activity
20002025
most citedMy Software has a Vulnerability, should I worry?

201 citations · 381 across the 21 of their papers we have counts for

collaborators

22 papers

cs.CR2025★ 32 cited

Optimisation of cyber insurance coverage with selection of cost effective security controls

Ganbayar Uuganbayar, Artsiom Yautsiukhin, Fabio Martinelli +1

Nowadays, cyber threats are considered among the most dangerous risks by top management of enterprises. One way to deal with these risks is to insure them, but cyber insurance is s…

cs.SI2023

A Graph-based Stratified Sampling Methodology for the Analysis of (Underground) Forums

Giorgio Di Tizio, Gilberto Atondo Siu, Alice Hutchings +1

[Context] Researchers analyze underground forums to study abuse and cybercrime activities. Due to the size of the forums and the domain expertise required to identify criminal disc…

cs.SE2023★ 7 cited

Are Software Updates Useless Against Advanced Persistent Threats?

Fabio Massacci, Giorgio Di Tizio

A dilemma worth Shakespeare's Hamlet is increasingly haunting companies and security researchers: ``to update or not to update, this is the question``. From the perspective of reco…

cs.CR2023★ 1 cited

Building cross-language corpora for human understanding of privacy policies

Francesco Ciclosi, Silvia Vidor, Fabio Massacci

Making sure that users understand privacy policies that impact them is a key challenge for a real GDPR deployment. Research studies are mostly carried in English, but in Europe and…

cs.CR2022★ 9 cited

The Data Protection Officer, an ubiquitous role nobody really knows

Francesco Ciclosi, Fabio Massacci

Among all cybersecurity and privacy workers, the Data Protection Officer (DPO) stands between those auditing a company's compliance and those acting as management advisors. A perso…

cs.SE2022★ 2 cited

On the acceptance by code reviewers of candidate security patches suggested by Automated Program Repair tools

Aurora Papotti, Ranindya Paramitha, Fabio Massacci

Background: Testing and validation of the semantic correctness of patches provided by tools for Automated Program Repairs (APR) has received a lot of attention. Yet, the eventual a…