3 papers
cs.CR2025
GenSIaC: Toward Security-Aware Infrastructure-as-Code Generation with Large Language Models
Yikun Li, Matteo Grella, Daniel Nahmias +5
In recent years, Infrastructure as Code (IaC) has emerged as a critical approach for managing and provisioning IT infrastructure through code and automation. IaC enables organizati…
cs.CR2025
An ontological lens on attack trees: Toward adequacy and interoperability
Ítalo Oliveira, Stefano M. Nicoletti, Gal Engelberg +3
Attack Trees (AT) are a popular formalism for security analysis. They are meant to display an attacker's goal decomposed into attack steps needed to achieve it and compute certain…
cs.AI2024
WATCHDOG: an ontology-aWare risk AssessmenT approaCH via object-oriented DisruptiOn Graphs
Stefano M. Nicoletti, E. Moritz Hahn, Mattia Fumagalli +2
When considering risky events or actions, we must not downplay the role of involved objects: a charged battery in our phone averts the risk of being stranded in the desert after a…