25 citations · 44 across the 11 of their papers we have counts for
12 papers
Emerging Challenges in Threat Modeling for GenAI-Augmented Systems: A View from the Trenches
Nicolás E. Díaz Ferreyra, Manish Mahesh Kumar, Nohemí Villarreal +3
Threat modeling remains a central task in secure software engineering, as it enables the identification of security issues from system architectures. As Generative Artificial Intel…
Reading Between the Code Lines: On the Use of Self-Admitted Technical Debt for Security Analysis
Nicolás E. Díaz Ferreyra, Moritz Mock, Max Kretschmann +4
Static Analysis Tools (SATs) are central to security engineering activities, as they enable early identification of code weaknesses without requiring execution. However, their effe…
MADE-WIC: Multiple Annotated Datasets for Exploring Weaknesses In Code
Moritz Mock, Jorge Melegati, Max Kretschmann +2
In this paper, we present MADE-WIC, a large dataset of functions and their comments with multiple annotations for technical debt and code weaknesses leveraging different state-of-t…
Prompting Techniques for Secure Code Generation: A Systematic Investigation
Catherine Tony, Nicolás E. Díaz Ferreyra, Markus Mutas +2
Large Language Models (LLMs) are gaining momentum in software development with prompt-driven programming enabling developers to create code from natural language (NL) instructions.…
What Can Self-Admitted Technical Debt Tell Us About Security? A Mixed-Methods Study
Nicolás E. Díaz Ferreyra, Mojtaba Shahin, Mansooreh Zahedi +2
Self-Admitted Technical Debt (SATD) encompasses a wide array of sub-optimal design and implementation choices reported in software artefacts (e.g., code comments and commit message…
How Dataflow Diagrams Impact Software Security Analysis: an Empirical Experiment
Simon Schneider, Nicolás E. Díaz Ferreyra, Pierre-Jean Quéval +3
Models of software systems are used throughout the software development lifecycle. Dataflow diagrams (DFDs), in particular, are well-established resources for security analysis. Ma…
LLMSecEval: A Dataset of Natural Language Prompts for Security Evaluations
Catherine Tony, Markus Mutas, Nicolás E. Díaz Ferreyra +1
Large Language Models (LLMs) like Codex are powerful tools for performing code completion and code generation tasks as they are trained on billions of lines of code from publicly a…
Regret, Delete, (Do Not) Repeat: An Analysis of Self-Cleaning Practices on Twitter After the Outbreak of the COVID-19 Pandemic
Nicolás E. Díaz Ferreyra, Gautam Kishore Shahi, Catherine Tony +2
During the outbreak of the COVID-19 pandemic, many people shared their symptoms across Online Social Networks (OSNs) like Twitter, hoping for others' advice or moral support. Prior…
Developers Need Protection, Too: Perspectives and Research Challenges for Privacy in Social Coding Platforms
Nicolás E. Díaz Ferreyra, Abdessamad Imine, Melina Vidoni +1
Social Coding Platforms (SCPs) like GitHub have become central to modern software engineering thanks to their collaborative and version-control features. Like in mainstream Online…
Cybersecurity Discussions in Stack Overflow: A Developer-Centred Analysis of Engagement and Self-Disclosure Behaviour
Nicolás E. Díaz Ferreyra, Melina Vidoni, Maritta Heisel +1
Stack Overflow (SO) is a popular platform among developers seeking advice on various software-related topics, including privacy and security. As for many knowledge-sharing websites…
SoK: Security of Microservice Applications: A Practitioners' Perspective on Challenges and Best Practices
Priyanka Billawa, Anusha Bambhore Tukaram, Nicolás E. Díaz Ferreyra +3
Cloud-based application deployment is becoming increasingly popular among businesses, thanks to the emergence of microservices. However, securing such architectures is a challengin…
Community Detection for Access-Control Decisions: Analysing the Role of Homophily and Information Diffusion in Online Social Networks
Nicolas E. Diaz Ferreyra, Tobias Hecking, Esma Aïmeur +2
Access-Control Lists (ACLs) (a.k.a. friend lists) are one of the most important privacy features of Online Social Networks (OSNs) as they allow users to restrict the audience of th…