21 citations · 38 across the 14 of their papers we have counts for
18 papers
GitHub Engagement Signals for CVE Prioritization: The GitHub Popularity Metric (GPM)
Jafar Akhoundali, Kristian Rietveld, Olga Gadyatskaya
Attackers can compromise multiple systems with a single vulnerability, while defenders need to fix all security weaknesses in their systems. This asymmetry puts defenders at a disa…
A Study of Cursorrules Files in GitHub Open Source Projects
Shuang Sun, Jafar Akhoundali, Arina Kudriavtseva +2
Prompts are the primary mechanism for communicating with AI agents, and they directly influence the quality and reliability of AI-generated code. As AI-assisted programming becomes…
Privacy in ERP Systems: Behavioral Models of Developers and Consultants
Alicia Pang, Katsiaryna Labunets, Olga Gadyatskaya
Applications like Enterprise Resource Planning (ERP) systems have become an indispensable part of the corporate digital infrastructure. These systems store sensitive data about cus…
Empirical assessment of the perception of graphical threat model acceptability
Nathan D. Schiele, Olga Gadyatskaya
Threat modeling (TM) is an important aspect of risk analysis and secure software engineering. Graphical threat models are a recommended tool to analyze and communicate threat infor…
Eradicating the Unseen: Detecting, Exploiting, and Remediating a Path Traversal Vulnerability across GitHub
Jafar Akhoundali, Hamidreza Hamidi, Kristian Rietveld +1
Vulnerabilities in open-source software can cause cascading effects in the modern digital ecosystem. It is especially worrying if these vulnerabilities repeat across many projects,…
A limited technical background is sufficient for attack-defense tree acceptability
Nathan Daniel Schiele, Olga Gadyatskaya
Attack-defense trees (ADTs) are a prominent graphical threat modeling method that is highly recommended for analyzing and communicating security-related information. Despite this,…
Attack Tree Distance: a practical examination of tree difference measurement within cyber security
Nathan D. Schiele, Olga Gadyatskaya
Attack trees are a popular threat modeling method. In practice, there is often a need to compare attack tree models produced by human experts, based on both the structure of the tr…
FedFixer: Mitigating Heterogeneous Label Noise in Federated Learning
Xinyuan Ji, Zhaowei Zhu, Wei Xi +4
Federated Learning (FL) heavily depends on label quality for its performance. However, the label distribution among individual clients is always both noisy and heterogeneous. The h…
Automated generation of attack trees with optimal shape and labelling
Olga Gadyatskaya, Sjouke Mauw, Rolando Trujillo-Rasuac +1
This article addresses the problem of automatically generating attack trees that soundly and clearly describe the ways the system can be attacked. Soundness means that the attacks…
Meta Generative Flow Networks with Personalization for Task-Specific Adaptation
Xinyuan Ji, Xu Zhang, Wei Xi +3
Multi-task reinforcement learning and meta-reinforcement learning have been developed to quickly adapt to new tasks, but they tend to focus on tasks with higher rewards and more fr…
Secure Software Development Methodologies: A Multivocal Literature Review
Arina Kudriavtseva, Olga Gadyatskaya
In recent years, the number of cyber attacks has grown rapidly. An effective way to reduce the attack surface and protect software is adoption of methodologies that apply security…
Beyond the Surface: Investigating Malicious CVE Proof of Concept Exploits on GitHub
Soufian El Yadmani, Robin The, Olga Gadyatskaya
Exploit proof-of-concepts (PoCs) for known vulnerabilities are widely shared in the security community. They help security analysts to learn from each other and they facilitate sec…
A Novel Approach for Attack Tree to Attack Graph Transformation: Extended Version
Nathan Daniel Schiele, Olga Gadyatskaya
Attack trees and attack graphs are both common graphical threat models used by organizations to better understand possible cybersecurity threats. These models have been primarily s…
Dissecting Android Cryptocurrency Miners
Stanislav Dashevskyi, Yury Zhauniarovich, Olga Gadyatskaya +2
Cryptojacking applications pose a serious threat to mobile devices. Due to the extensive computations, they deplete the battery fast and can even damage the device. In this work we…
Attribute Evaluation on Attack Trees with Incomplete Information
Ahto Buldas, Olga Gadyatskaya, Aleksandr Lenin +2
Attack trees are considered a useful tool for security modelling because they support qualitative as well as quantitative analysis. The quantitative approach is based on values ass…
Fine-grained Code Coverage Measurement in Automated Black-box Android Testing
Aleksandr Pilgun, Olga Gadyatskaya, Stanislav Dashevskyi +2
Today, there are millions of third-party Android applications. Some of these applications are buggy or even malicious. To identify such applications, novel frameworks for automated…
How to Generate Security Cameras: Towards Defence Generation for Socio-Technical Systems
Olga Gadyatskaya
Recently security researchers have started to look into automated generation of attack trees from socio-technical system models. The obvious next step in this trend of automated ri…
MAP-REDUCE Runtime Enforcement of Information Flow Policies
Minh Ngo, Fabio Massacci, Olga Gadyatskaya
We propose a flexible framework that can be easily customized to enforce a large variety of information flow properties. Our framework combines the ideas of secure multi-execution…