio Massacci, Frank Piessens
2019 — conf
Affordable Security or Big Guy vs Small Guy - Does the Depth of Your Pockets Impact Your Protocols?
Security Protocols Workshop
Daniele Friolo, Fabio Massacci, Chan Nam Ngo, Daniele Venturi
2019 — conf
Blockchain-based Invoice Factoring: from business requirements to commitments.
DLT@ITASEC
Ettore Battaiola, Fabio Massacci, Chan Nam Ngo, Pierantonia Sterlini
2019 — conf
Cyber Insurance and Time-to-Compromise: An Integrated Approach.
CyberSA
Ganbayar Uuganbayar, Fabio Massacci, Artsiom Yautsiukhin, Fabio Martinelli
2019 J jnl
IoT Security Configurability with Security-by-Contract.
Sensors
Alberto Giaretta, Nicola Dragoni, Fabio Massacci
2019 J jnl
Is "Deny Access" a Valid "Fail-Safe Default" Principle for Building Security in Cyberphysical Systems?
IEEE Secur. Priv.
Fabio Massacci
2019 J jnl
Mac-A-Mal: macOS malware analysis framework resistant to anti evasion techniques.
J. Comput. Virol. Hacking Tech.
Duy-Phuc Pham, Duc-Ly Vu, Fabio Massacci
2019 — conf
Protecting the Internet of Things with Security-by-Contract and Fog Computing.
WF-IoT
Alberto Giaretta, Nicola Dragoni, Fabio Massacci
2019 J jnl
TestREx: a framework for repeatable exploits.
Int. J. Softw. Tools Technol. Transf.
Stanislav Dashevskyi, Daniel Ricardo dos Santos, Fabio Massacci, Antonino Sabetta
2018 J jnl
Attack Potential in Impact and Complexity.
CoRR
Luca Allodi, Fabio Massacci
2018 A* conf
FuturesMEX: Secure, Distributed Futures Market Exchange.
IEEE Symposium on Security and Privacy
Fabio Massacci, Chan Nam Ngo, Jing Nie, Daniele Venturi, Julian Williams
2018 A* conf
Model comprehension for security risk assessment: an empirical comparison of tabular vs. graphical representations.
ICSE
Katsiaryna Labunets, Fabio Massacci, Federica Paci, Sabrina Marczak, Flávio Moreira de Oliveira
2018 — conf
Non-monotonic Security Protocols and Failures in Financial Intermediation (Transcript of Discussion).
Security Protocols Workshop
Fabio Massacci
2018 — conf
Non-monotonic Security Protocols and Failures in Financial Intermediation.
Security Protocols Workshop
Fabio Massacci, Chan Nam Ngo, Daniele Venturi, Julian Williams
2018 J jnl
The Effect of Security Education and Expertise on Security Assessments: the Case of Software Vulnerabilities.
CoRR
Luca Allodi, Marco Cremonini, Fabio Massacci, Woohyun Shim
2018 J jnl
Vulnerable Open Source Dependencies: Counting Those That Matter.
CoRR
Ivan Pashchenko, Henrik Plate, Serena Elisa Ponta, Antonino Sabetta, Fabio Massacci
2018 A conf
Vulnerable open source dependencies: counting those that matter.
ESEM
Ivan Pashchenko, Henrik Plate, Serena Elisa Ponta, Antonino Sabetta, Fabio Massacci
2017 B conf
Attack Potential in Impact and Complexity.
ARES
Luca Allodi, Fabio Massacci
2017 A conf
Delta-Bench: Differential Benchmark for Static Analysis Security Testing Tools.
ESEM
Ivan Pashchenko, Stanislav Dashevskyi, Fabio Massacci
2017 — conf
Diversity: A Poor Man's Solution to Drone Takeover.
PECCS
Ali Davanian, Fabio Massacci, Luca Allodi
2017 — conf
Estimating the Assessment Difficulty of CVSS Environmental Metrics: An Experiment.
FDSE
Luca Allodi, Silvio Biagioni, Bruno Crispo, Katsiaryna Labunets, Fabio Massacci, Wagner Santos
2017 A conf
Graphical vs. Tabular Notations for Risk Models: On the Role of Textual Labels and Complexity.
ESEM
Katsiaryna Labunets, Fabio Massacci, Alessandra Tedeschi
2017 J jnl
Identifying the implied: Findings from three differentiated replications on the use of security requirements templates.
Empir. Softw. Eng.
Maria Riaz, Jason Tyler King, John Slankas, Laurie A. Williams, Fabio Massacci, Christian Quesada-López, Marcelo Jenkins
2017 — ed.
Joint Proceedings of REFSQ-2017 Workshops, Doctoral Symposium, Research Method Track, and Poster Track co-located with the 22nd International Conference on Requirements Engineering: Foundation for Software Quality (REFSQ 2017), Essen, Germany, February 27, 2017.
REFSQ Workshops
Eric Knauss, Angelo Susi, David Ameller, Daniel M. Berry, Fabiano Dalpiaz, Maya Daneva, Marian Daun, Oscar Dieste, Peter Forbrig, Eduard C. Groen, Andrea Herrmann, Jennifer Horkoff, Fitsum Meshesha Kifetew, Marite Kirikova, Alessia Knauss, Patrick Maeder, Fabio Massacci, Cristina Palomares, Jolita Ralyté, Ahmed Seffah, Alberto Siena, Bastian Tenbergen
2017 J jnl
Model comprehension for security risk assessment: an empirical comparison of tabular vs. graphical representations.
Empir. Softw. Eng.
Katsiaryna Labunets, Fabio Massacci, Federica Paci, Sabrina Marczak, Flávio Moreira de Oliveira
2017 B conf
On the Equivalence Between Graphical and Tabular Representations for Security Risk Assessment.
REFSQ
Katsiaryna Labunets, Fabio Massacci, Federica Paci
2017 — conf
REW-SMT: A New Approach for Rewriting XACML Request with Dynamic Big Data Security Policies.
SpaCCS
Ha Xuan Son, Tran Khanh Dang, Fabio Massacci
2017 — conf
Teaching predictive modeling to junior software engineers - seminar format and its evaluation: poster.
ICSE (Companion Volume)
Katsiaryna Labunets, Andrea Janes, Michael Felderer, Fabio Massacci
2017 J jnl
TestREx: a Framework for Repeatable Exploits.
CoRR
Stanislav Dashevskyi, Daniel Ricardo dos Santos, Fabio Massacci, Antonino Sabetta
2017 — conf
The Seconomics (Security-Economics) Vulnerabilities of Decentralized Autonomous Organizations.
Security Protocols Workshop
Fabio Massacci, Chan Nam Ngo, Jing Nie, Daniele Venturi, Julian Williams
2016 J jnl
Action, Inaction, Trust, and Cybersecurity's Common Property Problem.
IEEE Secur. Priv.
Karen Elliott, Fabio Massacci, Julian Williams
2016 J jnl
An automatic method for assessing the versions affected by a vulnerability.
Empir. Softw. Eng.
Viet Hung Nguyen, Stanislav Dashevskyi, Fabio Massacci
2016 J jnl
Economic Impacts of Rules- versus Risk-Based Cybersecurity Regulations for Critical Infrastructure Providers.
IEEE Secur. Priv.
Fabio Massacci, Raminder S. Ruprai, Matthew Collinson, Julian Williams
2016 — conf
On the Security Cost of Using a Free and Open Source Component in a Proprietary Product.
ESSoS
Stanislav Dashevskyi, Achim D. Brucker, Fabio Massacci
2016 J jnl
Then and Now: On the Maturity of the Cybercrime Markets The Lesson That Black-Hat Marketeers Learned.
IEEE Trans. Emerg. Top. Comput.
Luca Allodi, Marco Corradin, Fabio Massacci
2015 J jnl
IT Interdependence and the Economic Fairness of Cybersecurity Regulations for Civil Aviation.
IEEE Secur. Priv.
Martina de Gramatica, Fabio Massacci, Woohyun Shim, Alessandra Tedeschi, Julian Williams
2015 A* conf
Runtime Enforcement of Security Policies on Black Box Reactive Programs.
POPL
Minh Ngo, Fabio Massacci, Dimiter Milushev, Frank Piessens
2015 — conf
StaDynA: Addressing the Problem of Dynamic Code Updates in the Security Analysis of Android Applications.
CODASPY
Yury Zhauniarovich, Maqsood Ahmad, Olga Gadyatskaya, Bruno Crispo, Fabio Massacci
2015 B conf
The Role of Catalogues of Threats and Security Controls in Security Risk Assessment: An Empirical Study with ATM Professionals.
REFSQ
Martina de Gramatica, Katsiaryna Labunets, Fabio Massacci, Federica Paci, Alessandra Tedeschi
2015 — conf
The Work-Averse Attacker Model.
ECIS
Luca Allodi, Fabio Massacci
2015 B conf
Towards Black Box Testing of Android Apps.
ARES
Yury Zhauniarovich, Anton Philippov, Olga Gadyatskaya, Bruno Crispo, Fabio Massacci
2015 — conf
Which security catalogue is better for novices?
EmpiRE
Katsiaryna Labunets, Federica Paci, Fabio Massacci
2014 B conf
A Relative Cost-Benefit Approach for Evaluating Alternative Airport Security Policies.
ARES
Woohyun Shim, Fabio Massacci, Alessandra Tedeschi, Alessandro Pollini
2014 A conf
An Approach for Decision Support on the Uncertainty in Feature Model Evolution.
RE
Le Minh Sang Tran, Fabio Massacci
2014 J jnl
An Empirical Methodology to Evaluate Vulnerability Discovery Models.
IEEE Trans. Software Eng.
Fabio Massacci, Viet Hung Nguyen
2014 — conf
An Empirical Study of the Technology Transfer Potential of EU Security and Trust R&D Projects.
CSP Forum
Martina de Gramatica, Fabio Massacci, Olga Gadyatskaya
2014 — conf
An experiment on comparing textual vs. visual industrial methods for security risk assessment.
EmpiRE
Katsiaryna Labunets, Federica Paci, Fabio Massacci, Raminder S. Ruprai
2014 J jnl
Assessing a requirements evolution approach: Empirical studies in the air traffic management domain.
J. Syst. Softw.
Fabio Massacci, Federica Paci, Le Minh Sang Tran, Alessandra Tedeschi
2014 J jnl
Comparing Vulnerability Severity and Exploits Using Case-Control Studies.
ACM Trans. Inf. Syst. Secur.
Luca Allodi, Fabio Massacci
2014 B conf
EMFASE - An Empirical Framework for Security Design and Economic Trade-off.
ARES
Fabio Massacci, Federica Paci, Bjørnar Solhaug, Alessandra Tedeschi
2014 — ch.
Empirical Assessment of Security Requirements and Architecture: Lessons Learned.
Engineering Secure Future Internet Services and Systems
Riccardo Scandariato, Federica Paci, Le Minh Sang Tran, Katsiaryna Labunets, Koen Yskout, Fabio Massacci, Wouter Joosen
2014 A conf
NodeSentry: least-privilege library integration for server-side JavaScript.
ACSAC
Willem De Groef, Fabio Massacci, Frank Piessens
2014 — conf
Programmable enforcement framework of information flow policies.
ICTCS
Minh Ngo, Fabio Massacci
2014 J jnl
Security in the Firefox OS and Tizen Mobile Platforms.
Computer
Olga Gadyatskaya, Fabio Massacci, Yury Zhauniarovich
2014 — conf
Security triage: A report of a lean security requirements methodology for cost-effective security analysis.
EmpiRE
Matteo Giacalone, Rocco Mammoliti, Fabio Massacci, Federica Paci, Rodolfo Perugino, Claudio Selli
2014 A conf
Security triage: an industrial case study on the effectiveness of a lean methodology to identify security requirements.
ESEM
Matteo Giacalone, Federica Paci, Rocco Mammoliti, Rodolfo Perugino, Fabio Massacci, Claudio Selli
2014 — conf
TESTREX: a Testbed for Repeatable Exploits.
CSET
Stanislav Dashevskyi, Daniel Ricardo dos Santos, Fabio Massacci, Antonino Sabetta
2013 J jnl
A Systematically Empirical Evaluation of Vulnerability Discovery Models: a Study on Browsers' Vulnerabilities.
CoRR
Viet Hung Nguyen, Fabio Massacci
2013 A conf
An Experimental Comparison of Two Risk-Based Security Methods.
ESEM
Katsiaryna Labunets, Fabio Massacci, Federica Paci, Le Minh Sang Tran
2013 — conf
Anatomy of Exploit Kits - Preliminary Analysis of Exploit Kits as Software Artefacts.
ESSoS
Vadim Kotov, Fabio Massacci
2013 B conf
Evaluation of Airport Security Training Programs: Perspectives and Issues.
ARES
Woohyun Shim, Fabio Massacci, Martina de Gramatica, Alessandra Tedeschi, Alessandro Pollini
2013 J jnl
Load time code validation for mobile phone Java Cards.
J. Inf. Secur. Appl.
Olga Gadyatskaya, Fabio Massacci, Quang Huy Nguyen, Boutheina Chetali
2013 J jnl
MAP-REDUCE Runtime Enforcement of Information Flow Policies
CoRR
Minh Ngo, Fabio Massacci, Olga Gadyatskaya
2013 — conf
MalwareLab: Experimentation with Cybercrime Attack Tools.
CSET
Luca Allodi, Vadim Kotov, Fabio Massacci
2013 J jnl
My Software has a Vulnerability, should I worry?
CoRR
Luca Allodi, Fabio Massacci
2013 — conf
Quantitative Assessment of Risk Reduction with Cybercrime Black Market Monitoring.
IEEE Symposium on Security and Privacy Workshops
Luca Allodi, Woohyun Shim, Fabio Massacci
2013 J jnl
The (Un)Reliability of NVD Vulnerable Versions Data: an Empirical Experiment on Google Chrome Vulnerabilities
CoRR
Viet Hung Nguyen, Fabio Massacci
2013 A conf
The (un)reliability of NVD vulnerable versions data: an empirical experiment on Google Chrome vulnerabilities.
AsiaCCS
Viet Hung Nguyen, Fabio Massacci
2013 — conf
UNICORN: A Tool for Modeling and Reasoning on the Uncertainty of Requirements Evolution.
CAiSE Forum
Le Minh Sang Tran, Fabio Massacci
2012 — conf
A preliminary analysis of vulnerability scores for attacks in wild: the ekits and sym datasets.
BADGERS@CCS
Luca Allodi, Fabio Massacci
2012 — conf
An Idea of an Independent Validation of Vulnerability Discovery Models.
ESSoS
Viet Hung Nguyen, Fabio Massacci
2012 J jnl
An Independent Validation of Vulnerability Discovery Models
CoRR
Viet Hung Nguyen, Fabio Massacci
2012 A conf
An independent validation of vulnerability discovery models.
AsiaCCS
Viet Hung Nguyen, Fabio Massacci
2012 — conf
Assessing a requirements evolution approach: Empirical studies in the Air Traffic Management domain.
EmpiRE
Fabio Massacci, Deepa Nagaraj, Federica Paci, Le Minh Sang Tran, Alessandra Tedeschi
2012 — conf
Controlling Application Interactions on the Novel Smart Cards with Security-by-Contract.
FMCO
Olga Gadyatskaya, Fabio Massacci
2012 — conf
Crime Pays If You Are Just an Average Hacker.
CyberSecurity
Woohyun Shim, Luca Allodi, Fabio Massacci
2012 J jnl
Guest Editorial: Special section on software reliability and security.
Inf. Softw. Technol.
Jongmoon Baik, Fabio Massacci, Mohammad Zulkernine
2012 J jnl
High-level algorithms and data structures requirements for security-by-contract on Java cards.
Int. J. Crit. Comput. Based Syst.
Nicola Dragoni, Olga Gadyatskaya, Fabio Massacci, Anton Philippov
2012 — conf
How to Select a Security Requirements Method? A Comparative Study with Students and Practitioners.
NordSec
Fabio Massacci, Federica Paci
2012 J jnl
Iterative enforcement by suppression: Towards practical enforcement theories.
J. Comput. Secur.
Nataliia Bielova, Fabio Massacci
2012 A conf
Managing Evolution by Orchestrating Requirements and Testing Engineering Processes.
ICST
Federica Paci, Fabio Massacci, Fabrice Bouquet, Stephane Debricon
2012 — conf
Security of the OSGi Platform.
ESSoS Doctoral Symposium
Anton Philippov, Olga Gadyatskaya, Fabio Massacci
2012 Misc conf
Security-by-Contract for the OSGi Platform.
SEC
Olga Gadyatskaya, Fabio Massacci, Anton Philippov
2011 — conf
A Load Time Policy Checker for Open Multi-application Smart Cards.
POLICY
Nicola Dragoni, Eduardo Lostal, Olga Gadyatskaya, Fabio Massacci, Federica Paci
2011 — conf
A Method for Security Governance, Risk, and Compliance (GRC): A Goal-Process Approach.
FOSAD
Yudistira Asnar, Fabio Massacci
2011 — conf
A Tool for Managing Evolving Security Requirements.
CAiSE Forum
Gábor Bergmann, Fabio Massacci, Federica Paci, Thein Than Tun, Dániel Varró, Yijun Yu
2011 — conf
A Tool for Managing Evolving Security Requirements.
CAiSE Forum (Selected Papers)
Gábor Bergmann, Fabio Massacci, Federica Paci, Thein Than Tun, Dániel Varró, Yijun Yu
2011 — conf
After-Life Vulnerabilities: A Study on Firefox Evolution, Its Vulnerabilities, and Fixes.
ESSoS
Fabio Massacci, Stephan Neuhaus, Viet Hung Nguyen
2011 — conf
An Extended Ontology for Security Requirements.
CAiSE Workshops
Fabio Massacci, John Mylopoulos, Federica Paci, Thein Than Tun, Yijun Yu
2011 B conf
Computer Aided Threat Identification.
CEC
Yudistira Asnar, Tong Li, Fabio Massacci, Federica Paci
2011 — conf
Computer-Aided Generation of Enforcement Mechanisms for Error-Tolerant Policies.
POLICY
Nataliia Bielova, Fabio Massacci
2011 A conf
Dealing with Known Unknowns: Towards a Game-Theoretic Foundation for Software Requirement Evolution.
CAiSE
Le Minh Sang Tran, Fabio Massacci
2011 — ch.
Detecting Conflicts between Functional and Security Requirements with Secure Tropos: John Rusnak and the Allied Irish Bank.
Social Modeling for Requirements Engineering
Fabio Massacci, Nicola Zannone
2011 J jnl
Do you really mean what you actually enforced? - Edited automata revisited.
Int. J. Inf. Sec.
Nataliia Bielova, Fabio Massacci
2011 — conf
Engineering Secure Future Internet Services.
Future Internet Assembly
Wouter Joosen, Javier López, Fabio Martinelli, Fabio Massacci
2011 — conf
Invited talks.
EmpiRE
Neil A. M. Maiden, Massimiliano Di Penta, Fabio Massacci
2011 Misc conf
Load Time Security Verification.
ICISS
Olga Gadyatskaya, Eduardo Lostal, Fabio Massacci
2011 C conf
Managing changes with legacy security engineering processes.
ISI
Edith Felix, Olivier Delande, Fabio Massacci, Federica Paci
2011 — conf
Orchestrating Security and System Engineering for Evolving Systems - (Invited Paper).
ServiceWave
Fabio Massacci, Fabrice Bouquet, Elizabeta Fourneret, Jan Jürjens, Mass Soldal Lund, Sébastien Madelénat, Jan Tobias Mühlberg, Federica Paci, Stéphane Paul, Frank Piessens, Bjørnar Solhaug, Sven Wenzel
2011 J jnl
Organizational Patterns for Security and Dependability: From Design to Application.
Int. J. Secur. Softw. Eng.
Yudistira Asnar, Fabio Massacci, Ayda Saïdane, Carlo Riccucci, Massimo Felici, Alessandra Tedeschi, Paul El Khoury, Keqin Li, Magali Seguran, Nicola Zannone
2011 — conf
Predictability of Enforcement.
ESSoS
Nataliia Bielova, Fabio Massacci
2011 B conf
Reactive non-interference for a browser model.
NSS
Nataliia Bielova, Dominique Devriese, Fabio Massacci, Frank Piessens
2011 — conf
SeCMER: A Tool to Gain Control of Security Requirements Evolution.
ServiceWave
Gábor Bergmann, Fabio Massacci, Federica Paci, Thein Than Tun, Dániel Varró, Yijun Yu
2010 J jnl
A Dynamic Security Framework for Ambient Intelligent Systems: A Smart-Home Based eHealth Application.
Trans. Comput. Sci.
Luca Compagna, Paul El Khoury, Fabio Massacci, Ayda Saïdane
2010 C conf
Can We Support Applications' Evolution in Multi-application Smart Cards by Security-by-Contract?
WISTP
Nicola Dragoni, Olga Gadyatskaya, Fabio Massacci
2010 — ed.
Engineering Secure Software and Systems, Second International Symposium, ESSoS 2010, Pisa, Italy, February 3-4, 2010. Proceedings
ESSoS
Fabio Massacci, Dan S. Wallach, Nicola Zannone
2010 J jnl
Evolving Embedded Systems.
Computer
Gabor Karsai, Fabio Massacci, Leon J. Osterweil, Ina Schieferdecker
2010 Misc conf
Extending Security-by-Contract with Quantitative Trust on Mobile Devices.
CISIS
Gabriele Costa, Nicola Dragoni, Aliaksandr Lazouski, Fabio Martinelli, Fabio Massacci, Ilaria Matteucci
2010 — conf
Infringo ergo sum: when will software engineering support infringements?
FoSER
Fabio Massacci
2010 J jnl
JCS special issue on EU-funded ICT research on Trust and Security.
J. Comput. Secur.
Jan Camenisch, Javier López, Fabio Massacci, Massimo Ciscato, Thomas Skordas
2010 — conf
Java Card Architecture for Autonomous Yet Secure Evolution of Smart Cards Applications.
NordSec
Olga Gadyatskaya, Fabio Massacci, Federica Paci, Sergey A. Stankevich
2010 — conf
SecureChange: Security Engineering for Lifelong Evolvable Systems.
ISoLA (2)
Riccardo Scandariato, Fabio Massacci
2010 — ch.
Security Requirements Engineering: The SI* Modeling Language and the Secure Tropos Methodology.
Advances in Intelligent Information Systems
Fabio Massacci, John Mylopoulos, Nicola Zannone
2010 J jnl
Security-by-Contract-with-Trust for Mobile Devices.
J. Wirel. Mob. Networks Ubiquitous Comput. Dependable Appl.
Gabriele Costa, Aliaksandr Lazouski, Fabio Martinelli, Ilaria Matteucci, Valérie Issarny, Rachid Saadi, Nicola Dragoni, Fabio Massacci
2010 — conf
Towards Security Climate Forecasts.
Future Internet Assembly
Stephan Neuhaus, Fabio Massacci
2009 — conf
A Security Architecture for Web 2.0 Applications.
Future Internet Assembly
Lieven Desmet, Wouter Joosen, Fabio Massacci, Katsiaryna Naliuka, Pieter Philippaerts, Frank Piessens, Ida Sri Rejeki Siahaan, Dries Vanoverberghe
2009 J jnl
A self-protecting and self-healing framework for negotiating services and trust in autonomic communication systems.
Comput. Networks
Nicola Dragoni, Fabio Massacci, Ayda Saïdane
2009 — ed.
Engineering Secure Software and Systems, First International Symposium ESSoS 2009, Leuven, Belgium, February 4-6, 2009. Proceedings
ESSoS
Fabio Massacci, Samuel T. Redwine Jr., Nicola Zannone
2009 J jnl
Generalized XML security views.
Int. J. Inf. Sec.
Gabriel M. Kuper, Fabio Massacci, Nataliya Rassadko
2009 — conf
Goal-Oriented Access Control Model for Ambient Assisted Living.
PrimeLife
Fabio Massacci, Viet Hung Nguyen
2009 C conf
How to capture and use legal patterns in IT.
ICAIL
Alzbeta Krausová, Fabio Massacci, Ayda Saïdane
2009 J jnl
How to integrate legal requirements into a requirements engineering methodology for the development of security and privacy patterns.
Artif. Intell. Law
Luca Compagna, Paul El Khoury, Alzbeta Krausová, Fabio Massacci, Nicola Zannone
2009 — conf
Legal Patterns Implement Trust in IT Requirements: When Legal Means are the "Best" Implementation of IT Technical Goals.
RELAW
Alzbeta Krausová, Fabio Massacci, Ayda Saïdane
2009 A conf
Logging key assurance indicators in business processes.
AsiaCCS
Fabio Massacci, Gene Tsudik, Artsiom Yautsiukhin
2009 J jnl
Matching in security-by-contract for mobile code.
J. Log. Algebraic Methods Program.
Nataliia Bielova, Nicola Dragoni, Fabio Massacci, Katsiaryna Naliuka, Ida Sri Rejeki Siahaan
2009 — book
Safety and Security in Multiagent Systems - Research Results from 2004-2006
Safety and Security in Multiagent Systems
Mike Barley, Haralambos Mouratidis, Amy Unruh, Diana F. Spears, Paul Scerri, Fabio Massacci
2009 — conf
Satisfaction of Control Objectives by Control Processes.
ICSOC/ServiceWave
Daniela Marino, Fabio Massacci, Andrea Micheletti, Nataliya Rassadko, Stephan Neuhaus
2009 — conf
The S3MS.NET Run Time Monitor: Tool Demonstration.
BYTECODE@ETAPS
Lieven Desmet, Wouter Joosen, Fabio Massacci, Katsiaryna Naliuka, Pieter Philippaerts, Frank Piessens, Dries Vanoverberghe
2009 — conf
Towards Practical Enforcement Theories.
NordSec
Nataliia Bielova, Fabio Massacci, Andrea Micheletti
2009 J jnl
What the heck is this application doing? - A security-by-contract architecture for pervasive services.
Comput. Secur.
Nicola Dragoni, Fabio Massacci, Thomas Walter, Christian Schaefer
2008 — conf
A Model-Driven Approach for the Specification and Analysis of Access Control Policies.
OTM Conferences (2)
Fabio Massacci, Nicola Zannone
2008 — conf
An Inline Monitoring System for .NET Mobile Devices.
IFIPTM
Nicola Dragoni, Fabio Massacci, Katsiaryna Naliuka
2008 — conf
Do You Really Mean What You Actually Enforced?.
Formal Aspects in Security and Trust
Nataliia Bielova, Fabio Massacci
2008 J jnl
Enhancing Java ME Security Support with Resource Usage Monitoring.
ERCIM News
Fabio Martinelli, Fabio Massacci, Paolo Mori, Christian Schaefer, Thomas Walter
2008 J jnl
Interactive access control for autonomic systems: From theory to implementation.
ACM Trans. Auton. Adapt. Syst.
Hristo Koshutanski, Fabio Massacci
2008 — ed.
NTMS 2008, 2nd International Conference on New Technologies, Mobility and Security, November 5-7, 2008, Tangier, Morocco
NTMS
Akshai Aggarwal, Mohamad Badra, Fabio Massacci
2008 J jnl
Preface.
Sci. Comput. Program.
Fabio Massacci, Frank Piessens, Sjouke Mauw
2008 — ed.
Proceedings of the 3rd International Workshop on Security and Trust Management, STM@ESORICS 2007, Dresden, Germany, September 27, 2007
STM@ESORICS
Luca Compagna, Volkmar Lotz, Fabio Massacci
2008 — ed.
Proceedings of the First International Workshop on Run Time Enforcement for Mobile and Distributed Systems, REM@ESORICS 2007, Dresden, Germany, September 27, 2007
REM@ESORICS
Fabio Massacci, Frank Piessens
2008 — conf
Security views for outsourced business processes.
SWS
Azzedine Benameur, Fabio Massacci, Nataliya Rassadko
2008 — conf
Security-By-Contract for the Future Internet.
FIS
Fabio Massacci, Frank Piessens, Ida Sri Rejeki Siahaan
2008 J jnl
Security-by-contract on the .NET platform.
Inf. Secur. Tech. Rep.
Lieven Desmet, Wouter Joosen, Fabio Massacci, Pieter Philippaerts, Frank Piessens, Ida Sri Rejeki Siahaan, Dries Vanoverberghe
2008 — conf
Simulating midlet's security claims with automata modulo theory.
PLAS
Fabio Massacci, Ida Sri Rejeki Siahaan
2008 B conf
Towards Practical Security Monitors of UML Policies for Mobile Applications.
ARES
Fabio Massacci, Katsiaryna Naliuka
2008 J jnl
Towards Systematic Achievement of Compliance in Service-Oriented Architectures: The MASTER Approach.
Wirtschaftsinf.
Volkmar Lotz, Emmanuel Pigout, Peter M. Fischer, Donald Kossmann, Fabio Massacci, Alexander Pretschner
2007 J jnl
A Negotiation Scheme for Access Rights Establishment in Autonomic Communication.
J. Netw. Syst. Manag.
Hristo Koshutanski, Fabio Massacci
2007 — conf
A Security-by-Contract Architecture for Pervasive Services.
SECPerU
Nicola Dragoni, Fabio Massacci, Christian Schaefer, Thomas Walter, Eric Vétillard
2007 — conf
A flexible security architecture to support third-party applications on mobile devices.
CSAW
Lieven Desmet, Wouter Joosen, Fabio Massacci, Katsiaryna Naliuka, Pieter Philippaerts, Frank Piessens, Dries Vanoverberghe
2007 — conf
An algorithm for the appraisal of assurance indicators for complex business processes.
QoP
Fabio Massacci, Artsiom Yautsiukhin
2007 J jnl
Computer-aided Support for Secure Tropos.
Autom. Softw. Eng.
Fabio Massacci, John Mylopoulos, Nicola Zannone
2007 — conf
From Early Requirements Analysis towards Secure Workflows.
IFIPTM
Ganna Frankova, Fabio Massacci, Magali Seguran
2007 J jnl
From Hippocratic Databases to Secure Tropos: a Computer-Aided Re-Engineering Approach.
Int. J. Softw. Eng. Knowl. Eng.
Fabio Massacci, John Mylopoulos, Nicola Zannone
2007 B conf
From Trust to Dependability through Risk Analysis.
ARES
Yudistira Asnar, Paolo Giorgini, Fabio Massacci, Nicola Zannone
2007 — conf
Goal-Equivalent Secure Business Process Re-engineering.
ICSOC Workshops
Hugo A. López, Fabio Massacci, Nicola Zannone
2007 C conf
How to capture, model, and verify the knowledge of legal, security, and privacy experts: a pattern-based approach.
ICAIL
Luca Compagna, Paul El Khoury, Fabio Massacci, Reshma Thomas, Nicola Zannone
2007 C conf
Modelling Quality of Protection in Outsourced Business Processes.
IAS
Fabio Massacci, Artsiom Yautsiukhin
2007 — conf
Preface.
STM@ESORICS
Luca Compagna, Volkmar Lotz, Fabio Massacci
2007 — conf
Preface.
REM@ESORICS
Fabio Massacci, Frank Piessens
2007 — conf
Security-by-Contract: Toward a Semantics for Digital Signatures on Mobile Code.
EuroPKI
Nicola Dragoni, Fabio Massacci, Katsiaryna Naliuka, Ida Sri Rejeki Siahaan
2007 — conf
Security-by-contract for web services.
SWS
Nicola Dragoni, Fabio Massacci
2007 B conf
The Meaning of Logs.
TrustBus
Sandro Etalle, Fabio Massacci, Artsiom Yautsiukhin
2007 — conf
Towards Practical Security Monitors of UML Policies for Mobile Applications.
POLICY
Fabio Massacci, Katsiaryna Naliuka
2007 B conf
Usage Control in Service-Oriented Architectures.
TrustBus
Alexander Pretschner, Fabio Massacci, Manuel Hilty
2006 J jnl
A survey of autonomic communications.
ACM Trans. Auton. Adapt. Syst.
Simon Dobson, Spyros G. Denazis, Antonio Fernández, Dominique Gaïti, Erol Gelenbe, Fabio Massacci, Paddy Nixon, Fabrice Saffre, Nikita Schmidt, Franco Zambonelli
2006 A conf
Designing Security Requirements Models Through Planning.
CAiSE
Volha Bryl, Fabio Massacci, John Mylopoulos, Nicola Zannone
2006 A conf
Detecting Conflicts of Interest.
RE
Paolo Giorgini, Fabio Massacci, John Mylopoulos, Nicola Zannone
2006 J jnl
Hierarchical hippocratic databases with minimal disclosure for virtual organizations.
VLDB J.
Fabio Massacci, John Mylopoulos, Nicola Zannone
2006 — ed.
Proceedings of the 2nd ACM Workshop on Quality of Protection, QoP 2006, Alexandria, VA, USA, October 30, 2006
QoP
Günter Karjoth, Fabio Massacci
2006 — book
Quality of Protection - Security Measurements and Metrics
Dieter Gollmann, Fabio Massacci, Artsiom Yautsiukhin
2006 J jnl
Requirements engineering for trust management: model, methodology, and reasoning.
Int. J. Inf. Sec.
Paolo Giorgini, Fabio Massacci, John Mylopoulos, Nicola Zannone
2006 — conf
Security and Trust in IT Business Outsourcing: a Manifesto.
STM
Yücel Karabulut, Florian Kerschbaum, Fabio Massacci, Philip Robinson, Artsiom Yautsiukhin
2006 — ed.
Trust Management, 4th International Conference, iTrust 2006, Pisa, Italy, May 16-19, 2006, Proceedings
iTrust
Ketil Stølen, William H. Winsborough, Fabio Martinelli, Fabio Massacci
2006 J jnl
Verifying the SET Purchase Protocols.
J. Autom. Reason.
Giampaolo Bella, Fabio Massacci, Lawrence C. Paulson
2005 J jnl
An overview of the verification of SET.
Int. J. Inf. Sec.
Giampaolo Bella, Fabio Massacci, Lawrence C. Paulson
2005 C conf
Generalized XML security views.
SACMAT
Gabriel M. Kuper, Fabio Massacci, Nataliya Rassadko
2005 — conf
Interactive Credential Negotiation for Stateful Business Processes.
iTrust
Hristo Koshutanski, Fabio Massacci
2005 — conf
Maintaining privacy on derived objects.
WPES
Nicola Zannone, Sushil Jajodia, Fabio Massacci, Duminda Wijesekera
2005 A conf
Minimal Disclosure in Hierarchical Hippocratic Databases with Delegation.
ESORICS
Fabio Massacci, John Mylopoulos, Nicola Zannone
2005 A conf
Modeling Security Requirements Through Ownership, Permission and Delegation.
RE
Paolo Giorgini, Fabio Massacci, John Mylopoulos, Nicola Zannone
2005 — conf
Modeling Social and Individual Trust in Requirements Engineering Methodologies.
iTrust
Paolo Giorgini, Fabio Massacci, John Mylopoulos, Nicola Zannone
2005 — conf
ST-Tool: A CASE Tool for Modeling and Analyzing Trust Requirements.
iTrust
Paolo Giorgini, Fabio Massacci, John Mylopoulos, Alberto Siena, Nicola Zannone
2005 A conf
ST-Tool: A CASE Tool for Security Requirements Engineering.
RE
Paolo Giorgini, Fabio Massacci, John Mylopoulos, Nicola Zannone
2005 — conf
Security and Trust Requirements Engineering.
FOSAD
Paolo Giorgini, Fabio Massacci, Nicola Zannone
2005 — conf
Towards an Independent Semantics and Verification Technology for the HLPSL Specification Language.
ARSPA@ICALP
Alexey Gotsman, Fabio Massacci, Marco Pistore
2005 J jnl
Using a security requirements engineering methodology in practice: The compliance with the Italian data protection legislation.
Comput. Stand. Interfaces
Fabio Massacci, Marco Prest, Nicola Zannone
2004 B conf
A System for Interactive Authorization for Business Processes for Web Services.
ICWE
Hristo Koshutanski, Fabio Massacci
2004 — conf
An Interactive Trust Management and Negotiation Scheme.
Formal Aspects in Security and Trust
Hristo Koshutanski, Fabio Massacci
2004 — conf
E Pluribus Unum.
WAC
Hristo Koshutanski, Fabio Massacci
2004 — conf
Filling the Gap between Requirements Engineering and Public Key/Trust Management Infrastructures.
EuroPKI
Paolo Giorgini, Fabio Massacci, John Mylopoulos, Nicola Zannone
2004 Misc conf
Interactive Access Control for Web Services.
SEC
Hristo Koshutanski, Fabio Massacci
2004 — conf
Privacy Is Linking Permission to Purpose.
Security Protocols Workshop
Fabio Massacci, Nicola Zannone
2004 — conf
Privacy is Linking Permission to Purpose (Transcript of Discussion).
Security Protocols Workshop
Fabio Massacci
2004 — conf
Requirements Engineering Meets Trust Management: Model, Methodology, and Reasoning.
iTrust
Paolo Giorgini, Fabio Massacci, John Mylopoulos, Nicola Zannone
2003 — conf
A Protocol's Life After Attacks....
Security Protocols Workshop
Giampaolo Bella, Stefano Bistarelli, Fabio Massacci
2003 — conf
An access control framework for business processes for web services.
XML Security
Hristo Koshutanski, Fabio Massacci
2003 J jnl
How to fake an RSA signature by encoding modular root finding as a SAT problem.
Discret. Appl. Math.
Claudia Fiorini, Enrico Martinelli, Fabio Massacci
2003 A conf
Requirement Engineering Meets Security: A Case Study on Modelling Secure Electronic Transactions by VISA and Mastercard.
ER
Paolo Giorgini, Fabio Massacci, John Mylopoulos
2003 J jnl
Verifying the SET registration protocols.
IEEE J. Sel. Areas Commun.
Giampaolo Bella, Fabio Massacci, Lawrence C. Paulson
2002 — conf
Planning Attacks to Security Protocols: Case Studies in Logic Programming.
Computational Logic: Logic Programming and Beyond
Luigia Carlucci Aiello, Fabio Massacci
2002 A* conf
Solving QBF by SMV.
KR
Francesco M. Donini, Paolo Liberatore, Fabio Massacci, Marco Schaerf
2002 A* conf
The verification of an industrial payment protocol: the SET purchase phase.
CCS
Giampaolo Bella, Lawrence C. Paulson, Fabio Massacci
2001 — conf
Attacking fair-exchange protocols: parallel models vs trace models.
LACPV@CAV
Luigia Carlucci Aiello, Fabio Massacci
2001 A* conf
Decision Procedures for Expressive Description Logics with Intersection, Composition, Converse of Roles and Role Identity.
IJCAI
Fabio Massacci
2001 A conf
Lotrec : The Generic Tableau Prover for Modal and Description Logics.
IJCAR
Luis Fariñas del Cerro, David Fauthoux, Olivier Gasquet, Andreas Herzig, Dominique Longin, Fabio Massacci
2001 J jnl
Verifying security protocols as planning in logic programming.
ACM Trans. Comput. Log.
Luigia Carlucci Aiello, Fabio Massacci
2000 — conf
An Executable Specification Language for Planning Attacks to Security Protocols.
CSFW
Luigia Carlucci Aiello, Fabio Massacci
2000 J jnl
Combining Deduction and Model Checking into Tableaux and Algorithms for Converse-PDL.
Inf. Comput.
Giuseppe De Giacomo, Fabio Massacci
2000 J jnl
DES: a Challenge Problem for Nonmonotonic Reasoning Systems
CoRR
Maarit Hietalahti, Fabio Massacci, Ilkka Niemelä
2000 B conf
Design and Results of TANCS-2000 Non-classical (Modal) Systems Comparison.
TABLEAUX
Fabio Massacci, Francesco M. Donini
2000 J jnl
EXPTIME tableaux for ALC.
Artif. Intell.
Francesco M. Donini, Fabio Massacci
2000 A conf
Formal Verification of Cardholder Registration in SET.
ESORICS
Giampaolo Bella, Fabio Massacci, Lawrence C. Paulson, Piero Tramontano
2000 J jnl
Logical Cryptanalysis as a SAT Problem.
J. Autom. Reason.
Fabio Massacci, Laura Marraro
2000 — conf
Making Sense of Specifications: The Formalization of SET.
Security Protocols Workshop
Giampaolo Bella, Fabio Massacci, Lawrence C. Paulson, Piero Tramontano
2000 A* conf
Reduction rules and universal variables for first order tableaux and DPLL.
KR
Fabio Massacci
2000 J jnl
Single Step Tableaux for Modal Logics.
J. Autom. Reason.
Fabio Massacci
2000 — conf
The Taming of the (X)OR.
Computational Logic
Peter Baumgartner, Fabio Massacci
2000 J jnl
The proof complexity of analytic and clausal tableaux.
Theor. Comput. Sci.
Fabio Massacci
1999 B conf
Automated Reasoning and the Verification of Security Protocols.
TABLEAUX
Fabio Massacci
1999 B conf
Design and Results of the Tableaux-99 Non-classical (Modal) Systems Comparison.
TABLEAUX
Fabio Massacci
1999 A* conf
Using Walk-SAT and Rel-Sat for Cryptographic Key Search.
IJCAI
Fabio Massacci
1998 — conf
Anytime Approximate Modal Reasoning.
AAAI/IAAI
Fabio Massacci
1998 A conf
Cook and Reckhow are Wrong: Subexponential Tableaux Proofs for Their Family of Formulae.
ECAI
Fabio Massacci
1998 B conf
Simplification: A General Constraint Propagation Technique for Propositional and Modal Tableaux.
TABLEAUX
Fabio Massacci
1998 J jnl
Tableau Methods for Formal Verification of Multi-Agent Distributed Systems.
J. Log. Comput.
Fabio Massacci
1997 — conf
A Proof Theory for Tractable Approximations of Propositional Reasoning.
AI*IA
Fabio Massacci
1997 — conf
Breaking Security Protocols as an AI Planning Problem.
ECP
Fabio Massacci
1997 — conf
Reasoning About Security: A Logic and a Decision Method for Role-Based Access Control.
ECSQARU-FAPR
Fabio Massacci
1997 B conf
Tableaux Methods for Access Control in Distributed Systems.
TABLEAUX
Fabio Massacci
1996 B conf
A Uniform Tableaux Method for Nonmonotonic Modal Logics.
JELIA
Francesco M. Donini, Fabio Massacci, Daniele Nardi, Riccardo Rosati
1996 B conf
Approximate Reasoning for Contextual Databases.
ICTAI
Fabio Massacci
1996 — conf
Contextual Reasoning Is NP-Complete.
AAAI/IAAI, Vol. 1
Fabio Massacci
1996 — conf
Exptime Tableaux for ALC.
Description Logics
Giuseppe De Giacomo, Francesco M. Donini, Fabio Massacci
1996 A conf
Tableaux and Algorithms for Propositional Dynamic Logic with Converse.
CADE
Giuseppe De Giacomo, Fabio Massacci
1994 A conf
Strongly Analytic Tableaux for Normal Modal Logics.
CADE
Fabio Massacci