4 citations · 7 across the 4 of their papers we have counts for
5 papers
Towards the Detection of Malicious Java Packages
Piergiorgio Ladisa, Henrik Plate, Matias Martinez +2
Open-source software supply chain attacks aim at infecting downstream users by poisoning open-source packages. The common way of consuming such artifacts is through package reposit…
The Used, the Bloated, and the Vulnerable: Reducing the Attack Surface of an Industrial Application
Serena Elisa Ponta, Wolfram Fischer, Henrik Plate +1
Software reuse may result in software bloat when significant portions of application dependencies are effectively unused. Several tools exist to remove unused (byte)code from an ap…
Code-based Vulnerability Detection in Node.js Applications: How far are we?
Bodin Chinthanet, Serena Elisa Ponta, Henrik Plate +4
With one of the largest available collection of reusable packages, the JavaScript runtime environment Node.js is one of the most popular programming application. With recent work s…
Vulnerable Open Source Dependencies: Counting Those That Matter
Ivan Pashchenko, Henrik Plate, Serena Elisa Ponta +2
BACKGROUND: Vulnerable dependencies are a known problem in today's open-source software ecosystems because OSS libraries are highly interconnected and developers do not always upda…
Detection of Configuration Vulnerabilities in Distributed (Web) Environments
Matteo Maria Casalino, Michele Mangili, Henrik Plate +1
Many tools and libraries are readily available to build and operate distributed Web applications. While the setup of operational environments is comparatively easy, practice shows…