100 citations · 355 across the 15 of their papers we have counts for
16 papers
Evaluating and Improving the Robustness of Security Attack Detectors Generated by LLMs
Samuele Pasini, Jinhan Kim, Tommaso Aiello +3
Large Language Models (LLMs) are increasingly used in software development to generate functions, such as attack detectors, that implement security requirements. A key challenge is…
Journey to the Center of Software Supply Chain Attacks
Piergiorgio Ladisa, Serena Elisa Ponta, Antonino Sabetta +2
This work discusses open-source software supply chain attacks and proposes a general taxonomy describing how attackers conduct them. We then provide a list of safeguards to mitigat…
The Used, the Bloated, and the Vulnerable: Reducing the Attack Surface of an Industrial Application
Serena Elisa Ponta, Wolfram Fischer, Henrik Plate +1
Software reuse may result in software bloat when significant portions of application dependencies are effectively unused. Several tools exist to remove unused (byte)code from an ap…
Detecting Security Fixes in Open-Source Repositories using Static Code Analyzers
Therese Fehrer, Rocío Cabrera Lozoya, Antonino Sabetta +2
The sources of reliable, code-level information about vulnerabilities that affect open-source software (OSS) are scarce, which hinders a broad adoption of advanced tools that provi…
Secure Software Development in the Era of Fluid Multi-party Open Software and Services
Ivan Pashchenko, Riccardo Scandariato, Antonino Sabetta +1
Pushed by market forces, software development has become fast-paced. As a consequence, modern development projects are assembled from 3rd-party components. Security & privacy assur…
Automated Mapping of Vulnerability Advisories onto their Fix Commits in Open Source Repositories
Daan Hommersom, Antonino Sabetta, Bonaventura Coppola +2
The lack of comprehensive sources of accurate vulnerability data represents a critical obstacle to studying and understanding software vulnerabilities (and their corrections). In t…