201 citations · 468 across the 17 of their papers we have counts for
5 papers · 1 filter
The Effect of Security Education and Expertise on Security Assessments: the Case of Software Vulnerabilities
Luca Allodi, Marco Cremonini, Fabio Massacci +1
In spite of the growing importance of software security and the industry demand for more cyber security expertise in the workforce, the effect of security education and experience…
A Bug Bounty Perspective on the Disclosure of Web Vulnerabilities
Jukka Ruohonen, Luca Allodi
Bug bounties have become increasingly popular in recent years. This paper discusses bug bounties by framing these theoretically against so-called platform economy. Empirically the…
Identifying Relevant Information Cues for Vulnerability Assessment Using CVSS
Luca Allodi, Sebastian Banescu, Henning Femmer +1
The assessment of new vulnerabilities is an activity that accounts for information from several data sources and produces a `severity' score for the vulnerability. The Common Vulne…
Attack Potential in Impact and Complexity
Luca Allodi, Fabio Massacci
Vulnerability exploitation is reportedly one of the main attack vectors against computer systems. Yet, most vulnerabilities remain unexploited by attackers. It is therefore of cent…
Towards Realistic Threat Modeling: Attack Commodification, Irrelevant Vulnerabilities, and Unrealistic Assumptions
Luca Allodi, Sandro Etalle
Current threat models typically consider all possible ways an attacker can penetrate a system and assign probabilities to each path according to some metric (e.g. time-to-compromis…