7 citations · 15 across the 9 of their papers we have counts for
10 papers
The Ultimate Configuration Management Tool? Lessons from a Mixed Methods Study of Ansible's Challenges
Carolina Carreira, Nuno Saavedra, Alexandra Mendes +1
Infrastructure as Code (IaC) tools have transformed the way IT infrastructure is automated and managed, but their growing adoption has also exposed numerous challenges for practiti…
Are Users More Willing to Use Formally Verified Password Managers?
Carolina Carreira, João F. Ferreira, Alexandra Mendes +1
Formal verification has recently been increasingly used to prove the correctness and security of many applications. It is attractive because it can prove the absence of errors with…
A Systematic Review of Security Communication Strategies: Guidelines and Open Challenges
Carolina Carreira, Alexandra Mendes, João F. Ferreira +1
Cybersecurity incidents such as data breaches have become increasingly common, affecting millions of users and organizations worldwide. The complexity of cybersecurity threats chal…
InfraFix: Technology-Agnostic Repair of Infrastructure as Code
Nuno Saavedra, João F. Ferreira, Alexandra Mendes
Infrastructure as Code (IaC) enables scalable and automated IT infrastructure management but is prone to errors that can lead to security vulnerabilities, outages, and data loss. W…
Contract Usage and Evolution in Android Mobile Applications
David R. Ferreira, Alexandra Mendes, João F. Ferreira
Formal contracts and assertions are effective methods to enhance software quality by enforcing preconditions, postconditions, and invariants. Previous research has demonstrated the…
Leveraging Large Language Models to Boost Dafny's Developers Productivity
Álvaro Silva, Alexandra Mendes, João F. Ferreira
This research idea paper proposes leveraging Large Language Models (LLMs) to enhance the productivity of Dafny developers. Although the use of verification-aware languages, such as…
Polyglot Code Smell Detection for Infrastructure as Code with GLITCH
Nuno Saavedra, João Gonçalves, Miguel Henriques +2
This paper presents GLITCH, a new technology-agnostic framework that enables automated polyglot code smell detection for Infrastructure as Code scripts. GLITCH uses an intermediate…
Exploring Usable Security to Improve the Impact of Formal Verification: A Research Agenda
Carolina Carreira, João F. Ferreira, Alexandra Mendes +1
As software becomes more complex and assumes an even greater role in our lives, formal verification is set to become the gold standard in securing software systems into the future,…
Skeptic: Automatic, Justified and Privacy-Preserving Password Composition Policy Selection
Saul Johnson, João F. Ferreira, Alexandra Mendes +1
The choice of password composition policy to enforce on a password-protected system represents a critical security decision, and has been shown to significantly affect the vulnerab…
Lost in Disclosure: On The Inference of Password Composition Policies
Saul Johnson, João Ferreira, Alexandra Mendes +1
Large-scale password data breaches are becoming increasingly commonplace, which has enabled researchers to produce a substantial body of password security research utilising real-w…