4 papers
How hard can it be? Quantifying MITRE attack campaigns with attack trees and cATM logic
Stefano M. Nicoletti, Milan Lopuhaä-Zwakenberg, Mariëlle Stoelinga +2
The landscape of cyber threats grows more complex by the day. Advanced Persistent Threats carry out attack campaigns - e.g. operations Dream Job, Wocao, and WannaCry - against whic…
Today's Cat Is Tomorrow's Dog: Accounting for Time-Based Changes in the Labels of ML Vulnerability Detection Approaches
Ranindya Paramitha, Yuan Feng, Fabio Massacci
Vulnerability datasets used for ML testing implicitly contain retrospective information. When tested on the field, one can only use the labels available at the time of training and…
Using ML filters to help automated vulnerability repairs: when it helps and when it doesn't
Maria Camporese, Fabio Massacci
[Context:] The acceptance of candidate patches in automated program repair has been typically based on testing oracles. Testing requires typically a costly process of building the…
A Systematic Literature Review on Automated Exploit and Security Test Generation
Quang-Cuong Bui, Emanuele Iannone, Maria Camporese +7
The exploit or the Proof of Concept of the vulnerability plays an important role in developing superior vulnerability repair techniques, as it can be used as an oracle to verify th…