4 citations · 9 across the 10 of their papers we have counts for
10 papers
Emerging Challenges in Threat Modeling for GenAI-Augmented Systems: A View from the Trenches
Nicolás E. Díaz Ferreyra, Manish Mahesh Kumar, Nohemí Villarreal +3
Threat modeling remains a central task in secure software engineering, as it enables the identification of security issues from system architectures. As Generative Artificial Intel…
In Specs we Trust? Conformance-Analysis of Implementation to Specifications in Node-RED and Associated Security Risks
Simon Schneider, Komal Kashish, Katja Tuma +1
Low-code development frameworks for IoT platforms offer a simple drag-and-drop mechanism to create applications for the billions of existing IoT devices without the need for extens…
A Taxonomy of Functional Security Features and How They Can Be Located
Kevin Hermann, Simon Schneider, Catherine Tony +6
Security must be considered in almost every software system. Unfortunately, selecting and implementing security features remains challenging due to the variety of security threats…
Comparison of Static Analysis Architecture Recovery Tools for Microservice Applications
Simon Schneider, Alexander Bakhtin, Xiaozhou Li +5
Architecture recovery tools help software engineers obtain an overview of the structure of their software systems during all phases of the software development life cycle. This is…
The Good, the Bad, and the (Un)Usable: A Rapid Literature Review on Privacy as Code
Nicolás E. Díaz Ferreyra, Sirine Khelifi, Nalin Arachchilage +1
Privacy and security are central to the design of information systems endowed with sound data protection and cyber resilience capabilities. Still, developers often struggle to inco…
Designing Secure AI-based Systems: a Multi-Vocal Literature Review
Simon Schneider, Ananya Saha, Emanuele Mezzi +2
AI-based systems leverage recent advances in the field of AI/ML by combining traditional software systems with AI components. Applications are increasingly being developed in this…
Prompting Techniques for Secure Code Generation: A Systematic Investigation
Catherine Tony, Nicolás E. Díaz Ferreyra, Markus Mutas +2
Large Language Models (LLMs) are gaining momentum in software development with prompt-driven programming enabling developers to create code from natural language (NL) instructions.…
Comparison of Static Analysis Architecture Recovery Tools for Microservice Applications
Simon Schneider, Alexander Bakhtin, Xiaozhou Li +5
Architecture recovery tools help software engineers obtain an overview of their software systems during all phases of the software development lifecycle. This is especially importa…
CATMA: Conformance Analysis Tool For Microservice Applications
Clinton Cao, Simon Schneider, Nicolás E. Díaz Ferreyra +3
The microservice architecture allows developers to divide the core functionality of their software system into multiple smaller services. However, this architectural style also mak…
How Dataflow Diagrams Impact Software Security Analysis: an Empirical Experiment
Simon Schneider, Nicolás E. Díaz Ferreyra, Pierre-Jean Quéval +3
Models of software systems are used throughout the software development lifecycle. Dataflow diagrams (DFDs), in particular, are well-established resources for security analysis. Ma…