activity
20172021
most citedIdentifying Relevant Information Cues for Vulnerability Assessment Using CVSS

30 citations · 81 across the 8 of their papers we have counts for

collaborators

8 papers

cs.SE2021★ 5 cited

Using Process Models to understand Security Standards

Fabiola Moyón, Daniel Méndez, Kristian Beckers +1

Many industrial software development processes today have to comply with security standards such as the IEC~62443-4-1. These standards, written in natural language, are ambiguous a…

cs.SE2021★ 27 cited

How to Integrate Security Compliance Requirements with Agile Software Engineering at Scale?

Fabiola Moyón, Daniel Méndez Fernández, Kristian Beckers +1

Integrating security into agile software development is an open issue for research and practice. Especially in strongly regulated industries, complexity increases not only when sca…

cs.SE2021★ 15 cited

Integration of Security Standards in DevOps Pipelines: An Industry Case Study

Fabiola Moyón Constante, Rafael Soares, Maria Pinto-Albuquerque +2

In the last decade, companies adopted DevOps as a fast path to deliver software products according to customer expectations, with well aligned teams and in continuous cycles. As a…

cs.SE2021

When Interactive Graphic Storytelling Fails

James Barela, Tiago Espinha Gasiba, Santiago Reinhard Suppan +2

Many people are unaware of the digital dangers that lie around each cyber-corner. Teaching people how to recognize dangerous situations is crucial, especially for those who work on…

cs.SE2021

On the Requirements for Serious Games geared towards Software Developers in the Industry

Tiago Espinha Gasiba, Kristian Beckers, Santiago Suppan +1

Teaching industry staff on cybersecurity issues is a fundamental activity that must be undertaken in order to guarantee the delivery of successful and robust products to market. Mu…

cs.CR2018★ 30 cited

Identifying Relevant Information Cues for Vulnerability Assessment Using CVSS

Luca Allodi, Sebastian Banescu, Henning Femmer +1

The assessment of new vulnerabilities is an activity that accounts for information from several data sources and produces a `severity' score for the vulnerability. The Common Vulne…

cs.SE2017★ 4 cited

An Exploratory Survey of Hybrid Testing Techniques Involving Symbolic Execution and Fuzzing

Saahil Ognawala, Ana Petrovska, Kristian Beckers

Recent efforts in practical symbolic execution have successfully mitigated the path-explosion problem to some extent with search-based heuristics and compositional approaches. Simi…

cs.AI2017

ACCBench: A Framework for Comparing Causality Algorithms

Simon Rehwald, Amjad Ibrahim, Kristian Beckers +1

Modern socio-technical systems are increasingly complex. A fundamental problem is that the borders of such systems are often not well-defined a-priori, which among other problems c…