Riccardo Scandariato

154 papers A* 1A 20B 18C 2Misc 1Journal 64Unranked 41

Year	Rank	Type	Title / Venue / Authors
2026	J	`jnl`	Discrete prompt optimization using genetic algorithm for secure Python code generation. J. Syst. Softw. Catherine Tony, Maura Pintor, Max Kretschmann, Riccardo Scandariato
2026	J	`jnl`	Preface to the Special Issue on Security Testing for Complex Software Systems Special Issue 1239 Editorial. Empir. Softw. Eng. Valeria Pontillo, Emanuele Iannone, Coen De Roover, Riccardo Scandariato
2026	J	`jnl`	Reading Between the Code Lines: On the Use of Self-Admitted Technical Debt for Security Analysis. CoRR Nicolás E. Díaz Ferreyra, Moritz Mock, Max Kretschmann, Barbara Russo, Mojtaba Shahin, Mansooreh Zahedi, Riccardo Scandariato
2025	J	`jnl`	A Match Made in Heaven? Matching Test Cases and Vulnerabilities With the VUTECO Approach. CoRR Emanuele Iannone, Quang-Cuong Bui, Riccardo Scandariato
2025	J	`jnl`	A Systematic Literature Review on Automated Exploit and Security Test Generation. CoRR Quang-Cuong Bui, Emanuele Iannone, Maria Camporese, Torge Hinrichs, Catherine Tony, László Tóth, Fabio Palomba, Péter Hegedüs, Fabio Massacci, Riccardo Scandariato
2025	J	`jnl`	A Taxonomy of Functional Security Features and How They Can Be Located. CoRR Kevin Hermann, Simon Schneider, Catherine Tony, Asli Yardim, Sven Peldszus, Thorsten Berger, Riccardo Scandariato, M. Angela Sasse, Alena Naiakshina
2025	J	`jnl`	A taxonomy of functional security features and how they can be located. Empir. Softw. Eng. Kevin Hermann, Simon Schneider, Catherine Tony, Asli Yardim, Sven Peldszus, Thorsten Berger, Riccardo Scandariato, M. Angela Sasse, Alena Naiakshina
2025	J	`jnl`	Beyond prompting: the role of phrasing tasks in vulnerability prediction for Java. Cybersecur. Torge Hinrichs, Emanuele Iannone, Riccardo Scandariato
2025	J	`jnl`	Comparison of static analysis architecture recovery tools for microservice applications. Empir. Softw. Eng. Simon Schneider, Alexander Bakhtin, Xiaozhou Li, Jacopo Soldani, Antonio Brogi, Tomás Cerný, Riccardo Scandariato, Davide Taibi
2025	—	`conf`	Impact of Identifier Normalization on Vulnerability Detection Techniques. SANER-C Torge Hinrichs, Tim Diercks, Riccardo Scandariato
2025	—	`conf`	In Specs We Trust? Conformance-Analysis of Implementation to Specifications in Node-RED and Associated Security Risks. ARES (1) Simon Schneider, Komal Kashish, Katja Tuma, Riccardo Scandariato
2025	J	`jnl`	In Specs we Trust? Conformance-Analysis of Implementation to Specifications in Node-RED and Associated Security Risks. CoRR Simon Schneider, Komal Kashish, Katja Tuma, Riccardo Scandariato
2025	J	`jnl`	On the Understandability of Design-Level Security Practices in Infrastructure-as-Code Scripts and Deployment Architectures. ACM Trans. Softw. Eng. Methodol. Evangelos Ntentos, Nicole Elisabeth Lueger, Georg Simhandl, Uwe Zdun, Simon Schneider, Riccardo Scandariato, Nicolás E. Díaz Ferreyra
2025	J	`jnl`	Prompting Techniques for Secure Code Generation: A Systematic Investigation. ACM Trans. Softw. Eng. Methodol. Catherine Tony, Nicolás E. Díaz Ferreyra, Markus Mutas, Salem Dhif, Riccardo Scandariato
2025	A	`conf`	Retrieve, Refine, or Both? Using Task-Specific Guidelines for Secure Python Code Generation. ICSME Catherine Tony, Emanuele Iannone, Riccardo Scandariato
2025	—	`conf`	The Good, the Bad, and the (Un)Usable: a Rapid Literature Review on Privacy as Code. CHASE@ICSE Nicolás E. Díaz Ferreyra, Sirine Khelifi, Nalin A. G. Arachchilage, Riccardo Scandariato
2024	J	`jnl`	APR4Vul: an empirical study of automatic program repair techniques on real-world Java vulnerabilities. Empir. Softw. Eng. Quang-Cuong Bui, Ranindya Paramitha, Duc-Ly Vu, Fabio Massacci, Riccardo Scandariato
2024	—	`conf`	CATMA: Conformance Analysis Tool For Microservice Applications. ICSE Companion Clinton Cao, Simon Schneider, Nicolás E. Díaz Ferreyra, Sicco Verwer, Annibale Panichella, Riccardo Scandariato
2024	J	`jnl`	CATMA: Conformance Analysis Tool For Microservice Applications. CoRR Clinton Cao, Simon Schneider, Nicolás E. Díaz Ferreyra, Sicco Verwer, Annibale Panichella, Riccardo Scandariato
2024	J	`jnl`	Comparison of Static Analysis Architecture Recovery Tools for Microservice Applications. CoRR Simon Schneider, Alexander Bakhtin, Xiaozhou Li, Jacopo Soldani, Antonio Brogi, Tomás Cerný, Riccardo Scandariato, Davide Taibi
2024	J	`jnl`	Comparison of Static Analysis Architecture Recovery Tools for Microservice Applications. CoRR Simon Schneider, Alexander Bakhtin, Xiaozhou Li, Jacopo Soldani, Antonio Brogi, Tomás Cerný, Riccardo Scandariato, Davide Taibi
2024	J	`jnl`	Cybersecurity discussions in Stack Overflow: a developer-centred analysis of engagement and self-disclosure behaviour. Soc. Netw. Anal. Min. Nicolás E. Díaz Ferreyra, Melina C. Vidoni, Maritta Heisel, Riccardo Scandariato
2024	—	`conf`	Designing Secure AI-based Systems: a Multi-Vocal Literature Review. SecDev Simon Schneider, Ananya Saha, Emanuele Mezzi, Katja Tuma, Riccardo Scandariato
2024	J	`jnl`	Designing Secure AI-based Systems: a Multi-Vocal Literature Review. CoRR Simon Schneider, Ananya Saha, Emanuele Mezzi, Katja Tuma, Riccardo Scandariato
2024	J	`jnl`	Detection Strategies for Microservice Security Tactics. IEEE Trans. Dependable Secur. Comput. Uwe Zdun, Pierre-Jean Queval, Georg Simhandl, Riccardo Scandariato, Somik Chakravarty, Marjan Jelic, Aleksandar S. Jovanovic
2024	A	`conf`	How Dataflow Diagrams Impact Software Security Analysis: an Empirical Experiment. SANER Simon Schneider, Nicolás E. Díaz Ferreyra, Pierre-Jean Quéval, Georg Simhandl, Uwe Zdun, Riccardo Scandariato
2024	J	`jnl`	How Dataflow Diagrams Impact Software Security Analysis: an Empirical Experiment. CoRR Simon Schneider, Nicolás E. Díaz Ferreyra, Pierre-Jean Quéval, Georg Simhandl, Uwe Zdun, Riccardo Scandariato
2024	J	`jnl`	Managing Security Evidence in Safety-Critical Organizations. CoRR Mazen Mohamad, Jan-Philipp Steghöfer, Eric Knauss, Riccardo Scandariato
2024	J	`jnl`	Managing security evidence in safety-critical organizations. J. Syst. Softw. Mazen Mohamad, Jan-Philipp Steghöfer, Eric Knauss, Riccardo Scandariato
2024	J	`jnl`	Prompting Techniques for Secure Code Generation: A Systematic Investigation. CoRR Catherine Tony, Nicolás E. Díaz Ferreyra, Markus Mutas, Salem Dhif, Riccardo Scandariato
2024	J	`jnl`	The Good, the Bad, and the (Un)Usable: A Rapid Literature Review on Privacy as Code. CoRR Nicolás E. Díaz Ferreyra, Sirine Khelifi, Nalin A. G. Arachchilage, Riccardo Scandariato
2024	A	`conf`	What Can Self-Admitted Technical Debt Tell Us About Security? A Mixed-Methods Study. MSR Nicolás E. Díaz Ferreyra, Mojtaba Shahin, Mansooreh Zahedi, Sodiq Quadri, Riccardo Scandariato
2024	J	`jnl`	What Can Self-Admitted Technical Debt Tell Us About Security? A Mixed-Methods Study. CoRR Nicolás E. Díaz Ferreyra, Mojtaba Shahin, Mansooreh Zahedi, Sodiq Quadri, Riccardo Scandariato
2023	J	`jnl`	Automatic Extraction of Security-Rich Dataflow Diagrams for Microservice Applications written in Java. CoRR Simon Schneider, Riccardo Scandariato
2023	J	`jnl`	Automatic extraction of security-rich dataflow diagrams for microservice applications written in Java. J. Syst. Softw. Simon Schneider, Riccardo Scandariato
2023	J	`jnl`	CASCADE: An Asset-driven Approach to Build Security Assurance Cases for Automotive Systems. ACM Trans. Cyber Phys. Syst. Mazen Mohamad, Rodi Jolak, Örjan Askerdal, Jan-Philipp Steghöfer, Riccardo Scandariato
2023	J	`jnl`	Checking security compliance between models and code. Softw. Syst. Model. Katja Tuma, Sven Peldszus, Daniel Strüber, Riccardo Scandariato, Jan Jürjens
2023	B	`conf`	Developers Need Protection, Too: Perspectives and Research Challenges for Privacy in Social Coding Platforms. CHASE Nicolás E. Díaz Ferreyra, Abdessamad Imine, Melina C. Vidoni, Riccardo Scandariato
2023	J	`jnl`	Developers Need Protection, Too: Perspectives and Research Challenges for Privacy in Social Coding Platforms. CoRR Nicolás E. Díaz Ferreyra, Abdessamad Imine, Melina C. Vidoni, Riccardo Scandariato
2023	A	`conf`	DockerCleaner: Automatic Repair of Security Smells in Dockerfiles. ICSME Quang-Cuong Bui, Malte Laukötter, Riccardo Scandariato
2023	A	`conf`	LLMSecEval: A Dataset of Natural Language Prompts for Security Evaluations. MSR Catherine Tony, Markus Mutas, Nicolás E. Díaz Ferreyra, Riccardo Scandariato
2023	J	`jnl`	LLMSecEval: A Dataset of Natural Language Prompts for Security Evaluations. CoRR Catherine Tony, Markus Mutas, Nicolás E. Díaz Ferreyra, Riccardo Scandariato
2023	J	`jnl`	Microservice Security Metrics for Secure Communication, Identity Management, and Observability. ACM Trans. Softw. Eng. Methodol. Uwe Zdun, Pierre-Jean Queval, Georg Simhandl, Riccardo Scandariato, Somik Chakravarty, Marjan Jelic, Aleksandar S. Jovanovic
2023	—	`conf`	Regret, Delete, (Do Not) Repeat: An Analysis of Self-Cleaning Practices on Twitter After the Outbreak of the COVID-19 Pandemic. CHI Extended Abstracts Nicolás Emilio Díaz Ferreyra, Gautam Kishore Shahi, Catherine Tony, Stefan Stieglitz, Riccardo Scandariato
2023	J	`jnl`	Regret, Delete, (Do Not) Repeat: An Analysis of Self-Cleaning Practices on Twitter After the Outbreak of the COVID-19 Pandemic. CoRR Nicolás E. Díaz Ferreyra, Gautam Kishore Shahi, Catherine Tony, Stefan Stieglitz, Riccardo Scandariato
2023	A	`conf`	microSecEnD: A Dataset of Security-Enriched Dataflow Diagrams for Microservice Applications. MSR Simon Schneider, Tufan Özen, Michael Chen, Riccardo Scandariato
2022	J	`jnl`	CONSERVE: A framework for the selection of techniques for monitoring containers security. J. Syst. Softw. Rodi Jolak, Thomas Rosenstatter, Mazen Mohamad, Kim Strandberg, Behrooz Sangchoolie, Nasser Nowdehi, Riccardo Scandariato
2022	A	`conf`	Conversational DevBots for Secure Programming: An Empirical Study on SKF Chatbot. EASE Catherine Tony, Mohana Balasubramanian, Nicolás E. Díaz Ferreyra, Riccardo Scandariato
2022	J	`jnl`	Conversational DevBots for Secure Programming: An Empirical Study on SKF Chatbot. CoRR Catherine Tony, Mohana Balasubramanian, Nicolás E. Díaz Ferreyra, Riccardo Scandariato
2022	J	`jnl`	Cybersecurity Discussions in Stack Overflow: A Developer-Centred Analysis of Engagement and Self-Disclosure Behaviour. CoRR Nicolás E. Díaz Ferreyra, Melina C. Vidoni, Maritta Heisel, Riccardo Scandariato
2022	C	`conf`	GitHub Considered Harmful? Analyzing Open-Source Projects for the Automatic Generation of Cryptographic API Call Sequences. QRS Catherine Tony, Nicolás E. Díaz Ferreyra, Riccardo Scandariato
2022	J	`jnl`	GitHub Considered Harmful? Analyzing Open-Source Projects for the Automatic Generation of Cryptographic API Call Sequences. CoRR Catherine Tony, Nicolás E. Díaz Ferreyra, Riccardo Scandariato
2022	—	`conf`	Identifying security-related requirements in regulatory documents based on cross-project classification. PROMISE Mazen Mohamad, Jan-Philipp Steghöfer, Alexander Åström, Riccardo Scandariato
2022	A	`conf`	Maestro: a platform for benchmarking automatic program repair tools on software vulnerabilities. ISSTA Eduard Pinconschi, Quang-Cuong Bui, Rui Abreu, Pedro Adão, Riccardo Scandariato
2022	B	`conf`	Precise Analysis of Purpose Limitation in Data Flow Diagrams. ARES Hanaa Alshareef, Katja Tuma, Sandro Stucki, Gerardo Schneider, Riccardo Scandariato
2022	B	`conf`	RIPOSTE: A Collaborative Cyber Attack Response Framework for Automotive Systems. SEAA Rodi Jolak, Thomas Rosenstatter, Saif Aldaghistani, Riccardo Scandariato
2022	B	`conf`	STRIPED: A Threat Analysis Method for IoT Systems. ARES Kamakshi Srikumar, Komal Kashish, Kolja Eggers, Nicolás E. Díaz Ferreyra, Julian Koch, Thorsten Schüppstuhl, Riccardo Scandariato
2022	J	`jnl`	Security of Microservice Applications: A Practitioners' Perspective on Challenges and Best Practices. CoRR Priyanka Billawa, Anusha Bambhore Tukaram, Nicolás E. Díaz Ferreyra, Jan-Philipp Steghöfer, Riccardo Scandariato, Georg Simhandl
2022	B	`conf`	SoK: Security of Microservice Applications: A Practitioners' Perspective on Challenges and Best Practices. ARES Priyanka Billawa, Anusha Bambhore Tukaram, Nicolás E. Díaz Ferreyra, Jan-Philipp Steghöfer, Riccardo Scandariato, Georg Simhandl
2022	B	`conf`	Towards a Security Benchmark for the Architectural Design of Microservice Applications. ARES Anusha Bambhore Tukaram, Simon Schneider, Nicolás E. Díaz Ferreyra, Georg Simhandl, Uwe Zdun, Riccardo Scandariato
2022	A	`conf`	Vul4J: A Dataset of Reproducible Java Vulnerabilities Geared Towards the Study of Program Repair Techniques. MSR Quang-Cuong Bui, Riccardo Scandariato, Nicolás E. Díaz Ferreyra
2021	—	`conf`	Asset-driven Security Assurance Cases with Built-in Quality Assurance. EnCyCriS@ICSE Mazen Mohamad, Örjan Askerdal, Rodi Jolak, Jan-Philipp Steghöfer, Riccardo Scandariato
2021	J	`jnl`	Checking Security Compliance between Models and Code. CoRR Katja Tuma, Sven Peldszus, Daniel Strüber, Riccardo Scandariato, Jan Jürjens
2021	J	`jnl`	Finding security threats that matter: Two industrial case studies. J. Syst. Softw. Katja Tuma, Christian Sandberg, Urban Thorsson, Mathias Widman, Thomas Herpel, Riccardo Scandariato
2021	—	`conf`	Secure Software Development in the Era of Fluid Multi-party Open Software and Services. ICSE (NIER) Ivan Pashchenko, Riccardo Scandariato, Antonino Sabetta, Fabio Massacci
2021	J	`jnl`	Secure Software Development in the Era of Fluid Multi-party Open Software and Services. CoRR Ivan Pashchenko, Riccardo Scandariato, Antonino Sabetta, Fabio Massacci
2021	J	`jnl`	Security assurance cases - state of the art of an emerging approach. Empir. Softw. Eng. Mazen Mohamad, Jan-Philipp Steghöfer, Riccardo Scandariato
2021	J	`jnl`	SyntIoT: Privacy and security experimentation in consumer-oriented IoT ecosystems. EAI Endorsed Trans. Security Safety Tomasz Kosinski, Riccardo Scandariato, Morten Fjeld
2020	A	`conf`	Automating the early detection of security design flaws. MoDELS Katja Tuma, Laurens Sion, Riccardo Scandariato, Koen Yskout
2020	—	`conf`	Contextualisation of Data Flow Diagrams for Security Analysis. GraMSec Shamal Faily, Riccardo Scandariato, Adam Shostack, Laurens Sion, Duncan Ki-Aries
2020	J	`jnl`	Contextualisation of Data Flow Diagrams for security analysis. CoRR Shamal Faily, Riccardo Scandariato, Adam Shostack, Laurens Sion, Duncan Ki-Aries
2020	J	`jnl`	Cross-project Classification of Security-related Requirements. CoRR Mazen Mohamad, Jan-Philipp Steghöfer, Riccardo Scandariato
2020	Misc	`conf`	JavaScript Malware Detection Using Locality Sensitive Hashing. SEC Stefan Carl Peiser, Ludwig Friborg, Riccardo Scandariato
2020	—	`conf`	Perception and Acceptance of an Autonomous Refactoring Bot. ICAART (1) Marvin Wyrich, Regina Hebig, Stefan Wagner, Riccardo Scandariato
2020	J	`jnl`	Perception and Acceptance of an Autonomous Refactoring Bot. CoRR Marvin Wyrich, Regina Hebig, Stefan Wagner, Riccardo Scandariato
2020	—	`conf`	REMIND: A Framework for the Resilient Design of Automotive Systems. SecDev Thomas Rosenstatter, Kim Strandberg, Rodi Jolak, Riccardo Scandariato, Tomas Olovsson
2020	—	`conf`	Secure Data-Flow Compliance Checks between Models and Code based on Automated Mappings. SE Sven Peldszus, Katja Tuma, Daniel Strüber, Jan Jürjens, Riccardo Scandariato
2020	J	`jnl`	Security Assurance Cases - State of the Art of an Emerging Approach. CoRR Mazen Mohamad, Jan-Philipp Steghöfer, Riccardo Scandariato
2020	J	`jnl`	Security Assurance Cases for Road Vehicles: an Industry Perspective. CoRR Mazen Mohamad, Alexander Åström, Örjan Askerdal, Jörgen Borg, Riccardo Scandariato
2020	B	`conf`	Security assurance cases for road vehicles: an industry perspective. ARES Mazen Mohamad, Alexander Åström, Örjan Askerdal, Jörgen Borg, Riccardo Scandariato
2019	—	`conf`	Current and future bots in software development. BotSE@ICSE Linda Erlenhov, Francisco Gomes de Oliveira Neto, Riccardo Scandariato, Philipp Leitner
2019	J	`jnl`	Finding Security Threats That Matter: An Industrial Case Study. CoRR Katja Tuma, Christian Sandberg, Urban Thorsson, Mathias Widman, Riccardo Scandariato
2019	A	`conf`	Flaws in Flows: Unveiling Design Flaws via Information Flow Analysis. ICSA Katja Tuma, Riccardo Scandariato, Musard Balliu
2019	J	`jnl`	Inspection Guidelines to Identify Security Design Flaws. CoRR Katja Tuma, Danial Hosseini, Kyriakos Malamas, Riccardo Scandariato
2019	—	`conf`	Inspection guidelines to identify security design flaws. ECSA (Companion) Katja Tuma, Danial Hosseini, Kyriakos Malamas, Riccardo Scandariato
2019	—	`ed.`	Proceedings of the 13th European Conference on Software Architecture, ECSA 2019, Paris, France, September 9-13, 2019, Companion Proceedings (Proceedings Volume 2), ECSA (Companion) Laurence Duchien, Anne Koziolek, Raffaela Mirandola, Elena Maria Navarro Martínez, Clément Quinton, Riccardo Scandariato, Patrizia Scandurra, Catia Trubiani, Danny Weyns
2019	A	`conf`	Secure Data-Flow Compliance Checks between Models and Code Based on Automated Mappings. MoDELS Sven Peldszus, Katja Tuma, Daniel Strüber, Jan Jürjens, Riccardo Scandariato
2019	—	`conf`	Towards Automated Security Design Flaw Detection. ASE Workshops Laurens Sion, Katja Tuma, Riccardo Scandariato, Koen Yskout, Wouter Joosen
2018	—	`conf`	A Lingua Franca for Security by Design. SecDev Alexander van Den Berghe, Koen Yskout, Riccardo Scandariato, Wouter Joosen
2018	C	`conf`	Back to the Drawing Board - Bringing Security Constraints in an Architecture-centric Software Development Process. ICISSP Stefanie Jasser, Katja Tuma, Riccardo Scandariato, Matthias Riebisch
2018	—	`conf`	Generative secure design, defined. ICSE (NIER) Riccardo Scandariato, Jennifer Horkoff, Robert Feldt
2018	—	`conf`	Privacy Compliance Via Model Transformations. EuroS&P Workshops Thibaud Antignac, Riccardo Scandariato, Gerardo Schneider
2018	J	`jnl`	Threat analysis of software systems: A systematic literature review. J. Syst. Softw. Katja Tuma, Gül Çalikli, Riccardo Scandariato
2018	B	`conf`	Two Architectural Threat Analysis Techniques Compared. ECSA Katja Tuma, Riccardo Scandariato
2017	—	`conf`	A Model for Provably Secure Software Design. FormaliSE@ICSE Alexander van Den Berghe, Koen Yskout, Riccardo Scandariato, Wouter Joosen
2017	—	`conf`	A Modular Meta-model for Security Solutions. Programming Laurens Sion, Koen Yskout, Riccardo Scandariato, Wouter Joosen
2017	J	`jnl`	Design notations for secure software: a systematic literature review. Softw. Syst. Model. Alexander van Den Berghe, Riccardo Scandariato, Koen Yskout, Wouter Joosen
2017	J	`jnl`	The Effect of Dimensionality Reduction on Software Vulnerability Prediction Models. IEEE Trans. Reliab. Jeffrey Stuckman, James Walden, Riccardo Scandariato
2017	—	`conf`	Theta Architecture: Preserving the Quality of Analytics in Data-Driven Systems. ADBIS (Short Papers and Workshops) Vasileios Theodorou, Ilias Gerostathopoulos, Sasan Amini, Riccardo Scandariato, Christian Prehofer, Miroslaw Staron
2017	—	`conf`	Towards Security Threats that Matter. CyberICPS/SECPRE@ESORICS Katja Tuma, Riccardo Scandariato, Mathias Widman, Christian Sandberg
2017	A	`conf`	Traceability Metrics as Early Predictors of Software Defects? ICSA Bashar Nassar, Riccardo Scandariato
2016	—	`conf`	A Privacy-Aware Conceptual Model for Handling Personal Data. ISoLA (1) Thibaud Antignac, Riccardo Scandariato, Gerardo Schneider
2016	B	`conf`	Data veracity in intelligent transportation systems: The slippery road warning scenario. Intelligent Vehicles Symposium Miroslaw Staron, Riccardo Scandariato
2016	A	`conf`	Is Newer Always Better?: The Case of Vulnerability Prediction Models. ESEM Aram Hovsepyan, Riccardo Scandariato, Wouter Joosen
2016	A	`conf`	Static Analysis and Penetration Testing from the Perspective of Maintenance Teams. ESEM Mariano Ceccato, Riccardo Scandariato
2016	—	`conf`	Traceability Data in Early Development Phases as an Enabler for Decision Support. XP Workshops Bashar Nassar, Ali Shahrokni, Riccardo Scandariato
2015	J	`jnl`	A descriptive study of Microsoft's threat modeling technique. Requir. Eng. Riccardo Scandariato, Kim Wuyts, Wouter Joosen
2015	—	`conf`	Do Security Patterns Really Help Designers? ICSE (1) Koen Yskout, Riccardo Scandariato, Wouter Joosen
2015	—	`conf`	MASC: Modelling Architectural Security Concerns. MiSE@ICSE Laurens Sion, Koen Yskout, Alexander van Den Berghe, Riccardo Scandariato, Wouter Joosen
2015	A	`conf`	SoSPa: A system of Security design Patterns for systematically engineering secure systems. MoDELS Phu Hong Nguyen, Koen Yskout, Thomas Heyman, Jacques Klein, Riccardo Scandariato, Yves Le Traon
2014	J	`jnl`	Change patterns - Co-evolving requirements and architecture. Softw. Syst. Model. Koen Yskout, Riccardo Scandariato, Wouter Joosen
2014	J	`jnl`	Design Churn as Predictor of Vulnerabilities? Int. J. Secur. Softw. Eng. Aram Hovsepyan, Riccardo Scandariato, Maximilian Steff, Wouter Joosen
2014	—	`ch.`	Empirical Assessment of Security Requirements and Architecture: Lessons Learned. Engineering Secure Future Internet Services and Systems Riccardo Scandariato, Federica Paci, Le Minh Sang Tran, Katsiaryna Labunets, Koen Yskout, Fabio Massacci, Wouter Joosen
2014	J	`jnl`	Empirical evaluation of a privacy-focused threat modeling methodology. J. Syst. Softw. Kim Wuyts, Riccardo Scandariato, Wouter Joosen
2014	J	`jnl`	Evolution of Security Engineering Artifacts: A State of the Art Survey. Int. J. Secur. Softw. Eng. Michael Felderer, Basel Katt, Philipp Kalb, Jan Jürjens, Martín Ochoa, Federica Paci, Le Minh Sang Tran, Thein Than Tun, Koen Yskout, Riccardo Scandariato, Frank Piessens, Dries Vanoverberghe, Elizabeta Fourneret, Matthias Gander, Bjørnar Solhaug, Ruth Breu
2014	A	`conf`	Predicting Vulnerable Components: Software Metrics vs Text Mining. ISSRE James Walden, Jeff Stuckman, Riccardo Scandariato
2014	J	`jnl`	Predicting Vulnerable Software Components via Text Mining. IEEE Trans. Software Eng. Riccardo Scandariato, James Walden, Aram Hovsepyan, Wouter Joosen
2013	—	`ed.`	Engineering Secure Software and Systems - 5th International Symposium, ESSoS 2013, Paris, France, February 27 - March 1, 2013. Proceedings ESSoS Jan Jürjens, Benjamin Livshits, Riccardo Scandariato
2013	J	`jnl`	Least privilege analysis in software architectures. Softw. Syst. Model. Koen Buyens, Riccardo Scandariato, Wouter Joosen
2013	A	`conf`	Static analysis versus penetration testing: A controlled experiment. ISSRE Riccardo Scandariato, James Walden, Wouter Joosen
2012	A*	`conf`	Does organizing security patterns focus architectural choices? ICSE Koen Yskout, Riccardo Scandariato, Wouter Joosen
2012	—	`ed.`	Engineering Secure Software and Systems - 4th International Symposium, ESSoS 2012, Eindhoven, The Netherlands, February, 16-17, 2012. Proceedings ESSoS Gilles Barthe, Benjamin Livshits, Riccardo Scandariato
2012	—	`ed.`	Eternal Systems - First International Workshop, EternalS@FET 2011, Budapest, Hungary, May 3, 2011, Revised Selected Papers EternalS@FET Alessandro Moschitti, Riccardo Scandariato
2012	J	`jnl`	Extraction of an Architectural Model for Least Privilege Analysis. Int. J. Secur. Softw. Eng. Bernard Spitz, Riccardo Scandariato, Wouter Joosen
2012	—	`conf`	Reusable Formal Models for Secure Software Architectures. WICSA/ECSA Thomas Heyman, Riccardo Scandariato, Wouter Joosen
2011	J	`jnl`	A privacy threat analysis framework: supporting the elicitation and fulfillment of privacy requirements. Requir. Eng. Mina Deng, Kim Wuyts, Riccardo Scandariato, Bart Preneel, Wouter Joosen
2011	—	`conf`	Composition of least privilege analysis results in software architectures (position paper). SESS@ICSE Koen Buyens, Riccardo Scandariato, Wouter Joosen
2011	J	`jnl`	Integrating Patient Consent in e-Health Access Control. Int. J. Secur. Softw. Eng. Kim Wuyts, Riccardo Scandariato, Griet Verhenneman, Wouter Joosen
2011	A	`conf`	Preserving Aspects via Automation: A Maintainability Study. ESEM Aram Hovsepyan, Riccardo Scandariato, Stefan Van Baelen, Wouter Joosen, Serge Demeyer
2011	—	`conf`	Requirements-Driven Runtime Reconfiguration for Security. EternalS@FET Koen Yskout, Olivier-Nathanael Ben David, Riccardo Scandariato, Benoit Baudry
2011	—	`conf`	The Security Twin Peaks. ESSoS Thomas Heyman, Koen Yskout, Riccardo Scandariato, Holger Schmidt, Yijun Yu
2010	B	`conf`	Automated Detection of Least Privilege Violations in Software Architectures. ECSA Riccardo Scandariato, Koen Buyens, Wouter Joosen
2010	—	`conf`	From aspect-oriented models to aspect-oriented code?: the maintenance perspective. AOSD Aram Hovsepyan, Riccardo Scandariato, Stefan Van Baelen, Yolande Berbers, Wouter Joosen
2010	—	`conf`	SecureChange: Security Engineering for Lifelong Evolvable Systems. ISoLA (2) Riccardo Scandariato, Fabio Massacci
2010	B	`conf`	Security in Context: Analysis and Refinement of Software Architectures. COMPSAC Thomas Heyman, Riccardo Scandariato, Wouter Joosen
2009	B	`conf`	Linking Privacy Solutions to Developer Goals. ARES Kim Wuyts, Riccardo Scandariato, Bart De Decker, Wouter Joosen
2009	A	`conf`	Measuring the interplay of security principles in software architectures. ESEM Koen Buyens, Riccardo Scandariato, Wouter Joosen
2009	J	`jnl`	On the secure software development process: CLASP, SDL and Touchpoints compared. Inf. Softw. Technol. Bart De Win, Riccardo Scandariato, Koen Buyens, Johan Grégoire, Wouter Joosen
2009	B	`conf`	Risk-Driven Architectural Decomposition. ARES Thomas Heyman, Riccardo Scandariato, Wouter Joosen
2008	B	`conf`	Application-Oriented Trust in Distributed Computing. ARES Riccardo Scandariato, Yoram Ofek, Paolo Falcarin, Mario Baldi
2008	B	`conf`	Hardening XDS-Based Architectures. ARES Kim Wuyts, Riccardo Scandariato, Geert Claeys, Wouter Joosen
2008	—	`conf`	Identity in federated electronic healthcare. Wireless Days Mina Deng, Riccardo Scandariato, Danny De Cock, Bart Preneel, Wouter Joosen
2008	—	`ed.`	Proceedings of the Workshop on Middleware Security, Leuven, Belgium, December 2, 2008 Middleware Security Riccardo Scandariato, Giovanni Russello
2008	B	`conf`	Transforming Security Requirements into Architecture. ARES Koen Yskout, Riccardo Scandariato, Bart De Win, Wouter Joosen
2008	—	`conf`	Using Multi-Level Security Annotations to Improve Software Assurance. HASE Eryk Kylikowski, Riccardo Scandariato, Wouter Joosen
2008	B	`conf`	Using Security Patterns to Combine Security Metrics. ARES Thomas Heyman, Riccardo Scandariato, Christophe Huygens, Wouter Joosen
2007	—	`conf`	An Analysis of the Security Patterns Landscape. SESS@ICSE Thomas Heyman, Koen Yskout, Riccardo Scandariato, Wouter Joosen
2007	—	`conf`	On the Secure Software Development Process: CLASP and SDL Compared. SESS@ICSE Johan Grégoire, Koen Buyens, Bart De Win, Riccardo Scandariato, Wouter Joosen
2007	—	`conf`	Process Activities Supporting Security Principles. COMPSAC (2) Koen Buyens, Riccardo Scandariato, Wouter Joosen
2006	—	`conf`	Remote Trust with Aspect-Oriented Programming. AINA (1) Paolo Falcarin, Riccardo Scandariato, Mario Baldi
2006	—	`conf`	Towards a measuring framework for security properties of software. QoP Riccardo Scandariato, Bart De Win, Wouter Joosen
2004	—	`—`	Plicy-based solutions for distributed systems. Riccardo Scandariato
2004	B	`conf`	The Design and Evaluation of a Defense System for Internet Worms. SRDS Riccardo Scandariato, John C. Knight
2002	—	`conf`	LMAP: a protocol to automate the setup of logical networks. ICON Riccardo Scandariato, Fulvio Risso, Patricia Lago