Fabio Massacci

ORCID

Publication Activity (10 Years)

Years Active: 1994-2024
Publications (10 Years): 106

Top Venues

Publications

Aurora Papotti, Fabio Massacci, Katja Tuma
On the Effects of Program Slicing for Vulnerability Detection during Code Inspection: Extended Abstract. ICSE Companion (2024)
Quang-Cuong Bui, Ranindya Paramitha, Duc Ly Vu, Fabio Massacci, Riccardo Scandariato
APR4Vul: an empirical study of automatic program repair techniques on real-world Java vulnerabilities. Empir. Softw. Eng. 29 (1) (2024)
Ranindya Paramitha, Yuan Feng, Fabio Massacci, Carlos E. Budde
Cross-ecosystem categorization: A manual-curation protocol for the categorization of Java Maven libraries along Python PyPI Topics. CoRR (2024)
Emanuele Mezzi, Aurora Papotti, Fabio Massacci, Katja Tuma
Risks of uncertainty propagation in Al-augmented security pipelines. CoRR (2024)
Aurora Papotti, Ranindya Paramitha, Fabio Massacci
On the acceptance by code reviewers of candidate security patches suggested by Automated Program Repair tools. Empir. Softw. Eng. 29 (5) (2024)
Francesco Minna, Fabio Massacci, Katja Tuma
Analyzing and Mitigating (with LLMs) the Security Misconfigurations of Helm Charts from Artifact Hub. CoRR (2024)
Jan H. Klemmer, Stefan Albert Horstmann, Nikhil Patnaik, Cordelia Ludden, Cordell Burton Jr., Carson Powers, Fabio Massacci, Akond Rahman, Daniel Votipka, Heather Richter Lipford, Awais Rashid, Alena Naiakshina, Sascha Fahl
Using AI Assistants in Software Development: A Qualitative Study on Security Practices and Concerns. CoRR (2024)
Antonino Sabetta, Serena Elisa Ponta, Rocío Cabrera Lozoya, Michele Bezzi, Tommaso Sacchetti, Matteo Greco, Gergö Balogh, Péter Hegedüs, Rudolf Ferenc, Ranindya Paramitha, Ivan Pashchenko, Aurora Papotti, Ákos Milánkovich, Fabio Massacci
Known Vulnerabilities of Open Source Projects: Where Are the Fixes? IEEE Secur. Priv. 22 (2) (2024)
Francesco Minna, Agathe Blaise, Fabio Massacci, Katja Tuma
Automated Security Repair for Helm Charts. ICSE Companion (2024)
Fabio Massacci, Aurora Papotti, Ranindya Paramitha
Addressing combinatorial experiments and scarcity of subjects by provably orthogonal and crossover experimental designs. J. Syst. Softw. 211 (2024)
Fabio Massacci
The Holy Grail of Vulnerability Predictions. IEEE Secur. Priv. 22 (1) (2024)
Carlos E. Budde, Anni Karinsalo, Silvia Vidor, Jarno Salonen, Fabio Massacci
Consolidating cybersecurity in Europe: A case study on job profiles assessment. Comput. Secur. 127 (2023)
Katsiaryna Labunets, Fabio Massacci, Federica Paci, Katja Tuma
A new, evidence-based, theory for knowledge reuse in security risk analysis. Empir. Softw. Eng. 28 (4) (2023)
Fabio Massacci, Laurie A. Williams
Software Supply Chain Security [Guest Editors' Introduction]. IEEE Secur. Priv. 21 (6) (2023)
Francesco Minna, Fabio Massacci
SoK: Run-time security for cloud microservices. Are we there yet? Comput. Secur. 127 (2023)
Fabio Massacci, Giorgio Di Tizio
Are Software Updates Useless against Advanced Persistent Threats? Commun. ACM 66 (1) (2023)
Francesco Ciclosi, Fabio Massacci
The Data Protection Officer: A Ubiquitous Role That No One Really Knows. IEEE Secur. Priv. 21 (1) (2023)
Fabio Massacci, Giorgio Di Tizio
Are Software Updates Useless Against Advanced Persistent Threats? CoRR (2023)
Giorgio Di Tizio, Gilberto Atondo Siu, Alice Hutchings, Fabio Massacci
A Graph-based Stratified Sampling Methodology for the Analysis of (Underground) Forums. CoRR (2023)
Francesco Ciclosi, Silvia Vidor, Fabio Massacci
Building cross-language corpora for human understanding of privacy policies. CoRR (2023)
Giorgio Di Tizio, Michele Armellini, Fabio Massacci
Software Updates Strategies: A Quantitative Evaluation Against Advanced Persistent Threats. IEEE Trans. Software Eng. 49 (3) (2023)
Giorgio Di Tizio, Gilberto Atondo Siu, Alice Hutchings, Fabio Massacci
A Graph-Based Stratified Sampling Methodology for the Analysis of (Underground) Forums. IEEE Trans. Inf. Forensics Secur. 18 (2023)
Ranindya Paramitha, Fabio Massacci
Technical leverage analysis in the Python ecosystem. Empir. Softw. Eng. 28 (6) (2023)
Linghui Luo, Felix Pauck, Goran Piskachev, Manuel Benz, Ivan Pashchenko, Martin Mory, Eric Bodden, Ben Hermann, Fabio Massacci
TaintBench: Automatic Real-World Malware Benchmarking of Android Taint Analyses. Software Engineering (2022)
Francesco Ciclosi, Silvia Vidor, Fabio Massacci
Building Cross-language Corpora for Human Understanding of Privacy Policies. CyberSec4Europe (2022)
Francesco Minna, Fabio Massacci, Katja Tuma
Towards a Security Stress-Test for Cloud Configurations. CoRR (2022)
Adam Shostack, Fabio Massacci, Eric Bodden, Antonino Sabetta
25 Years in Application Security: Looking Back, Looking Forward. IEEE Secur. Priv. 20 (1) (2022)
Aurora Papotti, Ranindya Paramitha, Fabio Massacci
On the acceptance by code reviewers of candidate security patches suggested by Automated Program Repair tools. CoRR (2022)
Daniele Friolo, Fabio Massacci, Chan Nam Ngo, Daniele Venturi
Cryptographic and Financial Fairness. IEEE Trans. Inf. Forensics Secur. 17 (2022)
Fabio Massacci, Antonino Sabetta, Jelena Mirkovic, Toby Murray, Hamed Okhravi, Mohammad Mannan, Anderson Rocha, Eric Bodden, Daniel E. Geer
"Free" as in Freedom to Protest? IEEE Secur. Priv. 20 (5) (2022)
Linghui Luo, Felix Pauck, Goran Piskachev, Manuel Benz, Ivan Pashchenko, Martin Mory, Eric Bodden, Ben Hermann, Fabio Massacci
TaintBench: Automatic real-world malware benchmarking of Android taint analyses. Empir. Softw. Eng. 27 (1) (2022)
Fabio Massacci, Silvia Vidor
Building Principles for Lawful Cyber Lethal Autonomous Weapons. IEEE Secur. Priv. 20 (2) (2022)
Francesco Minna, Fabio Massacci, Katja Tuma
Towards a Security Stress-Test for Cloud Configurations. CLOUD (2022)
Luca Mecenero, Ranindya Paramitha, Ivan Pashchenko, Fabio Massacci
Lightweight Parsing and Slicing for Bug Identification in C. ARES (2022)
Giorgio Di Tizio, Michele Armellini, Fabio Massacci
Software Updates Strategies: a Quantitative Evaluation against Advanced Persistent Threats. CoRR (2022)
Ivan Pashchenko, Henrik Plate, Serena Elisa Ponta, Antonino Sabetta, Fabio Massacci
Vuln4Real: A Methodology for Counting Actually Vulnerable Dependencies. IEEE Trans. Software Eng. 48 (5) (2022)
Tina Marjanov, Ivan Pashchenko, Fabio Massacci
Machine Learning for Source Code Vulnerability Detection: What Works and What Isn't There Yet. IEEE Secur. Priv. 20 (5) (2022)
Francesco Ciclosi, Fabio Massacci
The Data Protection Officer, an ubiquitous role nobody really knows. CoRR (2022)
Simone Scalco, Ranindya Paramitha, Duc Ly Vu, Fabio Massacci
On the feasibility of detecting injections in malicious npm packages. ARES (2022)
Alberto Giaretta, Nicola Dragoni, Fabio Massacci
S×C4IoT: A Security-by-contract Framework for Dynamic Evolving IoT Devices. ACM Trans. Sens. Networks 18 (1) (2022)
Fabio Massacci
Pseudo Ground-Truth Generators and Large-Scale Studies. IEEE Secur. Priv. 20 (2) (2022)
Francesco Minna, Fabio Massacci
An Open-Source Cloud Testbed for Security Experimentation. CCGRID (2022)
Daniele Friolo, Fabio Massacci, Chan Nam Ngo, Daniele Venturi
Cryptographic and Financial Fairness. CoRR (2022)
Fabio Massacci, Chan Nam Ngo
Distributed Financial Exchanges: Security Challenges and Design Principles. IEEE Secur. Priv. 19 (1) (2021)
Ganbayar Uuganbayar, Artsiom Yautsiukhin, Fabio Martinelli, Fabio Massacci
Optimisation of cyber insurance coverage with selection of cost effective security controls. Comput. Secur. 101 (2021)
Nicola Dragoni, Alberto Lluch-Lafuente, Fabio Massacci, Anders Schlichtkrull
Are We Preparing Students to Build Security In? A Survey of European Cybersecurity in Higher Education Programs [Education]. IEEE Secur. Priv. 19 (1) (2021)
Ivan Pashchenko, Riccardo Scandariato, Antonino Sabetta, Fabio Massacci
Secure Software Development in the Era of Fluid Multi-party Open Software and Services. ICSE (NIER) (2021)
Ivan Pashchenko, Riccardo Scandariato, Antonino Sabetta, Fabio Massacci
Secure Software Development in the Era of Fluid Multi-party Open Software and Services. CoRR (2021)
Francesco Minna, Agathe Blaise, Filippo Rebecchi, Balakrishnan Chandrasekaran, Fabio Massacci
Understanding the Security Implications of Kubernetes Networking. IEEE Secur. Priv. 19 (5) (2021)
Giorgio Di Tizio, Fabio Massacci
A Calculus of Tracking: Theory and Practice. Proc. Priv. Enhancing Technol. 2021 (2) (2021)
Duc Ly Vu, Fabio Massacci, Ivan Pashchenko, Henrik Plate, Antonino Sabetta
LastPyMile: identifying the discrepancy between sources and packages. ESEC/SIGSOFT FSE (2021)
Duc Ly Vu, Ivan Pashchenko, Fabio Massacci
Please hold on: more time = more patches? Automated program repair as anytime algorithms. APR@ICSE (2021)
Fabio Massacci, Ivan Pashchenko
Technical Leverage in a Software Ecosystem: Development Opportunities and Security Risks. ICSE (2021)
Fabio Massacci, Ivan Pashchenko
Technical Leverage in a Software Ecosystem: Development Opportunities and Security Risks. CoRR (2021)
Sean Peisert, Bruce Schneier, Hamed Okhravi, Fabio Massacci, Terry Benzel, Carl E. Landwehr, Mohammad Mannan, Jelena Mirkovic, Atul Prakash, James Bret Michael
Perspectives on the SolarWinds Incident. IEEE Secur. Priv. 19 (2) (2021)
Fabio Massacci, Trent Jaeger, Sean Peisert
SolarWinds and the Challenges of Patching: Can We Ever Stop Dancing With the Devil? IEEE Secur. Priv. 19 (2) (2021)
Chan Nam Ngo, Fabio Massacci, Florian Kerschbaum, Julian Williams
Practical Witness-Key-Agreement for Blockchain-Based Dark Pools Financial Trading. Financial Cryptography (2) (2021)
Fabio Massacci, Ivan Pashchenko
Technical Leverage: Dependencies Are a Mixed Blessing. IEEE Secur. Priv. 19 (3) (2021)
Pierantonia Sterlini, Fabio Massacci, Natalia Kadenko, Tobias Fiebig, Michel van Eeten
Governance Challenges for European Cybersecurity Policies: Stakeholder Views. IEEE Secur. Priv. 18 (1) (2020)
Luca Allodi, Alice Hutchings, Fabio Massacci, Sergio Pastrana, Marie Vasek
WACCO 2020: the 2nd Workshop on Attackers and Cybercrime Operations Co-held with IEEE European Symposium on Security and Privacy 2020. EuroS&P Workshops (2020)
Chan Nam Ngo, Daniele Friolo, Fabio Massacci, Daniele Venturi, Ettore Battaiola
Vision: What If They All Die? Crypto Requirements For Key People. EuroS&P Workshops (2020)
Ivan Pashchenko, Duc Ly Vu, Fabio Massacci
A Qualitative Study of Dependency Management and Its Security Implications. CCS (2020)
Duc Ly Vu, Ivan Pashchenko, Fabio Massacci, Henrik Plate, Antonino Sabetta
Typosquatting and Combosquatting Attacks on the Python Ecosystem. EuroS&P Workshops (2020)
Duc Ly Vu, Trong-Kha Nguyen, Tam V. Nguyen, Tu N. Nguyen, Fabio Massacci, Phu H. Phung
HIT4Mal: Hybrid image transformation for malware classification. Trans. Emerg. Telecommun. Technol. 31 (11) (2020)
Duc Ly Vu, Ivan Pashchenko, Fabio Massacci, Henrik Plate, Antonino Sabetta
Towards Using Source Code Repositories to Identify Software Supply Chain Attacks. CCS (2020)
Luca Allodi, Marco Cremonini, Fabio Massacci, Woohyun Shim
Measuring the accuracy of software vulnerability assessments: experiments with students and professionals. Empir. Softw. Eng. 25 (2) (2020)
Sebastian Pape, Federica Paci, Jan Jürjens, Fabio Massacci
Selecting a Secure Cloud Provider - An Empirical Study and Multi Criteria Approach. Inf. 11 (5) (2020)
Giorgio Di Tizio, Fabio Massacci, Luca Allodi, Stanislav Dashevskyi, Jelena Mirkovic
An Experimental Approach for Estimating Cyber Risk: a Proposal Building upon Cyber Ranges and Capture the Flags. EuroS&P Workshops (2020)
Ivan Pashchenko, Duc Ly Vu, Fabio Massacci
Preliminary findings on FOSS dependencies and security: a qualitative study on developers' attitudes and experience. ICSE (Companion Volume) (2020)
Alberto Giaretta, Nicola Dragoni, Fabio Massacci
Protecting the Internet of Things with Security-by-Contract and Fog Computing. WF-IoT (2019)
Daniele Friolo, Fabio Massacci, Chan Nam Ngo, Daniele Venturi
Affordable Security or Big Guy vs Small Guy - Does the Depth of Your Pockets Impact Your Protocols? Security Protocols Workshop (2019)
Elia Geretto, Cédric Tessier, Fabio Massacci
A QBDI-based Fuzzer Taming Magic Bytes. ITASEC (2019)
Stanislav Dashevskyi, Daniel Ricardo dos Santos, Fabio Massacci, Antonino Sabetta
TestREx: a framework for repeatable exploits. Int. J. Softw. Tools Technol. Transf. 21 (1) (2019)
Stanislav Dashevskyi, Achim D. Brucker, Fabio Massacci
A Screening Test for Disclosed Vulnerabilities in FOSS Components. IEEE Trans. Software Eng. 45 (10) (2019)
Ganbayar Uuganbayar, Fabio Massacci, Artsiom Yautsiukhin, Fabio Martinelli
Cyber Insurance and Time-to-Compromise: An Integrated Approach. CyberSA (2019)
Duy-Phuc Pham, Duc Ly Vu, Fabio Massacci
Mac-A-Mal: macOS malware analysis framework resistant to anti evasion techniques. J. Comput. Virol. Hacking Tech. 15 (4) (2019)
Duc Ly Vu, Trong-Kha Nguyen, Tam V. Nguyen, Tu N. Nguyen, Fabio Massacci, Phu H. Phung
A Convolutional Transformation Network for Malware Classification. CoRR (2019)
Neline van Ginkel, Willem De Groef, Fabio Massacci, Frank Piessens
A Server-Side JavaScript Security Architecture for Secure Integration of Third-Party Libraries. Secur. Commun. Networks 2019 (2019)
Fabio Massacci
Is "Deny Access" a Valid "Fail-Safe Default" Principle for Building Security in Cyberphysical Systems? IEEE Secur. Priv. 17 (5) (2019)
Ettore Battaiola, Fabio Massacci, Chan Nam Ngo, Pierantonia Sterlini
Blockchain-based Invoice Factoring: from business requirements to commitments. DLT@ITASEC (2019)
Alberto Giaretta, Nicola Dragoni, Fabio Massacci
IoT Security Configurability with Security-by-Contract. Sensors 19 (19) (2019)
Katsiaryna Labunets, Fabio Massacci, Federica Paci, Sabrina Marczak, Flávio Moreira de Oliveira
Model comprehension for security risk assessment: an empirical comparison of tabular vs. graphical representations. ICSE (2018)
Luca Allodi, Fabio Massacci
Attack Potential in Impact and Complexity. CoRR (2018)
Fabio Massacci
Non-monotonic Security Protocols and Failures in Financial Intermediation (Transcript of Discussion). Security Protocols Workshop (2018)
Fabio Massacci, Chan Nam Ngo, Daniele Venturi, Julian Williams
Non-monotonic Security Protocols and Failures in Financial Intermediation. Security Protocols Workshop (2018)
Luca Allodi, Marco Cremonini, Fabio Massacci, Woohyun Shim
The Effect of Security Education and Expertise on Security Assessments: the Case of Software Vulnerabilities. CoRR (2018)
Fabio Massacci, Chan Nam Ngo, Jing Nie, Daniele Venturi, Julian Williams
FuturesMEX: Secure, Distributed Futures Market Exchange. IEEE Symposium on Security and Privacy (2018)
Ivan Pashchenko, Henrik Plate, Serena Elisa Ponta, Antonino Sabetta, Fabio Massacci
Vulnerable Open Source Dependencies: Counting Those That Matter. CoRR (2018)
Ivan Pashchenko, Henrik Plate, Serena Elisa Ponta, Antonino Sabetta, Fabio Massacci
Vulnerable open source dependencies: counting those that matter. ESEM (2018)
Luca Allodi, Silvio Biagioni, Bruno Crispo, Katsiaryna Labunets, Fabio Massacci, Wagner Santos
Estimating the Assessment Difficulty of CVSS Environmental Metrics: An Experiment. FDSE (2017)
Fabio Massacci, Chan Nam Ngo, Jing Nie, Daniele Venturi, Julian Williams
The Seconomics (Security-Economics) Vulnerabilities of Decentralized Autonomous Organizations. Security Protocols Workshop (2017)
Ha Xuan Son, Tran Khanh Dang, Fabio Massacci
REW-SMT: A New Approach for Rewriting XACML Request with Dynamic Big Data Security Policies. SpaCCS (2017)
Katsiaryna Labunets, Andrea Janes, Michael Felderer, Fabio Massacci
Teaching predictive modeling to junior software engineers - seminar format and its evaluation: poster. ICSE (Companion Volume) (2017)
Ali Davanian, Fabio Massacci, Luca Allodi
Diversity: A Poor Man's Solution to Drone Takeover. PECCS (2017)
Katsiaryna Labunets, Fabio Massacci, Federica Paci
On the Equivalence Between Graphical and Tabular Representations for Security Risk Assessment. REFSQ (2017)
Maria Riaz, Jason Tyler King, John Slankas, Laurie A. Williams, Fabio Massacci, Christian Quesada-López, Marcelo Jenkins
Identifying the implied: Findings from three differentiated replications on the use of security requirements templates. Empir. Softw. Eng. 22 (4) (2017)
Stanislav Dashevskyi, Daniel Ricardo dos Santos, Fabio Massacci, Antonino Sabetta
TestREx: a Framework for Repeatable Exploits. CoRR (2017)
Ivan Pashchenko, Stanislav Dashevskyi, Fabio Massacci
Delta-Bench: Differential Benchmark for Static Analysis Security Testing Tools. ESEM (2017)
Katsiaryna Labunets, Fabio Massacci, Federica Paci, Sabrina Marczak, Flávio Moreira de Oliveira
Model comprehension for security risk assessment: an empirical comparison of tabular vs. graphical representations. Empir. Softw. Eng. 22 (6) (2017)
Katsiaryna Labunets, Fabio Massacci, Alessandra Tedeschi
Graphical vs. Tabular Notations for Risk Models: On the Role of Textual Labels and Complexity. ESEM (2017)

Fabio Massacci.css-eqlu8i{font-size:small;padding-left:4px;}

Publication Activity (10 Years)

Top Topics

Top Venues

Fabio Massacci