100 citations · 355 across the 15 of their papers we have counts for
6 papers · 1 filter
Journey to the Center of Software Supply Chain Attacks
Piergiorgio Ladisa, Serena Elisa Ponta, Antonino Sabetta +2
This work discusses open-source software supply chain attacks and proposes a general taxonomy describing how attackers conduct them. We then provide a list of safeguards to mitigat…
Beyond Metadata: Code-centric and Usage-based Analysis of Known Vulnerabilities in Open-source Software
Serena E. Ponta, Henrik Plate, Antonino Sabetta
The use of open-source software (OSS) is ever-increasing, and so is the number of open-source vulnerabilities being discovered and publicly disclosed. The gains obtained from the r…
A Practical Approach to the Automatic Classification of Security-Relevant Commits
Antonino Sabetta, Michele Bezzi
The lack of reliable sources of detailed information on the vulnerabilities of open-source software (OSS) components is a major obstacle to maintaining a secure software supply cha…
TestREx: a Framework for Repeatable Exploits
Stanislav Dashevskyi, Daniel Ricardo dos Santos, Fabio Massacci +1
Web applications are the target of many well known exploits and also a fertile ground for the discovery of security vulnerabilities. Yet, the success of an exploit depends both on…
Impact assessment for vulnerabilities in open-source software libraries
Henrik Plate, Serena Elisa Ponta, Antonino Sabetta
Software applications integrate more and more open-source software (OSS) to benefit from code reuse. As a drawback, each vulnerability discovered in bundled OSS potentially affects…
Machine-Readable Privacy Certificates for Services
Marco Anisetti, Claudio A. Ardagna, Michele Bezzi +2
Privacy-aware processing of personal data on the web of services requires managing a number of issues arising both from the technical and the legal domain. Several approaches have…